Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
File:                     mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft (raw, json)
Hash identifier:          TDkvoAq7ArpIfPubPeS3PQ89rYIkYfBCY0rwkBfZJBk=
Subject key identifier:   36:1F:FA:57:B5:1A:94:66:E8:67:3E:55:0F:D4:28:28:80:2A:28:35
Authority key identifier: 98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
Certificate issuer:       /CN=983750f247069679b83eedfd7bd565ea46789a60
Certificate serial:       019FA0E0AC0895AB0AA10D02CFA2A105D36F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:01:46 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:46 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:46 +0000
Files and hashes:         1: P9PKZAt5djm7FdGsrSvgtxYkacg.roa (hash: ugWkvKLaNhrHSnXEVwNyBj9pWu4yB48C3daCoDS8DQk=)
                          2: mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl (hash: L7gIo5ySjJvwu743GDHAtl/mcntY77N/XZt9TvNOjSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:ac:08:95:ab:0a:a1:0d:02:cf:a2:a1:05:d3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983750f247069679b83eedfd7bd565ea46789a60
        Validity
            Not Before: Jul 27 00:01:46 2026 GMT
            Not After : Jul 28 00:01:46 2026 GMT
        Subject: CN=361ffa57b51a9466e8673e550fd42828802a2835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:97:06:9d:9b:8f:8b:22:6d:a5:8c:9b:93:
                    08:af:88:38:42:65:8a:0c:57:2b:3e:99:00:15:91:
                    70:51:d3:11:09:ea:d7:8d:ba:d6:35:ac:64:5f:1a:
                    bd:54:ba:8e:70:f9:5d:0a:62:73:14:fc:13:79:35:
                    75:b4:e2:8a:28:40:8f:b5:2b:b6:bb:43:83:6d:c5:
                    f9:7c:83:f1:9a:0c:01:01:22:b7:d2:f9:ed:5b:26:
                    68:6a:df:f1:2e:e3:78:74:7e:74:01:66:b6:89:de:
                    66:1b:c1:28:34:09:de:d1:e3:53:f3:76:f3:e0:2f:
                    ae:19:27:3e:78:8d:26:04:e4:c7:e4:63:7a:7d:b0:
                    5a:68:65:11:81:1a:2a:46:8b:3c:ae:48:20:52:95:
                    12:be:2b:da:ae:cc:35:93:30:6a:f8:09:fc:8d:eb:
                    5d:0f:97:b1:28:16:64:88:e8:b1:8d:9b:0a:ec:11:
                    b8:62:34:90:89:f4:b4:27:d1:43:31:c0:67:de:7b:
                    35:7c:67:f8:86:bf:b6:00:13:2b:90:ff:e7:51:2c:
                    0c:6a:ca:85:0a:c2:ce:fc:43:be:fe:52:88:41:06:
                    4b:11:30:8b:84:5a:c3:e1:5e:00:f4:f8:3c:7c:4e:
                    c1:a8:33:dc:d0:29:e9:11:94:6e:1f:8d:72:d2:23:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1F:FA:57:B5:1A:94:66:E8:67:3E:55:0F:D4:28:28:80:2A:28:35
            X509v3 Authority Key Identifier:
                keyid:98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f6:ef:2a:bf:8c:fc:2f:fa:4f:84:73:39:31:86:ec:ab:c5:
         cf:f5:40:26:4c:1b:59:03:16:38:09:a5:06:ab:9b:1d:09:f6:
         b5:b4:ad:ea:01:b5:2f:29:48:26:95:aa:80:be:fd:00:da:a1:
         24:cd:36:c1:4b:54:03:9e:1d:f4:97:84:56:e6:cf:2d:1f:5b:
         e4:5b:c3:ad:78:85:c2:ef:b3:cd:a2:81:c5:e3:0d:d3:5d:75:
         a4:a5:87:48:c0:dc:f8:3a:04:e2:e8:ce:c7:55:84:9a:5f:ec:
         c0:28:a7:35:b3:0b:e7:f1:2f:da:04:7b:f0:ae:6f:85:e4:87:
         3b:1f:ca:71:a5:6e:9f:89:f5:0d:23:50:7d:75:ea:9d:2f:43:
         60:3c:06:75:32:74:43:39:ce:af:f1:a9:8e:0e:a5:23:00:6c:
         ce:e2:51:99:9c:28:75:41:85:17:de:0a:f8:f7:d7:80:d7:fb:
         77:a5:2b:73:fa:fb:48:74:1f:0d:ba:16:13:84:51:45:4d:aa:
         5c:e0:f3:5b:10:a1:b7:a5:fb:d6:e9:0c:77:4b:af:5a:52:cf:
         61:0d:e6:78:14:32:76:f5:4b:7b:7c:12:0a:43:31:c5:e6:d8:
         99:6f:40:1e:91:1e:69:93:e3:c7:c6:eb:38:50:41:da:52:d8:
         16:1d:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:38 2026 by rpki-client