Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          MYkWDSq4fa8HS655QLHls/4NtSWe3wOdk7x7zn7O5m4=
Subject key identifier:   50:AB:73:EE:9F:61:D9:5B:BB:50:8A:7A:4E:9C:4B:78:48:5E:7F:CB
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       019FA1BBCE55306B91553F4972EAF9EAC747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          12D9
Signing time:             Mon 27 Jul 2026 04:01:07 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:07 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:07 +0000
Files and hashes:         1: DgHkmROyC3MxqqPYkuTyDoxtyqw.roa (hash: q4huZNQpi2E4AXxex6IplXT0SZt2O1CYv71WiSI/rLI=)
                          2: Ns__ZZIiPb9TMl7NZ4zyQ0KeLeY.roa (hash: Jq4DCJzMOXzkiYCzhRhQfITbIQrgdmZME0+wIilmKI0=)
                          3: PWseQmzX6iLF_AKjxIoDYYEV-zs.roa (hash: 5qw7OHsXZ5/YdO0FCT2hsJ4vIKg9r9qwZPsnMuFb2j4=)
                          4: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (hash: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw=)
                          5: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: im+KKrRQDpWLibQqqvAFSdONPzdf8Q23b0o3rgfggTQ=)
                          6: dvl1qc6F1GgOMamGgtlUjjsOAmg.roa (hash: HqSbVOynVSnxKlocjrN8BkkCsHJA79UECwHRf5zem3E=)
                          7: lPV_USFOSo5QlpwzyG9GZkglfYI.roa (hash: F2MPkEsQMavl9IFac2UMwUB3IRMDo28oAPxrO4XQVFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:ce:55:30:6b:91:55:3f:49:72:ea:f9:ea:c7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Jul 27 04:01:07 2026 GMT
            Not After : Jul 28 04:01:07 2026 GMT
        Subject: CN=50ab73ee9f61d95bbb508a7a4e9c4b78485e7fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:34:db:a2:2c:87:1f:14:7d:a6:78:8f:d9:
                    ae:ed:e2:88:9d:a0:6e:5c:fe:ef:8f:fb:65:f5:97:
                    d7:cd:ac:ed:ef:f2:3e:9b:4e:65:9a:9d:cc:9d:c6:
                    f6:5a:7d:0e:cc:f8:b7:d9:aa:05:53:ef:4b:0d:db:
                    9b:56:f3:51:65:4e:de:87:65:e3:91:53:e4:d5:b5:
                    f8:55:28:b2:d7:b7:64:86:75:8c:cf:70:d6:a5:11:
                    7a:2d:25:24:59:0a:79:f0:9d:a2:28:a1:f9:36:fb:
                    8a:79:b2:5d:bb:83:32:f0:f7:a9:9e:e3:df:86:65:
                    fa:ba:14:09:9b:08:5f:c9:cd:29:db:2b:48:39:17:
                    54:42:23:e7:5e:1d:2d:1c:30:8b:75:e3:23:96:6d:
                    ca:cb:37:d1:31:8b:b6:37:97:ce:32:79:53:48:8c:
                    9e:a3:11:c5:f7:f7:ca:a2:c5:69:33:b4:3b:41:59:
                    b7:3d:61:62:e6:86:1e:45:3f:5f:ad:6a:1a:36:16:
                    ac:7e:bf:b3:9b:54:8b:12:69:0d:5d:c0:88:a1:39:
                    82:a2:96:7e:4d:dc:56:4d:13:8b:d6:b3:b8:63:7a:
                    38:c2:79:41:28:b1:72:7d:f1:28:05:62:89:3c:f2:
                    5a:1e:71:ce:45:8c:da:4c:19:87:51:63:00:0b:95:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AB:73:EE:9F:61:D9:5B:BB:50:8A:7A:4E:9C:4B:78:48:5E:7F:CB
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:80:e2:fb:d8:c5:40:02:0c:cb:fc:cf:cc:89:fa:f1:65:16:
         5e:e9:d1:2b:34:31:e8:54:d2:d2:03:a5:73:47:12:4b:7d:a3:
         6f:7f:f2:97:26:e2:f3:6f:b9:a8:27:6b:b5:e7:8b:e9:64:5c:
         d2:92:a3:33:e9:28:e9:28:af:03:61:5d:0e:42:06:7c:37:66:
         59:91:25:c9:27:af:de:21:20:66:e0:33:40:05:db:fc:bd:06:
         32:05:8d:47:3b:62:8c:ef:31:f3:4c:ce:12:9e:5a:05:5c:c5:
         f6:a8:33:7c:63:66:9c:52:2d:36:e9:79:51:fa:b8:ec:bb:a5:
         aa:cc:f4:cc:d4:5c:d5:13:6c:d6:ab:6f:12:40:59:e2:0b:cc:
         10:6c:12:45:61:28:94:df:71:7b:bb:39:d0:86:32:07:14:f1:
         0a:d1:18:19:a3:86:1a:f1:63:70:39:bd:1c:5a:49:d4:28:e4:
         2c:40:ee:22:a2:59:ba:31:1b:bc:86:11:52:53:59:12:4a:7e:
         05:6b:2b:4b:81:5b:75:a5:2a:a1:ec:46:67:b5:19:57:84:4e:
         71:77:d7:65:b4:43:06:ca:e6:12:c8:bb:29:b8:df:8f:6d:6e:
         fd:80:1f:80:ff:93:37:73:0d:03:e2:06:3a:e4:b6:2f:83:07:
         c0:19:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:20 2026 by rpki-client