Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File:                     I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier:          0tnVsg5H8S5Edjdv5i0Ta4PmX8KJgL7v7HnvhRvQEfc=
Subject key identifier:   40:A8:7F:7A:12:6B:D9:09:BC:82:C3:60:CE:01:AB:F7:A5:56:95:DF
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer:       /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial:       019F9F5FA7E81648C58F17F06FFB10BB3929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number:          04F4
Signing time:             Sun 26 Jul 2026 17:01:13 +0000
Manifest this update:     Sun 26 Jul 2026 17:01:13 +0000
Manifest next update:     Mon 27 Jul 2026 17:01:13 +0000
Files and hashes:         1: 1-D7_xDdnahTC7f8t337Uhdz6OlA.roa (hash: qFFDJacVShPrpqulz/bsVIAV83KJDAIcTEvSBVtbIe4=)
                          2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: 5eXbmlSL1WZdDgfamSfjBPwoCgyfMdb8DcTJ3T98c9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 17:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:5f:a7:e8:16:48:c5:8f:17:f0:6f:fb:10:bb:39:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
        Validity
            Not Before: Jul 26 17:01:13 2026 GMT
            Not After : Jul 27 17:01:13 2026 GMT
        Subject: CN=40a87f7a126bd909bc82c360ce01abf7a55695df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:eb:a5:6a:32:0f:1b:7d:56:6d:2d:c5:31:
                    72:36:c6:42:53:80:b8:2b:71:b2:d2:bb:8b:0c:55:
                    38:78:28:ac:cf:c4:74:55:d0:63:8c:06:fe:23:91:
                    b4:ba:e9:6f:b4:dc:cf:28:3c:54:d8:cf:41:4d:34:
                    2c:cf:ce:ac:1c:24:e3:95:7a:ed:65:4b:2c:19:42:
                    ba:f5:a0:bb:32:b6:11:83:48:15:c9:1f:15:e2:01:
                    57:72:f7:d3:b2:53:c3:ad:d3:7e:a5:42:a7:9b:89:
                    27:3d:50:76:10:af:62:cc:e1:f9:c2:49:c7:60:94:
                    4d:9d:4a:a4:49:44:28:a8:6c:96:af:fe:cd:5a:d9:
                    94:5d:ce:52:e6:51:c0:fb:f2:65:7a:57:40:8a:a8:
                    ff:2c:2f:f4:15:83:85:e0:b4:65:74:86:f5:f1:31:
                    0a:aa:1c:d9:c7:f2:c3:e6:1e:27:11:6d:ea:9a:f8:
                    8d:23:f1:52:e4:86:1e:2d:89:6e:8e:8c:d1:f2:49:
                    75:46:0b:96:5a:dd:3c:a0:a0:01:4d:8e:66:4d:d3:
                    e9:ad:68:3e:0e:54:da:bf:7f:28:c1:2f:8d:37:71:
                    f2:1f:f6:7b:9d:b3:ea:24:eb:23:fa:2e:e0:3c:41:
                    b2:79:5c:ec:f6:4b:4f:d6:34:3d:ce:7d:94:1a:16:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A8:7F:7A:12:6B:D9:09:BC:82:C3:60:CE:01:AB:F7:A5:56:95:DF
            X509v3 Authority Key Identifier:
                keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:11:03:5a:f1:a5:e6:7b:6e:98:05:03:13:8b:3c:b7:f0:08:
         f5:c0:c3:be:5c:e3:5f:4e:2e:df:88:73:bf:2d:d2:59:77:1b:
         f9:4f:d4:6e:8c:9d:7c:4c:bf:8c:56:32:a8:95:68:ac:f3:60:
         d7:ed:4a:0a:b6:28:cc:92:51:d6:2d:9c:5a:cc:33:da:a9:92:
         cf:c0:8a:e8:d9:e8:cb:9b:21:8b:ca:00:a3:d9:09:da:a2:b7:
         27:cd:3e:47:24:f1:51:e8:79:f4:ba:72:cf:ce:4a:72:cd:43:
         29:ff:cc:a2:4c:24:67:d1:bf:9a:8e:73:06:2e:8e:b4:ba:37:
         2e:47:21:68:7f:a7:f2:b0:e3:78:38:ea:5c:07:2c:f6:48:15:
         c3:31:0c:37:e8:cf:fe:35:0b:84:c0:c1:0a:1f:d5:11:a7:86:
         0d:8b:8f:4f:64:bd:a5:37:9a:f5:36:92:e2:05:d3:95:e8:b2:
         33:8e:ca:f6:28:de:ab:b1:64:b6:48:27:52:cb:6a:8d:16:53:
         ca:d3:af:6e:93:aa:33:df:05:10:6a:89:03:ae:f6:ee:56:28:
         2e:68:4d:f0:7f:64:7a:16:92:9c:05:82:9f:aa:c8:f4:5f:bc:
         e0:32:fa:a1:ba:16:f8:d5:32:a7:88:c1:16:5e:b0:4a:4a:61:
         c2:6c:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:36 2026 by rpki-client