Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
File:                     98sUpB-NnmKNroj0dSgi_Hff7AI.mft (raw, json)
Hash identifier:          t119wQR70rAAs8oK128OXEOqGdMLQiTtVw8SqioGvSY=
Subject key identifier:   7B:91:78:62:A7:1D:C0:92:BC:CB:1A:A0:57:D9:79:87:AA:5E:44:65
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Certificate issuer:       /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial:       019FA605C4F67F1FE904540EC2C53DC638A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
Manifest number:          19D8
Signing time:             Tue 28 Jul 2026 00:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 00:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 00:00:23 +0000
Files and hashes:         1: 98sUpB-NnmKNroj0dSgi_Hff7AI.crl (hash: CeILgbaSHlLHu82nVOniumn2aox3atvIwrR9yCU4PuA=)
                          2: ICjxcQK82ea7Xb7en5rLnCcbVD8.roa (hash: zddIqD4bnTjl0bvdvHZDyK9AYwU//2NAO0jrHUcMa98=)
                          3: Nio_RrZ5Nln0tYiAmsafEDW2mdw.roa (hash: vuFJHm7O0bajNnLfbrwtzNdm/nut7vgJNjCbdJojUQg=)
                          4: OwjPnlisGDUZdsOdhkm7WqfS97o.roa (hash: z+3nyFF5ATMpyCfr9E8+TN0uSx1GRXzgvEJpueI61iw=)
                          5: tg8sRY8C-CGe0j2_BQc-V9xv2NM.roa (hash: peV+2Yl1optmH9HpZPRl3Di4cbcQPUbyLxiY8B4DOuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 21:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a6:05:c4:f6:7f:1f:e9:04:54:0e:c2:c5:3d:c6:38:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
        Validity
            Not Before: Jul 28 00:00:23 2026 GMT
            Not After : Jul 29 00:00:23 2026 GMT
        Subject: CN=7b917862a71dc092bccb1aa057d97987aa5e4465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:4d:8c:ff:55:8c:df:0e:48:ee:3b:fe:41:
                    cf:05:3a:05:7b:2c:25:a0:7f:38:8f:19:03:36:58:
                    6b:3a:ec:1a:7d:b3:ad:b9:21:ae:29:e2:ee:11:9e:
                    2f:1c:fe:18:4b:d1:01:46:13:da:32:e5:f8:cf:38:
                    26:e7:93:fb:06:a6:bf:61:76:52:6e:44:a6:dd:46:
                    67:eb:e5:8f:fc:89:93:88:f2:b5:2d:d4:ee:52:06:
                    a8:e5:83:99:39:aa:82:38:8c:0b:22:7a:b6:6f:65:
                    94:85:de:7d:8f:58:3a:18:c4:ac:26:d4:43:39:95:
                    a1:12:7f:96:7c:60:b6:91:10:16:f9:5f:89:48:38:
                    28:11:56:95:b8:91:de:2b:60:e6:68:47:b5:01:19:
                    be:ec:b1:f8:d2:e0:bc:07:39:32:63:1b:bc:57:5e:
                    32:cc:44:4a:36:74:4a:03:4b:17:40:1b:3d:cd:ec:
                    6b:08:62:cb:33:eb:92:33:c5:80:86:9a:8d:a7:b1:
                    db:19:54:0b:98:23:59:18:45:82:69:64:3d:68:ec:
                    8a:7e:40:88:32:fa:d8:75:88:71:27:9c:81:11:21:
                    e5:79:77:6c:6e:b6:40:9c:b3:55:ad:17:e2:ad:76:
                    51:c4:cc:54:b2:25:aa:f8:2d:4a:55:61:fa:53:e0:
                    b6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:91:78:62:A7:1D:C0:92:BC:CB:1A:A0:57:D9:79:87:AA:5E:44:65
            X509v3 Authority Key Identifier:
                keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:c5:4e:4f:11:b9:a1:26:3f:d5:d8:81:0d:54:44:bd:52:
         c2:da:7b:fa:e7:72:0b:d6:34:52:d7:f6:e7:c4:5c:2e:09:01:
         af:2a:c2:b3:75:a1:ae:aa:e2:40:86:a2:1e:7a:5c:37:b5:68:
         ec:8a:85:d4:92:52:0b:87:76:11:2c:47:7a:47:c9:89:4f:79:
         63:e0:06:52:02:6f:42:72:bf:16:99:04:5f:57:57:ba:d7:c8:
         c3:9c:f1:e9:7a:ed:90:bb:10:86:20:f3:67:19:e6:9c:ed:93:
         9a:47:6e:a8:66:e8:4e:ec:eb:20:c3:66:a9:a5:cf:98:f7:bb:
         13:46:32:8c:90:be:1a:41:33:06:c0:55:b3:4e:60:e3:36:a2:
         84:4a:7d:bf:9b:bb:dd:f5:b8:87:1e:0a:9e:90:cf:b5:c5:04:
         ec:8f:a8:57:f3:e5:56:7c:4d:b7:7e:4c:a3:00:24:30:3d:16:
         19:ef:ea:2f:d5:5c:46:4f:1f:fc:1c:d4:66:54:98:47:7e:91:
         14:8c:20:9f:31:8f:52:dd:d0:22:6d:0d:43:23:77:41:01:c0:
         4e:74:eb:07:2b:fd:52:4a:a6:bd:82:49:a1:a2:b3:fb:a9:9c:
         bd:28:cd:9f:ca:5c:9d:26:fd:29:7d:d1:00:de:e9:7d:88:7c:
         14:b0:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:14:13 2026 by rpki-client