Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File:                     Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier:          KMsG/jzbG2IVv5NxLHfEqtOboPugDHk5ssYlcgbI38s=
Subject key identifier:   D9:17:10:84:2A:C6:F9:79:AE:55:CE:05:C3:DA:9C:98:21:1A:14:CE
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer:       /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial:       019F85D667EB95FC050BE16FB8789E0BC0F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number:          15FF
Signing time:             Tue 21 Jul 2026 18:00:48 +0000
Manifest this update:     Tue 21 Jul 2026 18:00:48 +0000
Manifest next update:     Wed 22 Jul 2026 18:00:48 +0000
Files and hashes:         1: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: FOHZSpfBFCdpXy1T3KgnaODo07bYUfbAXqYJe1shegY=)
                          2: di_0LtYX-zy7910p1HbVAPeQb4E.roa (hash: Q0mvASV/CVPiKor53MwAZ00Mlkbyxmt/p19B01XkHwA=)
                          3: pEOUwaWLO5dvG7uvVIo0_OIl9G8.roa (hash: hUdGksl3Om+qi4NqcjWlHiivRsMFn3puC7yl77M9g+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d6:67:eb:95:fc:05:0b:e1:6f:b8:78:9e:0b:c0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
        Validity
            Not Before: Jul 21 18:00:48 2026 GMT
            Not After : Jul 22 18:00:48 2026 GMT
        Subject: CN=d91710842ac6f979ae55ce05c3da9c98211a14ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a7:2c:c1:e4:dd:e8:67:7a:2d:08:b6:6a:96:
                    0a:e0:cb:de:ed:3b:54:2c:38:58:8f:b6:27:ff:9f:
                    de:14:c0:02:f9:91:aa:fc:0d:26:a4:e2:45:2c:22:
                    d6:25:ce:60:45:43:0d:2d:57:66:ef:a4:24:4b:fb:
                    b2:c1:1c:18:a7:b4:ef:28:9e:35:f3:ba:a1:83:38:
                    5a:15:f4:60:46:54:58:6f:72:35:b6:f0:b4:36:56:
                    5d:22:e9:f4:49:d8:1c:ae:f9:99:fc:ff:f6:4a:35:
                    51:76:80:80:d8:1a:2a:e1:51:4b:f8:c8:6d:f0:bf:
                    f1:1d:3b:5b:5d:7c:56:c6:09:2e:7e:8c:d3:2b:a3:
                    c7:a3:92:ba:19:5a:31:8d:2a:36:63:ce:db:d5:47:
                    f7:b1:7a:72:80:ae:3d:4f:73:e7:b3:54:a5:91:ce:
                    54:15:6e:e2:4f:cd:b0:f9:dc:bb:e2:0a:0b:cd:c1:
                    8d:6d:64:83:67:d5:d8:3c:b6:60:c6:4b:cf:ad:7e:
                    53:99:39:d1:3d:d8:4e:da:e0:96:8e:ce:b4:be:1a:
                    86:42:1c:4e:07:3a:76:2b:26:ce:63:6b:ab:47:96:
                    6b:0f:85:5b:29:16:34:ea:e8:ca:8f:1e:a0:44:5a:
                    df:5f:16:d3:c8:9f:eb:c8:c6:46:c7:5a:3f:4a:54:
                    62:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:17:10:84:2A:C6:F9:79:AE:55:CE:05:C3:DA:9C:98:21:1A:14:CE
            X509v3 Authority Key Identifier:
                keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:69:79:c3:51:2b:8c:72:26:ad:d3:fa:23:ef:87:3c:58:05:
         34:09:d2:cc:fd:ee:2d:4a:7c:20:34:47:b4:52:05:bf:b9:57:
         87:48:d0:9b:86:62:45:87:16:cf:2a:13:0c:94:91:ad:6e:01:
         6d:d5:64:d4:3b:9c:ab:ba:67:aa:be:ad:28:0c:2a:5e:f5:39:
         c8:fa:5d:72:54:78:0a:38:3f:3f:d5:17:97:99:b7:3f:12:fe:
         a8:37:20:82:2e:1c:d6:04:fb:40:f5:5e:0e:0d:03:f7:13:22:
         db:79:f3:17:89:0d:20:77:1d:ba:1b:ef:4f:3b:b1:71:c1:a3:
         23:fc:3c:35:14:59:2d:80:61:6e:e3:a0:66:79:39:ad:9e:a6:
         f4:3a:fe:36:32:07:69:d5:79:13:b0:f6:b2:3b:24:a5:8d:d2:
         5e:28:7b:6c:62:9d:2e:76:e8:c3:bd:11:7c:98:43:05:6f:35:
         b0:37:73:fb:49:2c:b0:9d:03:3d:6b:c2:89:5c:a7:1b:e8:19:
         16:84:0f:6c:52:22:ac:de:7c:79:65:e5:be:6c:8c:5f:32:19:
         d0:3c:9b:7e:cc:ee:30:17:17:94:19:53:60:d2:6e:54:e8:d8:
         d0:7c:14:fc:f4:4d:2d:c8:84:c0:4f:cc:02:4a:1b:35:df:d4:
         9a:8e:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:31:01 2026 by rpki-client