Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File:                     tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier:          Y6cKAaE2+Ol+4QM/ghfuxvDrAL3rGSj0RXAdqjt2rHQ=
Subject key identifier:   69:AC:CB:3A:C1:D0:AC:53:C1:78:8E:BE:A4:10:F2:B1:8E:DE:35:A2
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer:       /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial:       019F9F960918FFE43E58393FE217117178C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number:          0B92
Signing time:             Sun 26 Jul 2026 18:00:37 +0000
Manifest this update:     Sun 26 Jul 2026 18:00:37 +0000
Manifest next update:     Mon 27 Jul 2026 18:00:37 +0000
Files and hashes:         1: dT7xB_AVDGhZ5iHb3OqIlsrmGmQ.roa (hash: 9I6NB6tgwzenrbz6TZapLlG56NaY3o8KJFSGZlT7HFk=)
                          2: s1suhFRxtQqXFfjNjSFyRNz1-dY.roa (hash: B73+BcivVDYXNoW7reCUol9H0cBeuwXyj3jXoDEGt/E=)
                          3: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: h27tp/UA1sKZyJ85+MbWb3JBR97wgp2i8Bb2ZvObkpY=)
                          4: urEWBZOnm7WKMhvQTm1izzcCYag.roa (hash: FEAeulBV1KrK3TH9JavCA4eeT7PWhs/mcBsPYnO8hB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:96:09:18:ff:e4:3e:58:39:3f:e2:17:11:71:78:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
        Validity
            Not Before: Jul 26 18:00:37 2026 GMT
            Not After : Jul 27 18:00:37 2026 GMT
        Subject: CN=69accb3ac1d0ac53c1788ebea410f2b18ede35a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:14:07:4d:d2:d9:f7:a9:c7:c7:46:36:49:
                    8b:12:46:4d:e6:12:f3:47:1b:94:c3:30:c2:13:67:
                    14:62:25:49:b3:e8:8a:ac:ac:89:39:1b:68:e9:8b:
                    e4:91:43:fe:aa:5f:76:b0:37:d9:fa:25:cd:7a:d3:
                    db:c6:c9:21:0f:15:94:ce:3c:f1:42:34:7b:7b:08:
                    cf:35:9e:34:7f:e3:2a:4a:09:bb:2f:b6:00:64:fa:
                    cd:a7:11:48:1e:9d:2f:b1:19:8b:15:29:6a:6a:f5:
                    e7:d4:a5:2b:82:f8:ea:bb:52:39:a9:08:fb:9d:2e:
                    df:35:cb:06:37:85:dd:90:55:db:d3:7b:d4:30:60:
                    04:fe:b3:bf:72:32:5e:70:86:6b:ee:d2:18:36:1e:
                    bd:99:f3:f6:18:3d:3a:c7:d9:1a:68:9f:ea:8d:f7:
                    d5:72:05:6a:3e:e7:e5:12:cb:45:4a:c8:ef:ae:2d:
                    d7:ca:1d:f9:2a:52:ce:71:18:b3:b5:f7:c1:b5:7d:
                    36:b1:13:d4:28:fb:1b:bb:44:bf:bf:ce:7b:c5:12:
                    37:36:f8:9a:78:83:84:5b:19:a3:f1:9e:a5:e5:f4:
                    2f:cf:83:14:b8:b8:36:86:f4:ef:9a:0c:08:73:2d:
                    01:d7:bc:bd:e5:99:13:6e:2e:ca:58:e3:2c:37:5c:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:CB:3A:C1:D0:AC:53:C1:78:8E:BE:A4:10:F2:B1:8E:DE:35:A2
            X509v3 Authority Key Identifier:
                keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ae:70:1c:08:45:63:2c:5f:15:d8:1d:56:31:81:58:00:96:
         63:b1:a0:06:c3:49:00:24:f2:bb:97:eb:58:e5:03:64:64:4a:
         e1:e7:c2:d9:33:61:06:b8:76:b2:ac:f4:fb:3d:22:6d:d3:15:
         8a:86:a0:3b:4a:c3:b1:aa:a9:72:ba:05:e3:d6:2c:b1:54:b2:
         1d:a7:1f:d7:e9:c4:a6:fc:b6:f3:ef:cb:52:46:3a:07:9a:83:
         85:0d:05:d7:a7:10:aa:9d:3a:92:7e:35:ed:d3:8b:4e:6d:62:
         aa:24:30:d9:5a:97:3e:4d:a8:1d:d3:5b:f7:6f:ec:a3:15:21:
         ba:b8:8a:06:81:12:4d:af:4d:73:d0:00:e0:3a:c3:1a:d6:a9:
         9b:0e:2e:93:55:81:e6:2c:57:96:32:f3:ab:09:9a:55:1c:52:
         4e:6f:8e:a2:a0:40:35:7c:3f:4b:60:10:1a:80:e0:0e:6d:16:
         73:3e:ef:79:14:53:ac:f6:69:02:8f:07:a9:9b:d9:24:bd:cc:
         eb:32:69:2f:92:1b:89:1e:0e:79:5d:09:f9:bf:00:b6:5c:07:
         e4:87:67:4a:a6:3c:20:2b:f3:8d:74:0a:fe:d1:23:50:58:24:
         c4:96:d5:94:ba:d0:fa:14:9f:85:48:eb:05:a0:85:05:b5:7c:
         4c:bd:c5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:47 2026 by rpki-client