Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File:                     1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier:          qulApCI3LnjmZafIG8Td74Pt3NMzlckdtJazBNvU0BQ=
Subject key identifier:   09:42:66:CD:B4:AA:F1:DE:9E:AF:FC:6D:28:BC:72:31:31:5E:F2:CC
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer:       /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial:       019F38294D58A85313912BB45C140186B43C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number:          1807
Signing time:             Mon 06 Jul 2026 16:00:58 +0000
Manifest this update:     Mon 06 Jul 2026 16:00:58 +0000
Manifest next update:     Tue 07 Jul 2026 16:00:58 +0000
Files and hashes:         1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: KumeF15BBISqTc9jr/pOxNvbBVN1t3hNCs0fctYg7sg=)
                          2: 2O8krpss1XUBhd1z1aphhjRg5kI.roa (hash: y4ACY414P23FTUASLCD5rS3epsK/nudRTUHUj5PRHCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:29:4d:58:a8:53:13:91:2b:b4:5c:14:01:86:b4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
        Validity
            Not Before: Jul  6 16:00:58 2026 GMT
            Not After : Jul  7 16:00:58 2026 GMT
        Subject: CN=094266cdb4aaf1de9eaffc6d28bc7231315ef2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:89:45:ed:a6:31:04:17:1b:ea:09:71:17:
                    33:33:08:f3:f4:d6:08:c4:80:0a:e7:aa:a8:2f:39:
                    15:3c:f3:67:a4:73:bc:b0:fa:ad:b0:72:fc:7c:e4:
                    ff:23:d6:41:7c:b9:97:62:e4:48:57:4b:7f:25:ef:
                    ff:7f:e5:34:c9:d5:b0:d1:21:7e:87:40:1a:f8:18:
                    7d:5b:8c:e9:e1:a9:dc:31:00:14:ba:ba:1c:66:40:
                    1b:4c:4c:87:86:98:15:4a:14:4d:7e:64:6d:07:f3:
                    aa:df:74:ac:6f:9f:ef:d7:a9:77:aa:41:1d:21:a5:
                    72:12:ca:26:5e:b0:f7:f7:4e:59:62:1e:0a:b1:ed:
                    bf:e1:c1:89:d0:8d:90:fc:7a:64:e2:eb:cb:f4:7b:
                    b8:2e:f1:e1:ae:65:39:6c:23:92:be:9e:6f:68:fd:
                    7b:88:bd:37:ed:00:0b:90:1b:5b:12:6a:86:47:cb:
                    e6:8b:ee:a9:14:29:21:2a:c2:ac:88:0e:5c:49:0f:
                    48:3c:dd:2e:47:3f:72:4d:ae:8f:8a:08:c1:5d:9d:
                    d1:f3:b9:88:09:e4:17:47:d4:28:03:99:dd:8a:3f:
                    fa:93:43:fd:9a:6b:e9:6a:92:3c:68:59:77:cc:25:
                    0b:13:b6:af:57:0b:78:b2:6a:31:6b:52:41:f5:ea:
                    b1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:42:66:CD:B4:AA:F1:DE:9E:AF:FC:6D:28:BC:72:31:31:5E:F2:CC
            X509v3 Authority Key Identifier:
                keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ac:eb:8a:b0:18:1b:ca:fb:be:25:7e:45:33:c7:26:f0:8f:
         29:1f:22:b5:bd:62:51:06:28:82:55:c3:58:93:4f:81:e7:a3:
         88:fd:7e:a9:e2:34:69:99:88:2e:0d:af:9b:7c:3f:d4:c7:29:
         f3:2d:4a:30:74:38:5c:b3:3e:1c:43:ad:19:44:5f:11:7f:1e:
         de:14:cf:6f:fd:fa:40:4a:fb:2e:bd:49:c3:63:d4:b3:69:73:
         48:13:34:75:dd:5e:ac:02:4f:8e:15:51:2d:ab:a1:3e:74:be:
         e3:ff:db:71:36:9f:aa:3f:af:68:fe:02:14:dc:0f:09:c2:b5:
         54:fa:39:f4:6d:89:eb:f3:e6:ec:9e:4c:85:db:34:dc:c1:92:
         a2:e3:68:66:37:5b:12:32:03:b8:34:98:ed:a6:15:17:3c:fb:
         4c:74:f3:db:45:93:63:98:47:a3:0f:dc:15:c8:dd:40:75:a2:
         5d:05:3b:69:b3:7b:cb:be:13:37:7b:67:45:aa:a2:27:da:56:
         d0:b8:55:df:7c:16:5f:ed:b3:cb:a0:b9:7b:4f:a4:75:13:d9:
         97:dd:d5:c5:ee:36:57:1e:42:6e:83:a9:71:bc:a6:18:62:73:
         5d:c7:0c:df:29:98:05:18:36:1f:1b:f2:cb:05:c4:df:96:c7:
         b6:be:46:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:19:55 2026 by rpki-client