Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File:                     f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier:          rTG1GAzJT3j7zwMJCH4b17+zNQKFxJyyzLPWbz0IfcQ=
Subject key identifier:   F1:D3:6B:5A:9F:BB:BF:21:35:6C:65:88:AF:DC:1A:4B:A7:96:C2:8F
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer:       /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial:       019FA003AEF25E840D81AB6F623D69BA597E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number:          05FD
Signing time:             Sun 26 Jul 2026 20:00:23 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:23 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:23 +0000
Files and hashes:         1: L5BfioWz08XOKOc7LGuDTFScCDM.roa (hash: oJjcndnAKImb4AebXhMuHLKYhu0NzBboRQfoXDCNW0c=)
                          2: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
                          3: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: NpaHTOBsJgXhlmIuYaWViUip6MsaPxpV9ySQwGs4CqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:ae:f2:5e:84:0d:81:ab:6f:62:3d:69:ba:59:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
        Validity
            Not Before: Jul 26 20:00:23 2026 GMT
            Not After : Jul 27 20:00:23 2026 GMT
        Subject: CN=f1d36b5a9fbbbf21356c6588afdc1a4ba796c28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:ab:86:22:dd:cb:04:ba:9c:3f:61:84:85:
                    6b:1c:32:d0:5e:45:72:c8:b8:c2:1c:d7:89:d5:17:
                    59:26:a3:10:70:84:e3:74:bb:1c:8d:9e:4d:01:59:
                    8e:30:97:b4:9d:f0:64:b1:fe:a4:94:0f:6e:23:dc:
                    e7:35:c5:3b:d6:91:b9:c3:9b:cf:ca:fd:48:a6:36:
                    89:5f:4e:db:59:52:f8:e9:4f:34:66:9f:a9:ef:98:
                    73:ae:83:7f:46:c8:43:dd:2f:80:fa:bd:7c:fa:5f:
                    d3:c7:49:e1:27:11:82:48:a5:b1:23:0f:6f:13:af:
                    34:87:da:df:c6:d1:3c:f1:26:5a:91:62:5c:e2:1f:
                    24:1a:85:8a:6d:0e:84:4a:93:f0:9b:b2:fb:a8:ff:
                    6e:da:5c:76:92:9f:af:a7:b4:83:87:b3:78:b4:3b:
                    f4:61:dc:8c:7a:6c:3e:01:b0:c8:30:a1:48:04:c3:
                    c2:2d:5b:9a:5f:81:7e:25:fc:ee:a3:52:65:32:1c:
                    b4:4b:0b:ef:be:b6:d5:26:9e:be:65:e8:5d:5c:11:
                    eb:cb:a1:26:e4:a4:01:ca:ef:e2:7f:1e:0f:95:f8:
                    fa:f6:95:d2:4b:b9:2f:84:9d:86:66:39:35:3b:c1:
                    d6:8b:bd:44:44:b1:ef:39:bd:5a:63:d8:b8:42:8a:
                    97:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D3:6B:5A:9F:BB:BF:21:35:6C:65:88:AF:DC:1A:4B:A7:96:C2:8F
            X509v3 Authority Key Identifier:
                keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1a:de:ec:ce:b9:c7:6e:fe:67:b3:ca:d1:a1:94:f4:73:02:
         9a:15:d4:66:e2:fa:ee:fe:12:ab:f0:cb:75:77:13:c9:f2:c2:
         0b:48:50:7d:34:73:2a:c9:be:a8:5e:03:7f:a7:64:75:a0:08:
         5b:cf:3c:ea:b9:51:d0:d0:43:8a:3b:18:2c:63:f8:cb:06:5f:
         4d:26:f3:25:75:d0:0d:1f:4f:83:bd:b7:cd:0f:ff:c7:27:8f:
         af:02:05:87:57:ff:fa:40:17:9f:4b:2b:88:aa:d1:b2:b3:5f:
         24:c2:f8:a8:5a:1b:3e:9c:ba:cf:6b:d4:30:20:8a:50:76:b9:
         4f:de:26:31:2d:9f:ee:70:1b:d9:40:33:94:9f:a0:cd:cc:c9:
         15:dd:52:ae:af:89:42:39:57:bd:32:40:23:0f:3e:21:d0:2a:
         c9:4e:fe:78:d4:29:8e:27:8f:b3:bb:a2:9f:6f:90:c8:dd:6c:
         be:2a:db:2b:6d:43:9b:5a:4c:bc:58:ff:40:e0:df:6d:b8:81:
         30:c1:e3:e3:d4:ad:69:8c:0d:fd:f5:f6:90:63:c0:af:89:3a:
         a3:2e:9a:92:f9:b3:9f:9a:2d:bc:0c:70:c0:81:d8:fc:63:4d:
         56:0f:12:af:bb:5c:8e:07:f5:da:9e:2f:15:1c:68:d2:e3:85:
         de:a6:a8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:52:37 2026 by rpki-client