Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File:                     iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier:          kbKjZFoUFUgFT+x+9Wyyp9SlEuWh4AJwFlxKdxDtgAI=
Subject key identifier:   C1:AE:7E:38:DC:BD:C0:16:4B:A6:3B:AC:A8:B8:2A:8B:12:22:EE:53
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer:       /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial:       019FF7FEC635032868BC7E17AB0053E10900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number:          19FE
Signing time:             Wed 12 Aug 2026 22:01:36 +0000
Manifest this update:     Wed 12 Aug 2026 22:01:36 +0000
Manifest next update:     Thu 13 Aug 2026 22:01:36 +0000
Files and hashes:         1: 1-VG2zZYo2Xw41U8d-T9E0vuUf_0.roa (hash: Fzs5u72SRgE/o/nqzBGPWFy7PHtNgvPIh7SZEq3fBpU=)
                          2: VfXPQasJj4AFxPhWN1WSOyUzOyI.asa (hash: zvfirguBB2tgFEnfYrOLxHAMXrIGb3V+ijoN5TJT8+0=)
                          3: WSoyFsUkPtTH5GPtVnmww05vFh0.roa (hash: xtuU58lDieJuv/Yy7w3S0c+KdkmwGfK0iLB0R2OEp6Y=)
                          4: hh--phRiIrQ8JTZgm27UnTphjNY.asa (hash: W1NuGQLiQb/ix/3Fe06njYJ962P4U8xR23zdUbQ59zo=)
                          5: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: ntT8W++GxgjE1fKP5WAD1F+MBxekv0P091LayeCuufA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:fe:c6:35:03:28:68:bc:7e:17:ab:00:53:e1:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
        Validity
            Not Before: Aug 12 22:01:36 2026 GMT
            Not After : Aug 13 22:01:36 2026 GMT
        Subject: CN=c1ae7e38dcbdc0164ba63baca8b82a8b1222ee53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:44:86:2a:12:f6:3b:4e:1c:2c:b2:6f:e1:
                    c3:d1:77:fc:31:84:6f:f6:97:79:8b:15:6a:ee:2f:
                    8d:62:7c:b7:a0:9f:0b:14:7e:22:dd:8a:7d:ea:fd:
                    29:28:44:6c:cc:10:96:8f:73:01:04:50:05:64:57:
                    7b:41:3b:7d:29:cd:81:91:bf:ef:f4:da:37:44:f2:
                    9e:9a:cb:c0:fb:05:5c:53:60:3e:23:d2:00:02:a9:
                    62:ca:e1:6c:37:4d:45:70:60:8a:82:62:3c:73:ae:
                    80:2f:de:68:5c:70:1a:cf:12:96:47:a4:5d:00:20:
                    e3:72:35:81:5c:e7:cf:1d:c3:09:88:67:83:99:a9:
                    02:de:bd:f7:1d:d3:8f:97:9e:60:46:7c:7d:0d:3b:
                    c5:4a:d1:5f:19:7a:92:2f:fd:7e:28:54:6a:83:ed:
                    cd:52:a1:bc:61:f3:28:b4:b7:36:f5:34:58:f2:06:
                    2e:28:33:24:8a:a2:72:51:6c:9b:17:4b:54:bb:34:
                    38:0f:d0:db:4e:5e:59:3d:ca:05:29:ab:99:fc:c2:
                    74:32:4d:c2:ca:4a:bb:29:60:50:96:cd:a9:ea:c6:
                    d0:46:2c:3d:b8:25:ca:a5:c2:12:e6:7f:c8:cc:69:
                    a7:ef:6b:fc:f6:2c:fb:39:6d:e4:13:88:89:37:19:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AE:7E:38:DC:BD:C0:16:4B:A6:3B:AC:A8:B8:2A:8B:12:22:EE:53
            X509v3 Authority Key Identifier:
                keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:5b:5e:18:29:e4:03:94:70:1f:ec:6c:15:1e:f9:20:86:cc:
         2a:1d:11:8a:7d:f0:0f:28:ca:a4:ea:51:91:49:36:80:16:15:
         50:49:f1:85:ca:c3:f6:ba:83:c1:06:58:79:aa:81:3b:5d:99:
         d5:02:43:f1:f9:b4:4e:4d:7b:51:67:89:ae:a6:1c:a7:2d:55:
         be:db:07:64:44:ea:b5:e5:ac:f1:45:06:a2:7c:c7:53:5d:13:
         cf:61:1a:9e:54:75:bd:d9:c4:87:67:e7:5a:39:5e:1b:66:64:
         fb:ef:19:be:46:cc:ca:c7:8e:96:a5:e1:1d:59:16:57:52:55:
         8a:b7:65:78:51:03:1d:df:31:42:b7:06:40:15:8e:32:96:37:
         cb:84:79:bd:ea:8d:8f:87:d0:01:d0:29:bc:71:f3:7d:cf:41:
         63:b9:0a:a8:7c:a4:ba:d4:36:69:96:a8:f2:80:da:5c:e8:63:
         1d:c5:15:84:a4:a0:e7:3b:30:ec:8e:0b:6f:c5:ee:80:0a:3e:
         92:92:d3:e3:70:18:75:a5:49:21:50:5d:d7:25:5a:ce:a0:54:
         87:a5:85:01:94:1f:73:01:0b:ef:55:79:26:f1:0c:44:b2:89:
         ae:da:95:4d:3e:e5:a3:a6:fd:23:aa:35:ef:5d:ce:b5:d5:39:
         14:55:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:43 2026 by rpki-client