Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
File:                     J1qrffuxUqZGrfMnOzGqXd5kod8.mft (raw, json)
Hash identifier:          bQ18y/BQYuiQkgQpRuW1t4bgCUfxZEvIXam/YCiIDos=
Subject key identifier:   D2:68:8C:AE:2D:4C:FD:EA:90:06:AE:BD:59:BF:11:D9:66:31:01:96
Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
Certificate issuer:       /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Certificate serial:       019FA0DFE5CD6CA44CB1D8B109970ED9F733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
Manifest number:          0FFD
Signing time:             Mon 27 Jul 2026 00:00:55 +0000
Manifest this update:     Mon 27 Jul 2026 00:00:55 +0000
Manifest next update:     Tue 28 Jul 2026 00:00:55 +0000
Files and hashes:         1: 0lwp4oYsVqGcXPYJsbA37ojFUOY.roa (hash: Xr1TyxzvlPR09HeBPc7XwVXyf4HkStFhIXRKsCvU9zI=)
                          2: J1qrffuxUqZGrfMnOzGqXd5kod8.crl (hash: IKYAWpUSB8c4svc9i+UdbTbbz1T63qrJIT4FUFNuYA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:df:e5:cd:6c:a4:4c:b1:d8:b1:09:97:0e:d9:f7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
        Validity
            Not Before: Jul 27 00:00:55 2026 GMT
            Not After : Jul 28 00:00:55 2026 GMT
        Subject: CN=d2688cae2d4cfdea9006aebd59bf11d966310196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:b1:6a:80:65:9d:84:86:26:6f:c7:e1:4f:
                    74:dc:62:3b:82:9f:fe:bf:6b:f1:1c:f8:1e:ad:b1:
                    ae:31:42:fd:66:70:9b:ca:77:77:e5:9e:bf:d0:c9:
                    1a:ca:2d:23:59:27:58:c9:ff:d3:31:46:1e:aa:80:
                    09:75:10:07:80:a2:0a:94:23:50:67:cd:c8:72:03:
                    5d:c7:80:20:42:e8:36:18:18:43:1c:bb:c5:fb:40:
                    53:e4:02:00:10:6b:92:2a:75:aa:b2:28:b9:3e:e2:
                    02:d2:c1:df:ad:58:56:02:17:be:e6:51:ca:ab:a9:
                    3c:5c:41:04:bb:71:b7:3b:e8:f4:71:f9:44:2e:4c:
                    f3:95:6b:32:cc:0a:46:10:f3:3a:ba:5a:7c:a2:46:
                    fc:52:41:88:32:bf:2e:ae:22:be:39:a9:e2:af:7c:
                    bf:ae:62:5b:15:44:e1:8e:67:8a:86:40:f5:40:99:
                    ba:e9:0b:db:7c:87:0d:ef:c0:12:43:aa:e7:9b:5c:
                    8f:e8:1b:82:c4:cf:af:ad:b4:1a:bb:09:6b:c6:8b:
                    2c:99:78:29:78:8a:9c:d2:3b:f2:df:a2:6a:b7:8a:
                    51:82:19:96:bb:ec:df:b7:bf:a2:7a:85:a8:bc:e5:
                    d1:87:d0:97:f6:11:f0:09:d8:ef:b9:0d:47:1c:6a:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:68:8C:AE:2D:4C:FD:EA:90:06:AE:BD:59:BF:11:D9:66:31:01:96
            X509v3 Authority Key Identifier:
                keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:67:57:91:b8:4b:d1:af:4a:4e:6a:0f:13:df:ef:31:b1:
         30:67:b0:79:80:54:a6:88:c4:26:ed:7b:d8:fa:d6:72:f5:10:
         19:75:91:c4:01:19:a5:2c:d5:3f:95:90:61:00:d3:1f:a9:aa:
         af:ed:0f:8d:3c:c3:d8:a0:09:5a:cb:e4:55:21:ee:e0:c0:ad:
         5c:74:9c:48:2e:86:45:e0:08:64:6c:5e:e4:17:fc:66:2c:db:
         43:f9:64:17:b1:16:55:d2:d2:b3:80:b1:c1:e1:2d:fd:c3:48:
         ea:3f:fb:41:8f:fa:f0:38:be:48:c9:59:56:a1:c6:48:da:c4:
         98:96:03:e3:63:03:7d:b4:0b:ef:a7:05:30:8d:e1:a8:1a:0a:
         2d:ee:61:69:76:66:24:a3:88:27:87:e4:b7:e6:2d:85:3d:27:
         92:5c:0c:98:4e:9c:37:f1:d3:03:ec:7d:d7:78:90:8c:b4:5e:
         96:6c:ae:25:a7:29:96:53:56:73:21:6e:ca:fd:a1:11:d6:01:
         90:89:cf:f8:f3:97:25:28:f6:19:77:fa:3f:7e:d6:7f:e9:48:
         85:aa:06:44:f2:42:78:e3:33:5d:83:29:f5:ea:bc:66:5c:86:
         9e:85:06:39:45:f9:bc:bf:67:4b:71:8a:77:e2:8f:ae:ec:9b:
         af:4d:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:17 2026 by rpki-client