Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File:                     f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier:          wVOsQX1Ij4duEW5XdKn1hlgTnNBwqtDjXFCW1B9YeXU=
Subject key identifier:   E7:F6:D0:09:CF:5C:03:70:D4:25:37:2B:D5:2A:C8:55:44:C5:C7:3E
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer:       /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial:       019FA003EA68B889EB80786C951ECCE28CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number:          1556
Signing time:             Sun 26 Jul 2026 20:00:38 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:38 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:38 +0000
Files and hashes:         1: G6WXhyvVtMAy_hDzbTynLKDz6nI.roa (hash: hU50SCH6HViVYgZI7FoCwUv3dNNmWkj31LMFtbg1FRw=)
                          2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: vhu3YPwAQbDVMnK1MKgCJq6I/+DflcQ8klyUsN3FytI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:ea:68:b8:89:eb:80:78:6c:95:1e:cc:e2:8c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
        Validity
            Not Before: Jul 26 20:00:38 2026 GMT
            Not After : Jul 27 20:00:38 2026 GMT
        Subject: CN=e7f6d009cf5c0370d425372bd52ac85544c5c73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:b3:1e:a5:b3:bd:c8:9a:56:29:6d:e9:b0:
                    81:8c:2a:17:49:f6:37:19:a9:6f:f5:54:7c:e5:3d:
                    64:3c:28:40:8f:85:2e:fb:f0:2d:b6:25:8e:96:21:
                    3b:1a:ca:99:4d:da:dd:c9:56:6a:37:9a:68:ac:96:
                    69:3f:8d:f3:98:fa:b1:e9:54:c6:24:8d:3d:40:e6:
                    e5:b6:13:ce:6b:11:fb:d4:ba:ab:04:1c:b7:be:c5:
                    c7:48:f4:9b:0f:8b:ce:11:7c:ac:15:88:93:7e:fd:
                    52:70:e2:b3:ca:63:5b:1a:da:f3:05:ba:3f:20:d6:
                    7d:78:ac:7b:08:72:69:5b:01:52:73:c3:f2:64:70:
                    7b:f7:63:a8:d2:a9:f0:bf:5e:09:ff:ae:22:f8:81:
                    04:1f:3a:78:1b:cc:c7:57:3f:6c:59:35:a8:91:ea:
                    ea:b6:f5:67:7b:a6:2a:3f:65:71:99:50:05:bf:2d:
                    e6:fe:17:8b:c5:8f:7d:32:f7:a9:d1:5d:26:18:52:
                    af:68:09:07:a4:85:12:36:97:d3:ae:c0:57:7d:ff:
                    94:1d:b7:56:50:0d:e2:1d:74:86:a0:11:87:f2:36:
                    73:7b:ae:f3:a9:ab:2f:1c:50:aa:d4:86:b2:a4:47:
                    ac:39:00:01:2f:32:8c:df:13:0a:6e:a8:5d:42:fb:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F6:D0:09:CF:5C:03:70:D4:25:37:2B:D5:2A:C8:55:44:C5:C7:3E
            X509v3 Authority Key Identifier:
                keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:28:d5:69:9a:a8:ff:ca:ef:56:75:57:33:30:1b:4b:e2:
         15:a2:af:04:03:0a:60:7f:dc:6a:95:b9:50:bb:55:f3:68:4f:
         e7:ec:07:28:a8:ad:26:c1:b4:78:46:9b:fa:a5:9d:0b:8f:00:
         fd:29:20:38:b3:bf:c7:9f:da:b4:60:3c:63:e6:1a:09:1b:5a:
         19:0e:07:0c:c4:34:9e:67:31:0f:b5:90:d2:6b:5d:da:3a:28:
         d5:64:05:82:05:6d:57:6d:f4:cb:72:7a:96:8c:c2:38:ad:7f:
         45:35:a2:e2:b0:10:15:c7:b8:0e:a0:e7:da:b7:94:ce:2e:1a:
         a4:79:1b:0a:d3:30:fb:86:9d:47:65:74:4d:d4:5c:7e:f5:78:
         47:56:f5:86:cd:07:87:dc:63:f3:b8:8a:a9:c5:3c:da:42:62:
         e2:ee:18:ea:50:92:dc:cc:b6:dd:1b:04:a1:ce:c2:f0:d8:e8:
         4c:be:21:53:c4:e9:4e:02:12:77:da:bf:7e:01:b0:0e:b7:7d:
         69:f9:70:91:c9:8b:6d:7d:ae:0d:c2:37:f3:00:aa:95:21:23:
         96:0a:61:1a:93:e2:4e:f1:5a:27:d0:41:f2:52:f7:36:49:2b:
         b0:5c:d4:47:0f:9c:16:08:9a:01:88:66:28:dc:f4:6a:9f:da:
         94:94:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:21:59 2026 by rpki-client