Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
File:                     dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft (raw, json)
Hash identifier:          wCZrZZkrhrvhEct7syLuj9vqug6vNt7ip8wyx1Kbl6I=
Subject key identifier:   41:51:FA:F0:B0:D4:33:9A:3A:53:9E:64:B7:04:67:AF:03:83:F5:17
Authority key identifier: 76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A
Certificate issuer:       /CN=766d18b7a5a837e6714fbab252400a3beabc220a
Certificate serial:       019F24D99BCFA98DB10DEC4A2B5FD702FF84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
Manifest number:          0121
Signing time:             Thu 02 Jul 2026 22:01:08 +0000
Manifest this update:     Thu 02 Jul 2026 22:01:08 +0000
Manifest next update:     Fri 03 Jul 2026 22:01:08 +0000
Files and hashes:         1: TPgJA7asD1USxd5F7pee5lciH88.roa (hash: J3JqRxhZZokO/izJrrFgyJGCYZDVRXSpr2zjvNoSLcU=)
                          2: dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl (hash: dU5HWvU00ydm44by5aN+HiulaKtTqFdjlUbObnyVQvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 Jul 2026 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:24:d9:9b:cf:a9:8d:b1:0d:ec:4a:2b:5f:d7:02:ff:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766d18b7a5a837e6714fbab252400a3beabc220a
        Validity
            Not Before: Jul  2 22:01:08 2026 GMT
            Not After : Jul  3 22:01:08 2026 GMT
        Subject: CN=4151faf0b0d4339a3a539e64b70467af0383f517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:51:54:df:e0:d4:8a:97:09:20:55:e4:eb:09:
                    cc:28:44:f3:39:8b:a4:10:df:a3:12:45:2b:17:82:
                    80:b4:c6:c7:00:d6:8f:1f:e2:f8:8a:15:c9:34:e5:
                    53:fb:46:e7:5c:07:87:61:5e:26:fa:6a:bc:e5:c6:
                    ca:e5:2d:63:6d:d0:e0:42:60:b7:f8:40:8f:f3:98:
                    25:d3:57:00:44:e4:2f:17:68:b8:3b:d4:b2:2d:86:
                    bf:48:52:a2:82:62:68:3f:06:ec:c6:73:03:ff:35:
                    d2:87:fb:92:9c:6c:5f:36:0e:6d:c7:b2:8e:77:3a:
                    61:db:9d:cd:0d:ee:dd:b3:f2:42:df:0e:d6:a2:2a:
                    e7:19:09:0d:00:29:34:a2:d4:8f:0b:fc:eb:ec:fb:
                    51:02:e9:c2:08:79:14:bf:9c:8c:31:6b:d0:59:93:
                    63:47:97:2e:88:61:af:d2:bf:a9:12:ea:bb:57:b7:
                    db:e3:4f:c9:0a:73:f3:c9:ba:26:6c:42:65:dc:9a:
                    6a:4b:b0:fb:68:c1:e7:4c:a8:e3:23:f5:d9:2a:a8:
                    b8:44:d8:56:7a:0f:84:e6:da:99:d9:c4:32:cb:de:
                    b6:ac:d1:c5:ef:f2:cb:c6:48:b0:08:ab:33:40:05:
                    f9:8d:cc:a6:42:d8:84:ef:c9:e6:9b:9d:a5:8b:3c:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:51:FA:F0:B0:D4:33:9A:3A:53:9E:64:B7:04:67:AF:03:83:F5:17
            X509v3 Authority Key Identifier:
                keyid:76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:78:cd:51:39:b1:f6:f8:17:3e:e6:76:58:02:6d:11:74:f9:
         0e:44:61:a1:b6:ea:42:d8:73:cf:37:05:ea:7c:2c:a1:aa:39:
         2a:3a:1c:b5:e7:f4:15:35:a6:db:c5:2b:cc:99:2b:05:f0:e9:
         a8:70:12:66:24:5d:91:a6:e3:4f:ba:47:aa:39:99:a3:94:ba:
         a2:fc:73:0e:22:a1:b2:31:79:01:67:e0:2f:68:69:89:39:9d:
         cf:af:03:dd:3b:71:5f:71:50:3b:3e:85:4d:22:2f:fb:d5:3e:
         cd:21:0a:13:72:0e:81:0c:59:6f:a8:ee:bd:37:ec:c2:4d:1c:
         a5:6c:a2:3e:81:55:8e:96:9c:b5:50:d5:b3:5b:14:0e:a8:0c:
         c9:ee:95:e1:0c:3c:86:1d:c1:b4:c0:09:0c:94:5c:76:c2:c7:
         c2:c6:93:27:f6:ac:8d:1f:0f:c8:c2:cd:ed:73:5a:3f:4b:27:
         4a:4e:ce:bc:83:dc:72:33:9b:61:c8:fa:e5:c5:20:00:46:0c:
         1c:c5:c1:39:62:09:a3:dc:37:26:8a:c1:20:bb:f2:96:85:62:
         72:d6:44:cf:d7:b9:0f:a9:78:b1:1b:18:eb:8c:62:1a:ac:26:
         c4:8d:e6:f5:31:b8:1f:76:8a:1d:1a:f1:8e:f4:fa:57:b8:8d:
         df:61:1b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 05:42:17 2026 by rpki-client