Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File:                     h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier:          C/YrhGGtV0soFlzLAToIoJrp1WoeFFQ7G6ZIROLG14w=
Subject key identifier:   DD:9E:6C:BF:62:60:EC:83:10:65:A0:53:47:ED:3B:25:AD:E0:FF:C4
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer:       /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial:       019F83E7A9B2B34781BEF4C7E78832993D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number:          19D3
Signing time:             Tue 21 Jul 2026 09:00:25 +0000
Manifest this update:     Tue 21 Jul 2026 09:00:25 +0000
Manifest next update:     Wed 22 Jul 2026 09:00:25 +0000
Files and hashes:         1: 4L2HrkOMp5Px3ZdgqOBGMnz6oXw.roa (hash: qjbkKzm11wnXRFJIt4quryujdmBS5m5m8Id3/w9vHFw=)
                          2: 78tSQmB_UZC_rIGDHLnxnqOm3fI.roa (hash: 3kNkwMTWy/XYCkJODFF1IVosQpGtDfhW2/dwVf0UwBQ=)
                          3: C3Lj3Wt6YNWIPGHmadEQ-dchhaw.roa (hash: fn0aOrz4mN4OtO/EtlMrSuF4wh5zaQaJSbD2ep7jxzI=)
                          4: JIk4GJqmgSwzYSk0JGPNI21QRnM.roa (hash: 45ZLZSPO108JAO0yb1j8MEBiHT4QdE4zU9XBhQbVqtg=)
                          5: PY323kbvCRFsNrwGFI26gXv0gpE.roa (hash: U0ksXLpw7uH4vwqe/cNwV58+FVim6JoHjXiFGt1giNE=)
                          6: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: rljFsr60EGsDHczSwsqTmtiRBovRnqRBtajg7MGeXzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 09:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:e7:a9:b2:b3:47:81:be:f4:c7:e7:88:32:99:3d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
        Validity
            Not Before: Jul 21 09:00:25 2026 GMT
            Not After : Jul 22 09:00:25 2026 GMT
        Subject: CN=dd9e6cbf6260ec831065a05347ed3b25ade0ffc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:4f:b2:6c:1c:25:84:a5:6c:67:18:8f:0f:
                    73:bf:3b:86:be:73:25:90:3d:1c:51:fe:70:f9:84:
                    fd:4d:76:de:64:18:24:55:4d:d8:3e:d1:b5:00:17:
                    7b:bb:23:9e:24:3f:30:99:c5:64:3e:59:55:ef:aa:
                    db:b6:fd:25:66:6a:f9:ac:77:4f:1c:b3:0f:ee:43:
                    3c:3b:5c:ae:cb:a1:7a:31:33:47:a1:c0:cd:59:b0:
                    19:88:8d:cc:66:7a:68:d6:72:f4:39:38:82:4a:12:
                    02:a7:dc:ca:52:57:f4:af:7d:58:59:8e:5d:88:c7:
                    ae:c3:13:b8:47:f2:6e:87:15:c0:de:94:85:1a:9b:
                    f5:ab:59:ec:28:9c:d9:ac:ba:2d:3c:50:87:46:59:
                    7a:83:a1:d4:72:ab:7d:cf:d3:d7:5f:64:fb:86:30:
                    55:9a:85:fe:b1:36:2e:07:10:1e:9f:dc:2f:4e:50:
                    25:ce:9b:61:22:3a:02:fe:5c:ef:51:5d:f6:47:13:
                    83:65:cf:bc:9c:c7:e3:96:40:43:2f:b8:32:47:63:
                    a4:91:67:2d:3c:84:9a:1b:16:f2:c4:cb:ca:c9:2a:
                    14:68:c2:46:99:82:e3:dd:d9:3f:f6:85:71:83:49:
                    4e:e3:8a:3d:84:7d:71:d6:b5:33:7d:da:16:3c:f3:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9E:6C:BF:62:60:EC:83:10:65:A0:53:47:ED:3B:25:AD:E0:FF:C4
            X509v3 Authority Key Identifier:
                keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:f5:5a:6a:eb:13:3d:a5:3a:48:61:b0:dc:8c:d2:2c:8a:
         7f:ad:44:94:5a:2e:25:44:96:40:ca:49:eb:c7:f6:0e:4c:8b:
         21:f4:eb:d3:64:d1:fd:cf:6a:30:2b:c4:bc:54:40:f0:0f:67:
         f9:05:93:6b:18:80:f1:b6:b1:29:f6:ab:04:9e:1c:01:e0:e0:
         e0:97:78:bd:43:0c:b7:a5:13:ef:fe:1e:a1:56:e5:d5:c3:1b:
         04:0c:a0:e3:82:f7:ed:d2:3d:2e:ef:b4:c2:ad:0c:28:e8:f7:
         e9:c8:69:4c:3a:b3:f7:88:4f:23:ad:5c:fb:ac:65:7a:80:7a:
         5f:62:5b:7c:23:d3:e0:3a:85:ec:3e:c7:1c:f8:0b:ac:a6:0d:
         cb:8f:54:35:f9:be:ba:60:6c:fd:66:47:14:18:61:62:4c:4c:
         01:e3:b3:0a:c0:26:d6:79:70:53:08:16:2b:3c:37:a3:a6:f8:
         96:9d:2c:fc:8c:12:0c:6e:85:27:8f:4d:e1:dd:c5:c2:4e:8e:
         81:93:3d:62:b9:1f:b1:78:e7:73:e5:88:3f:7a:87:1c:11:d5:
         3b:ce:9f:c4:37:34:fe:14:f0:ed:46:37:27:03:95:a8:67:f4:
         04:d3:8c:ac:62:c8:9a:9b:c8:ff:d1:5b:69:b4:03:e9:6e:d6:
         5b:60:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:04:42 2026 by rpki-client