Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
File:                     _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json)
Hash identifier:          GNRHlyopDybpGc5oRSjVBQtS11/tYKw1GRJCL8rb444=
Subject key identifier:   85:1E:D6:3F:A4:CB:BC:4D:6A:D0:BB:1D:51:C0:34:10:79:CC:E1:83
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Certificate issuer:       /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial:       019FA26012C5B6C417E627F301EBA959EC13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
Manifest number:          1903
Signing time:             Mon 27 Jul 2026 07:00:32 +0000
Manifest this update:     Mon 27 Jul 2026 07:00:32 +0000
Manifest next update:     Tue 28 Jul 2026 07:00:32 +0000
Files and hashes:         1: A6rxUEeDAXZKd2bfFtADSoZcC1o.roa (hash: +1AJC/T1uy51K3cG4QOtn84Jtoxq5VjE/ru2294aRv4=)
                          2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: Uip6LwD8G36TL3TB0cWmLPHd0nPyhSAsqE+xFmN+C7s=)
                          3: _ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa (hash: qe6ihhT3yR6t7+njBEvLfRsvgRV0ISuyHcZNmPr71D4=)
                          4: vMS7tozWQCg81akMpQlvwwiR_ks.roa (hash: JSFXNsgb4AQiEP8H2GgAtdgJfsJbL3EKa9NCHLcfnBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:12:c5:b6:c4:17:e6:27:f3:01:eb:a9:59:ec:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
        Validity
            Not Before: Jul 27 07:00:32 2026 GMT
            Not After : Jul 28 07:00:32 2026 GMT
        Subject: CN=851ed63fa4cbbc4d6ad0bb1d51c0341079cce183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:86:4e:2f:5e:03:38:f5:1d:f0:40:59:46:
                    e8:4b:05:a2:de:16:fb:95:25:be:cc:42:47:5a:40:
                    81:f9:d8:8b:0b:0b:07:28:50:4f:e3:3b:5a:75:67:
                    e5:98:a5:fe:21:da:b6:55:b9:f6:7f:96:9d:25:2f:
                    89:64:9e:81:07:fd:5b:23:50:bb:b4:88:4c:dd:ca:
                    01:92:4a:54:a1:8c:a5:aa:ca:ce:2d:b8:84:e1:ad:
                    b5:4b:2e:b0:d4:0c:6a:e0:a9:3e:07:4f:6d:7d:d2:
                    00:c2:d2:b2:31:84:0c:f7:37:21:cc:64:31:36:be:
                    37:a4:8f:a4:e4:32:e6:b2:d9:d7:26:98:4e:ce:3b:
                    e8:79:18:a3:3a:7f:e5:e4:15:2a:4b:12:f4:07:bf:
                    36:0d:6c:ca:f0:af:81:6d:28:5b:cd:a2:f9:86:66:
                    fb:58:03:3b:12:e7:07:d9:9a:d5:57:59:2f:f0:12:
                    c0:a4:60:e6:a5:f3:a1:5a:0f:ca:78:6e:66:3d:7e:
                    7c:3d:da:8d:3c:ef:c0:81:42:c7:ac:fc:86:28:24:
                    48:e3:ee:3b:86:e0:dc:f2:f5:ba:6b:3a:a5:01:bf:
                    06:28:9f:72:bf:bf:ad:b5:9b:e1:d2:a8:e5:27:92:
                    26:89:53:9e:2e:76:68:40:35:d2:a0:fc:84:2d:42:
                    d5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1E:D6:3F:A4:CB:BC:4D:6A:D0:BB:1D:51:C0:34:10:79:CC:E1:83
            X509v3 Authority Key Identifier:
                keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f3:23:af:9b:04:85:21:77:ed:7b:da:4c:14:5a:36:52:c6:
         06:4f:3c:07:fb:8c:de:75:64:7f:70:d7:dc:fb:82:e3:27:53:
         e3:1f:82:2a:ba:a0:fd:4d:3b:e0:0e:95:c7:56:1f:66:b8:6b:
         2a:3d:8c:e5:46:39:1b:1f:6c:da:81:a1:04:93:57:f1:dd:f9:
         87:a0:21:d6:8e:8f:49:54:9a:3d:38:7e:bd:a8:11:18:c0:a0:
         56:2a:c9:cd:88:59:26:51:63:7a:af:2d:ec:7a:64:b9:e6:3f:
         31:69:b6:3b:5f:fc:5e:6d:38:33:50:d9:e6:82:91:fc:c6:db:
         7f:82:a0:e7:71:fc:ba:8d:85:49:e9:d0:20:5a:45:26:c3:de:
         f6:a2:a9:49:25:ef:e4:1f:21:bd:3e:b4:ec:b4:09:e3:6f:60:
         a4:55:52:e8:2d:a4:42:7a:85:bb:35:1a:5f:01:ed:a7:dd:b6:
         d4:5e:77:e4:b2:40:a0:59:36:80:06:0e:75:c1:f7:a9:9b:02:
         42:ad:a5:33:c7:68:6e:87:0f:fe:d3:b5:76:c4:90:26:60:b9:
         36:c4:56:90:6c:a8:72:be:44:d2:4f:06:e8:d1:60:0d:28:65:
         b0:60:66:4a:f7:53:6e:10:b6:25:50:be:3b:1e:06:11:90:f7:
         d5:ea:c1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:56 2026 by rpki-client