Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft
File:                     tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft (raw, json)
Hash identifier:          bfppdbUCqfFuib8lBbTuQvqJO/SHPEUQ2jNpe6SGnU4=
Subject key identifier:   75:6A:BA:4F:E8:D7:43:98:E7:FD:38:A1:FE:08:AA:AC:C1:D0:F0:55
Authority key identifier: B4:4D:5D:7A:74:63:96:F2:4C:FD:8D:20:0B:FD:59:0F:D0:88:EC:A8
Certificate issuer:       /CN=b44d5d7a746396f24cfd8d200bfd590fd088eca8
Certificate serial:       019FA2CF30B354A14F2ED35F1FE96A1949B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft
Manifest number:          49
Signing time:             Mon 27 Jul 2026 09:01:55 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:55 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:55 +0000
Files and hashes:         1: B6xDnv8HDCFywpfiB0UuCgZWVWw.roa (hash: WnSysYF5eL+I2hCfl+Xlu30Tuloa46LSgtcTfwUnQ6U=)
                          2: tE1denRjlvJM_Y0gC_1ZD9CI7Kg.crl (hash: acDYnRnnOkjhvJK/km/hJel93nV3dWGmZT68LkpI6Yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:cf:30:b3:54:a1:4f:2e:d3:5f:1f:e9:6a:19:49:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b44d5d7a746396f24cfd8d200bfd590fd088eca8
        Validity
            Not Before: Jul 27 09:01:55 2026 GMT
            Not After : Jul 28 09:01:55 2026 GMT
        Subject: CN=756aba4fe8d74398e7fd38a1fe08aaacc1d0f055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:f9:2d:4f:10:a1:bf:17:3d:8d:ec:32:47:
                    0b:6d:a8:af:4c:cb:76:77:20:21:d4:85:42:b8:79:
                    63:c4:00:c0:8f:13:d3:48:d0:29:2b:a3:af:eb:d5:
                    3e:a2:b8:cd:a0:0d:2c:05:fd:d2:75:80:52:64:8b:
                    24:26:b5:f2:9f:b1:7d:7b:2b:75:af:86:40:cd:d8:
                    36:ab:d8:07:2d:de:70:83:b6:66:6f:d8:a8:7b:06:
                    1b:a3:92:35:fe:9e:da:98:7c:bb:9a:64:14:72:35:
                    06:41:f1:90:81:cd:e9:76:de:49:be:19:c6:57:92:
                    6b:e2:00:e1:2e:d2:c3:d7:3b:7d:5a:6c:be:31:26:
                    2a:1b:33:49:40:a5:b4:34:01:59:70:0c:b7:78:b0:
                    40:2b:47:4d:96:0c:b7:b6:94:3e:c4:39:e5:ed:67:
                    b4:39:e7:f5:70:3d:0f:f3:0f:f2:68:54:64:a2:38:
                    79:75:85:b0:55:b9:2a:bf:39:c3:10:91:50:be:57:
                    29:7c:07:1f:1e:b6:a8:ae:88:49:51:d3:98:4b:9a:
                    44:84:47:2f:6e:19:1d:fc:df:7a:40:d8:f4:8e:f6:
                    3e:b9:24:a6:5a:aa:e5:f6:84:98:90:cb:5f:0a:40:
                    10:26:33:ee:28:b9:cd:2d:e9:55:c5:91:61:47:02:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6A:BA:4F:E8:D7:43:98:E7:FD:38:A1:FE:08:AA:AC:C1:D0:F0:55
            X509v3 Authority Key Identifier:
                keyid:B4:4D:5D:7A:74:63:96:F2:4C:FD:8D:20:0B:FD:59:0F:D0:88:EC:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2a:ed:2e:2c:23:f0:23:da:0e:10:6b:ce:43:5c:d1:d6:90:
         11:b9:67:93:75:7f:3c:1e:c9:51:7f:ad:66:82:0c:4d:c3:b2:
         0c:ea:0c:23:6a:b2:ef:41:c7:bf:f5:66:6e:af:92:dd:9f:39:
         7f:68:b4:18:ef:12:f7:be:f4:99:93:54:17:a1:2b:c8:75:f1:
         70:2b:00:f5:07:47:60:38:d2:d6:a8:ad:a7:ce:98:8b:00:b6:
         6a:f5:25:1f:7f:83:50:0c:f1:01:61:ab:c8:19:03:9e:b0:45:
         1b:2e:49:8c:22:cf:2c:c3:3f:8a:a2:64:85:bb:c3:ca:32:c3:
         5d:92:7b:51:5b:84:8c:65:70:eb:0b:08:97:7d:93:04:1d:c7:
         81:05:c2:cd:c1:b5:0e:76:2b:cf:38:5f:f8:24:32:9a:23:bb:
         bc:62:07:03:77:5b:40:11:66:59:4e:77:42:f8:62:12:5c:18:
         f4:77:a7:83:6f:b9:09:aa:3e:2b:91:81:b1:bb:18:80:e2:df:
         10:7b:2e:8a:c6:ea:7f:ac:b6:85:dd:cf:0b:28:93:7e:8d:1c:
         2b:f2:7d:bb:b3:14:86:39:fe:50:d0:08:b7:4a:19:4e:c8:85:
         dd:35:64:5a:17:c3:dd:13:b7:a2:58:1c:e7:f8:ee:e0:5b:24:
         70:06:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:21:51 2026 by rpki-client