Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File:                     do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier:          MfwIKuEuAVUXqbkzhcIWBm2elwuCPYhOPWk4f6xSbrA=
Subject key identifier:   F9:EB:7B:C9:BD:F9:04:1F:4A:10:8E:43:D6:90:BE:EA:46:54:B0:0E
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer:       /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial:       019FA11672989773440997E7F66144C05E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number:          10A6
Signing time:             Mon 27 Jul 2026 01:00:30 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:30 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:30 +0000
Files and hashes:         1: KuefoOzdZ9vrXjVoaWqLBNOd8Fc.roa (hash: Tr2+OxM2L2vZYYtrtzp3JmsEgxHYlAlF0KBqV8P0L1o=)
                          2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: qwUcmzBnZvfc9VjmI+601qScjbphxvkK2CVraXhs7+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:72:98:97:73:44:09:97:e7:f6:61:44:c0:5e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
        Validity
            Not Before: Jul 27 01:00:30 2026 GMT
            Not After : Jul 28 01:00:30 2026 GMT
        Subject: CN=f9eb7bc9bdf9041f4a108e43d690beea4654b00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3c:7e:47:8f:74:9e:39:bd:67:e6:77:df:3d:
                    e9:6a:7a:ad:f8:e5:90:ee:7b:2e:4a:62:3f:4d:51:
                    87:fb:31:5f:00:2e:f4:d2:42:60:28:fe:bf:f8:66:
                    f4:4b:4f:d2:76:b0:8e:f2:54:12:b4:4d:16:b2:b2:
                    6c:1c:ab:ba:9a:da:12:d9:72:c2:d5:ee:02:17:98:
                    18:6e:a9:0d:fc:6a:4d:a5:31:e0:47:25:29:52:e9:
                    fe:ce:b8:c1:e9:72:ab:65:13:e0:73:50:4b:f4:1d:
                    0a:2c:38:53:45:71:4d:a8:ce:a6:69:fb:22:a7:cb:
                    d2:dc:d7:58:fa:d3:80:0e:a8:b4:8e:92:d7:63:95:
                    f1:fc:68:fa:79:66:3f:12:73:c6:f2:79:98:7c:51:
                    e3:0b:ca:62:ab:b9:a9:9c:a3:77:bc:92:a8:eb:42:
                    8d:8b:fa:73:41:5d:0a:47:2a:f7:25:03:74:8e:4b:
                    22:65:6f:63:f6:22:ec:45:c2:b8:ee:c6:5b:98:9f:
                    43:c5:c4:e2:84:19:e9:16:04:d5:ad:40:85:e2:90:
                    9a:ee:d9:6a:0b:c0:eb:b4:7b:03:36:23:e5:df:a4:
                    e1:b0:86:e6:cb:b1:a4:d8:8d:b3:6a:30:a8:ea:bc:
                    7a:6d:77:dd:6f:ef:b6:8a:11:8e:92:57:fd:d2:62:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EB:7B:C9:BD:F9:04:1F:4A:10:8E:43:D6:90:BE:EA:46:54:B0:0E
            X509v3 Authority Key Identifier:
                keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:db:c2:f9:67:4b:49:18:f2:d1:5e:ef:32:9c:c4:08:2d:8b:
         28:27:8c:ab:e9:da:6f:9d:24:0c:aa:bd:62:e4:6c:34:4c:d3:
         bc:e8:a0:be:c3:a8:05:54:1f:aa:a0:1f:42:38:db:0c:28:37:
         a3:ee:b9:21:2b:39:1d:9a:df:b7:b7:e7:a1:2d:64:82:00:ab:
         5b:18:61:e7:0b:80:87:8b:bb:d7:9d:1e:e2:b3:64:0f:4e:16:
         13:9f:a5:8e:1e:70:72:aa:40:cf:39:43:70:aa:3d:63:14:1e:
         9b:07:2f:10:8a:df:36:e4:0e:9b:c9:ea:b4:de:db:ec:f0:37:
         ee:45:d3:5c:23:44:bf:01:9b:2f:f5:37:eb:27:c0:f4:63:9d:
         9f:1b:8b:46:bb:f4:27:a4:34:d4:f8:68:4d:d2:ee:78:97:5a:
         d4:36:3f:99:1a:0e:3f:4f:a9:2a:40:48:d7:c9:24:cd:28:13:
         b5:2b:90:ec:25:11:62:fb:93:77:65:be:ed:61:b4:82:e4:b3:
         b6:76:c9:53:c9:b5:6b:21:a0:2a:e5:51:e2:df:48:ae:04:13:
         2e:cb:e9:13:84:69:f6:e0:9b:9c:a3:c0:d1:c0:2c:bb:95:d2:
         b4:a8:63:76:fe:82:42:73:0e:71:3f:5f:3e:4f:72:b0:90:45:
         2b:d0:31:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:57:03 2026 by rpki-client