Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
File:                     89KYmJtPzgv8PBec7_anqgxN8Qc.mft (raw, json)
Hash identifier:          jPrLiMZwNS5XIQ5Jhu6SgF2D5PLPphBRFs4u4yQnvZY=
Subject key identifier:   BD:26:73:AB:DF:F7:18:CE:4D:08:3A:09:83:C6:FA:FB:5F:0C:BA:38
Authority key identifier: F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07
Certificate issuer:       /CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
Certificate serial:       019F85D727A113E5889A55D9A386A5EC9ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
Manifest number:          013F
Signing time:             Tue 21 Jul 2026 18:01:37 +0000
Manifest this update:     Tue 21 Jul 2026 18:01:37 +0000
Manifest next update:     Wed 22 Jul 2026 18:01:37 +0000
Files and hashes:         1: 89KYmJtPzgv8PBec7_anqgxN8Qc.crl (hash: mm2Xx0ygbl4EZrapmpM+TdOqH46rYqtMDggWUqtMX1E=)
                          2: NjhjTKawIenVH3d-r5iLAxjav8U.roa (hash: SUgTiVzn0C0dt/13Npi6OivpMeE/2hH0/DP1jgqxSnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d7:27:a1:13:e5:88:9a:55:d9:a3:86:a5:ec:9e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d298989b4fce0bfc3c179ceff6a7aa0c4df107
        Validity
            Not Before: Jul 21 18:01:37 2026 GMT
            Not After : Jul 22 18:01:37 2026 GMT
        Subject: CN=bd2673abdff718ce4d083a0983c6fafb5f0cba38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:71:fd:7e:22:7d:f1:6d:4e:14:9e:93:4b:
                    9e:ee:9f:d3:19:ff:d5:65:01:2c:53:1a:bf:21:75:
                    67:8f:c1:9a:a1:dd:d2:4b:7f:9a:86:7c:62:fd:c4:
                    0a:1d:5b:a4:bd:7f:e6:87:a8:f1:71:78:82:83:c1:
                    b5:69:d5:53:41:ce:8d:7d:f4:25:94:74:36:81:f5:
                    91:44:5c:79:4c:fc:d4:a5:c2:aa:94:a5:ad:3b:83:
                    c8:3e:2f:9d:36:6d:5c:bf:1d:04:fb:45:cc:82:ce:
                    cd:f2:a8:46:e1:b7:1b:f9:eb:71:8a:55:26:46:5e:
                    90:44:25:32:b4:f3:93:a0:20:c5:2f:02:25:07:48:
                    2a:76:d9:9a:d9:fc:0e:11:a6:e7:e0:b0:c3:6d:d1:
                    7b:f5:47:53:e6:73:9a:e6:ac:43:a6:e2:f9:12:ef:
                    0c:50:cf:3d:f0:40:ee:57:cc:25:ac:70:26:32:4c:
                    15:17:10:f1:0e:f9:f3:22:90:a8:71:db:6b:01:da:
                    ea:c9:a7:6f:35:46:e9:25:be:82:fb:37:b0:b7:1b:
                    1d:2b:9c:a3:ce:84:62:5e:44:b4:ff:af:e0:e1:79:
                    de:cb:d7:01:70:1f:12:0f:82:8d:cd:a5:a0:7b:6f:
                    43:c3:96:a8:9a:70:23:41:48:cb:1b:50:ee:81:5f:
                    a4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:73:AB:DF:F7:18:CE:4D:08:3A:09:83:C6:FA:FB:5F:0C:BA:38
            X509v3 Authority Key Identifier:
                keyid:F3:D2:98:98:9B:4F:CE:0B:FC:3C:17:9C:EF:F6:A7:AA:0C:4D:F1:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89KYmJtPzgv8PBec7_anqgxN8Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e210aa-ecd7-403b-b580-650dafc161ef/1/89KYmJtPzgv8PBec7_anqgxN8Qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c6:ff:71:1c:30:e2:49:5b:d1:30:05:a6:94:53:18:93:f7:
         56:14:06:e8:a1:3b:88:91:92:bb:0c:b4:e9:4d:3b:13:b6:1b:
         22:95:c2:48:9b:ed:2d:5b:c4:e3:2f:b5:cd:c7:38:c9:79:ed:
         0d:06:74:a8:59:43:c8:e5:96:29:b7:09:1c:68:20:26:62:27:
         f1:51:0f:6f:bd:44:0b:72:e9:7a:6c:09:d8:c7:99:8b:6c:3e:
         bd:45:d3:23:0b:4d:b8:68:38:92:b4:95:36:ac:9d:90:86:49:
         e1:bb:cf:bb:0d:3d:f0:3c:e5:a2:31:45:ab:d6:1c:87:03:4a:
         00:ff:fd:1b:85:80:7e:0d:bb:a4:fb:e1:73:1b:cb:4d:65:98:
         c9:9f:3b:79:a4:89:a9:45:ac:ae:43:3d:da:7b:b4:fd:1a:be:
         dd:24:0c:77:d2:9f:08:da:b1:b9:8e:dd:78:25:90:4a:08:a4:
         e5:95:d8:ad:82:09:d1:64:01:4c:d4:22:1b:9b:7a:95:a0:05:
         cc:86:80:6d:6f:38:2c:ca:7c:3b:83:af:79:32:b3:f3:8d:3a:
         df:53:04:52:a6:d1:2f:64:fc:13:df:7e:f4:d1:33:00:65:c4:
         41:72:7a:7b:f6:fc:df:79:42:08:e0:78:47:53:1e:4c:c9:5f:
         d3:72:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:58:20 2026 by rpki-client