Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/24l1skz7ntxuiggv0Fs-G1Ixnmw.mft
File:                     24l1skz7ntxuiggv0Fs-G1Ixnmw.mft (raw, json)
Hash identifier:          F1NBBKxyb8vPR5cOt8Hoh2rn20moj1y1YExvbfwAF94=
Subject key identifier:   14:C4:AD:42:4D:F5:20:2A:02:B4:FF:AB:08:C5:19:C2:49:B4:DA:35
Authority key identifier: DB:89:75:B2:4C:FB:9E:DC:6E:8A:08:2F:D0:5B:3E:1B:52:31:9E:6C
Certificate issuer:       /CN=db8975b24cfb9edc6e8a082fd05b3e1b52319e6c
Certificate serial:       01A0412978F1692B6657FBAEA797940D2724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24l1skz7ntxuiggv0Fs-G1Ixnmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/24l1skz7ntxuiggv0Fs-G1Ixnmw.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:00:31 +0000
Manifest this update:     Thu 27 Aug 2026 03:00:31 +0000
Manifest next update:     Fri 28 Aug 2026 03:00:31 +0000
Files and hashes:         1: 24l1skz7ntxuiggv0Fs-G1Ixnmw.crl (hash: wg86vx+9UBH5z7d9pIKZs3tJKnUlahngz1/AfG6u/FY=)
                          2: UQU1US6_3mB56VjeLcRLs-kNhuA.roa (hash: yaHOSirjpxdqwqSWsSE6mn+lXHpQJEyqN8mVa5doJVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/24l1skz7ntxuiggv0Fs-G1Ixnmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/24l1skz7ntxuiggv0Fs-G1Ixnmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24l1skz7ntxuiggv0Fs-G1Ixnmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:29:78:f1:69:2b:66:57:fb:ae:a7:97:94:0d:27:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8975b24cfb9edc6e8a082fd05b3e1b52319e6c
        Validity
            Not Before: Aug 27 03:00:31 2026 GMT
            Not After : Aug 28 03:00:31 2026 GMT
        Subject: CN=14c4ad424df5202a02b4ffab08c519c249b4da35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:c0:4d:e9:e9:86:ba:6e:55:0d:51:ce:3d:
                    0c:a4:6d:fe:3c:90:d9:0f:27:1e:c5:51:54:68:fc:
                    b5:76:7b:f1:5a:58:34:b3:28:6e:5c:51:dd:25:98:
                    8b:ae:4c:24:1e:f3:f9:01:1e:51:0f:41:c0:11:0c:
                    72:2d:a8:31:be:dc:d6:fe:a5:66:ac:f6:58:c2:bb:
                    5e:99:c1:97:5d:1a:23:84:5f:e4:9b:7a:d7:98:08:
                    6e:9c:9e:c7:01:46:1f:27:24:3f:15:b8:34:77:1d:
                    4f:b8:e2:d6:cd:ac:9a:39:49:d2:7a:3d:29:f0:04:
                    f4:4f:05:85:1e:cb:e5:81:ce:7e:46:9e:71:3a:74:
                    5d:1a:46:3d:e1:2c:ca:4f:5f:07:ee:3f:b9:20:ea:
                    bb:26:a4:1b:1f:d8:c2:6d:db:1b:2a:c3:4a:c0:1f:
                    04:2d:70:5d:e6:49:8a:97:1d:44:a4:15:7c:9b:65:
                    14:91:dd:52:07:d5:f8:05:28:e7:21:00:41:b2:7c:
                    86:2d:7a:8b:f5:7d:da:6b:83:44:9e:ed:f3:09:d8:
                    f7:20:46:f7:80:11:65:74:c5:8a:09:e9:f3:5e:63:
                    80:a7:8b:1e:31:d3:5f:1f:04:01:01:31:64:0f:d9:
                    56:c0:95:22:50:31:34:66:55:95:b2:64:d2:a3:c2:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C4:AD:42:4D:F5:20:2A:02:B4:FF:AB:08:C5:19:C2:49:B4:DA:35
            X509v3 Authority Key Identifier:
                keyid:DB:89:75:B2:4C:FB:9E:DC:6E:8A:08:2F:D0:5B:3E:1B:52:31:9E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24l1skz7ntxuiggv0Fs-G1Ixnmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/24l1skz7ntxuiggv0Fs-G1Ixnmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/24l1skz7ntxuiggv0Fs-G1Ixnmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:22:e3:7e:99:e5:fc:30:08:7c:bf:c6:f2:e5:a0:78:c9:95:
         bc:ee:d6:06:af:f8:c6:72:93:27:bf:a1:33:b6:f3:c7:c9:47:
         4d:b4:1f:13:ac:16:08:78:16:82:ce:be:9f:3e:fc:13:14:a0:
         aa:9a:69:61:12:9c:8e:ea:fb:9f:d4:24:0b:14:6a:b5:1b:ab:
         bd:74:96:7c:9c:57:7e:4f:e5:07:da:30:93:0b:a1:ab:c1:90:
         68:81:56:95:e3:90:51:00:24:b7:7b:7f:32:7b:71:e7:ef:da:
         63:9a:f2:52:e7:88:b1:3f:ad:eb:3b:f4:5a:0a:62:44:81:7b:
         11:fe:fa:e2:e0:03:27:3d:1d:b6:56:20:20:57:ac:d6:12:2a:
         41:79:3b:12:da:66:45:07:25:5b:c9:99:14:ec:a4:3c:ed:d4:
         e9:6f:f4:34:52:50:21:7a:38:78:ba:c0:f8:54:d7:e8:04:57:
         c5:60:6f:28:33:e8:ca:44:a4:c4:ac:80:bf:3d:7a:d9:b2:93:
         f7:23:70:f4:b4:c7:e9:32:7b:c9:6b:f9:fb:d4:5b:41:4e:d1:
         6e:64:26:aa:f0:c8:62:9d:d4:4b:20:93:9a:bf:8e:2f:d5:84:
         82:bf:2e:95:57:42:99:5a:b2:bd:ea:02:4a:1f:90:71:05:6c:
         47:68:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:57:20 2026 by rpki-client