Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File:                     vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier:          1Jd0oBOCQSKAM7JjShf3inrSjet62TBhaX0HXGcS7+c=
Subject key identifier:   A6:84:66:40:72:3A:C3:B9:66:83:E1:C3:DF:5C:2D:38:B0:A0:1D:56
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer:       /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial:       019F864449D07A550CC990C853A4B78A6BB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number:          0457
Signing time:             Tue 21 Jul 2026 20:00:50 +0000
Manifest this update:     Tue 21 Jul 2026 20:00:50 +0000
Manifest next update:     Wed 22 Jul 2026 20:00:50 +0000
Files and hashes:         1: FKbR9jGxYRX9V8_8o4DRVVGFjPU.roa (hash: Og48h/OvPKZ/MgS2Z6y01qdzTx8n+7C8XDKbughbbnk=)
                          2: OlHHMfPygKkyr7HTvCn4K8p01_U.roa (hash: N9V2kxguErly1WsufOsx/epgV4HMlIpbzSH7yTgCKok=)
                          3: XsF3kqYrpgaSa5NalYy0M03i-cY.roa (hash: kTWWKS//k4z/sGjJu+0LeZP0dfIbCea1JbNwryY8JAo=)
                          4: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: t5ss1tvGRSyznwoIVwJNiG6XNsK5rKkeY5IZOvOMQi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:44:49:d0:7a:55:0c:c9:90:c8:53:a4:b7:8a:6b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
        Validity
            Not Before: Jul 21 20:00:50 2026 GMT
            Not After : Jul 22 20:00:50 2026 GMT
        Subject: CN=a6846640723ac3b96683e1c3df5c2d38b0a01d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:29:db:94:1d:24:61:02:5d:e9:a0:04:12:
                    d2:b7:8b:16:0c:6a:ea:0a:e7:ec:e4:40:26:ab:05:
                    de:7a:6a:63:05:ca:2b:5b:f3:13:91:42:3f:b4:6e:
                    69:fe:49:9f:39:4a:ff:c9:9a:45:cf:0e:fd:93:43:
                    c1:0b:bd:ed:dd:9f:8f:75:3c:06:98:2c:0b:25:d5:
                    89:e8:04:8c:48:d9:5c:f6:0e:3b:52:0d:c5:fd:7f:
                    3f:b6:59:b2:f7:2b:2f:a5:82:e4:be:a1:67:ab:08:
                    8a:28:d7:af:03:eb:38:70:70:f7:7c:94:0c:32:4a:
                    78:cb:16:a3:99:73:10:42:72:ad:d0:78:66:31:34:
                    c2:68:61:65:49:d1:fc:dd:13:61:99:57:25:03:cc:
                    64:a0:ce:3c:a4:0d:4b:21:54:85:b0:13:63:4c:c6:
                    c3:83:f1:ad:f2:2f:68:9b:dd:46:63:08:71:8e:95:
                    0e:34:6f:53:50:c3:31:eb:06:f8:f5:c7:5b:cf:d8:
                    7d:e4:3f:33:80:29:d7:5b:f9:ce:82:dc:70:8b:03:
                    b0:93:61:91:d4:df:0b:6a:5f:8f:42:9b:ec:3b:dd:
                    54:c2:30:15:e8:72:f5:27:e7:7a:fd:4c:1f:0f:f9:
                    0c:94:97:9c:4d:9f:35:5d:e3:3f:5c:44:bc:67:bb:
                    da:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:84:66:40:72:3A:C3:B9:66:83:E1:C3:DF:5C:2D:38:B0:A0:1D:56
            X509v3 Authority Key Identifier:
                keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:a4:6c:21:ec:e2:a8:10:3a:68:7b:37:62:ac:79:d0:90:
         b4:1e:f8:56:c1:05:07:df:50:f7:13:e8:7f:20:64:86:58:83:
         3f:a4:fb:d7:23:2b:0d:d9:51:15:f6:39:86:35:4b:92:d3:39:
         5f:3d:fb:ad:a1:94:62:ed:28:30:3a:55:97:41:8d:95:1c:5b:
         6b:6b:5b:68:5d:da:0b:d6:e9:3a:a2:71:b8:31:8a:ea:e1:52:
         69:b2:d8:78:be:e2:2e:54:a6:51:93:a8:45:d8:d1:0d:e5:93:
         55:a5:7c:7e:35:72:df:95:1f:cc:c4:5a:39:63:b7:2f:b7:20:
         dc:29:0a:f3:54:e7:b3:b5:3d:ce:ae:73:be:9b:ae:71:ef:8d:
         79:f5:da:f5:6d:9c:87:f8:31:30:0d:d8:ab:29:e7:1b:39:2f:
         1d:24:fe:8b:94:06:b7:c1:05:c4:44:5e:22:51:0a:75:74:37:
         ee:ce:07:f9:df:14:7e:7f:49:d1:dd:6b:fd:f9:3a:27:87:2a:
         e7:1f:19:c9:bb:99:ea:3c:38:9d:c5:96:bf:b7:cb:6c:c9:53:
         01:25:80:34:1e:8d:c6:6f:a4:f9:94:0f:9c:bc:06:7a:11:f6:
         89:15:01:98:88:45:c5:db:c4:6f:5e:0c:0a:7d:fb:30:f8:6f:
         ae:50:dc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:38 2026 by rpki-client