Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
File:                     s5V9y_9QghTcodun9TIXIFs-Tqo.mft (raw, json)
Hash identifier:          mtSnfnzbXH0b3rwI7/HgMjqGfbvL2QYmP/2veFBUpFU=
Subject key identifier:   7E:43:3E:66:BD:93:F9:4D:03:97:EB:AF:64:DF:FB:61:BD:22:BA:83
Authority key identifier: B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA
Certificate issuer:       /CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
Certificate serial:       019F65025BFF4A801700ABFDD7EB11799480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
Manifest number:          29
Signing time:             Wed 15 Jul 2026 09:01:20 +0000
Manifest this update:     Wed 15 Jul 2026 09:01:20 +0000
Manifest next update:     Thu 16 Jul 2026 09:01:20 +0000
Files and hashes:         1: _WtOo9YuQrokwTxQAJF58cfpSiw.roa (hash: OUo6i8y7m+/3FUoqkAIpfYsD0Rzx/nPmH8P0JQ2rHyk=)
                          2: s5V9y_9QghTcodun9TIXIFs-Tqo.crl (hash: 2d+EEG2BsbzlGEihTQneDJpFy3Qeu7e2/inq7AgnbNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:65:02:5b:ff:4a:80:17:00:ab:fd:d7:eb:11:79:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
        Validity
            Not Before: Jul 15 09:01:20 2026 GMT
            Not After : Jul 16 09:01:20 2026 GMT
        Subject: CN=7e433e66bd93f94d0397ebaf64dffb61bd22ba83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:6b:31:42:39:a5:c9:b5:3c:55:39:f4:95:
                    81:df:8c:cb:46:8c:2c:4f:1e:13:28:0c:ef:91:87:
                    f3:57:50:64:e6:17:d4:47:67:e5:ff:21:64:e9:7b:
                    92:84:52:98:89:a8:14:8f:c6:07:85:98:f7:a3:5b:
                    92:b8:ef:1b:15:88:b2:19:2a:1c:0c:62:fc:c6:22:
                    56:9c:7e:2b:bb:57:12:64:7d:97:81:8a:11:3c:51:
                    67:fb:b4:23:0d:6f:03:d5:63:d6:45:58:bb:86:55:
                    e6:c8:08:85:f2:38:c1:37:ca:57:11:85:ab:ba:b7:
                    6c:a9:81:9e:21:5f:9d:c1:2d:4e:30:b7:d4:31:0d:
                    73:40:87:ff:54:c0:f2:c2:45:3f:c6:5f:56:49:53:
                    b8:71:1d:c1:1c:b2:9f:61:d0:37:39:62:2b:df:f5:
                    99:46:7a:53:7b:4c:41:07:48:05:e2:fd:71:47:12:
                    40:03:96:55:5a:91:14:ec:e2:7e:6d:77:59:38:14:
                    1f:a0:b9:77:c4:b9:3d:17:54:ac:db:d7:05:9e:e5:
                    19:13:4f:bd:a6:ac:6f:72:15:d7:ca:bf:67:17:a4:
                    1e:3c:f7:57:e6:c5:cd:b9:33:0e:3b:27:22:fe:b4:
                    1e:62:53:47:bc:7a:53:c1:11:6f:b3:07:0e:bc:6a:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:43:3E:66:BD:93:F9:4D:03:97:EB:AF:64:DF:FB:61:BD:22:BA:83
            X509v3 Authority Key Identifier:
                keyid:B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:33:1b:28:f9:89:b9:0c:0f:df:1f:21:ff:28:57:34:14:b5:
         f6:c2:7b:2f:e2:d8:32:d9:5b:69:16:c7:8f:0f:0d:52:38:35:
         7f:18:3f:62:47:39:c1:e8:0f:1d:fe:a4:8d:b2:9b:63:42:ec:
         db:7b:be:6e:57:b9:87:87:cf:a7:92:eb:32:0d:9a:49:af:fa:
         a6:69:37:60:83:08:c8:9a:40:03:96:4b:f9:ab:c1:8c:6d:17:
         64:83:62:86:cb:69:e1:d2:9e:3e:07:a7:49:28:f7:33:a5:07:
         bb:64:ea:54:2c:3b:81:e0:83:ef:01:f3:c6:c1:eb:20:51:45:
         cd:7c:09:88:e2:a9:77:d4:96:2c:3a:e0:74:36:88:22:07:3e:
         78:85:aa:29:1e:30:47:55:c4:4d:a0:ca:da:82:e0:c8:b9:e2:
         69:dc:da:42:eb:91:33:f1:dd:e0:e8:f1:03:36:e1:1e:15:2a:
         1d:f7:c2:11:79:2a:b6:c0:1d:09:60:53:c0:66:61:af:b9:76:
         a1:cc:6f:b6:24:1b:e3:ac:15:2d:8a:60:71:f7:27:ea:57:0f:
         b9:49:bc:ab:43:57:b1:42:73:ae:6d:c7:d6:0e:f9:3e:ae:17:
         70:f5:c4:83:78:fe:bc:9f:c9:a3:61:d6:fa:2a:5c:d7:11:69:
         ba:a9:c9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 14:35:39 2026 by rpki-client