Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft
File:                     c18B8zOIfOznDMXnKS8nA96mVWA.mft (raw, json)
Hash identifier:          K5WA6vp/ReI9RSn8egBtkX7Ihw9GNGVL4geDpqCkI0k=
Subject key identifier:   97:2C:24:84:04:0D:E5:62:56:FC:B1:29:BB:C8:05:BF:0B:15:0E:09
Authority key identifier: 73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60
Certificate issuer:       /CN=735f01f333887cece70cc5e7292f2703dea65560
Certificate serial:       019F29251D080956384FF891BA79DF923CF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft
Manifest number:          0A
Signing time:             Fri 03 Jul 2026 18:02:05 +0000
Manifest this update:     Fri 03 Jul 2026 18:02:05 +0000
Manifest next update:     Sat 04 Jul 2026 18:02:05 +0000
Files and hashes:         1: 1-38aX-tskK1NxV7Z4oDc2929WTo.roa (hash: wGKChe8kk2F19A+QYee9JgDbbcid8v9Ltq24bXjsVaY=)
                          2: c18B8zOIfOznDMXnKS8nA96mVWA.crl (hash: OPKAo+v+9B8RXXHHV3uj1qbN4ZQGHjA3tlayYJwT7v4=)
                          3: lKuSj2D2s_BkgbDkwq4ezJI3T3w.roa (hash: /Moy61qk0I8UDcBmGXGAKjNku/2a6wMeGyPj13SBh5o=)
                          4: mDdtQr35zduylt7DKGcUWYDRCZw.roa (hash: OTT2mWHzTpqs9Mz6NLxGSb11Gcy2ahN6UHvvbuvy6vA=)
                          5: tMqEucs9yUI4coi6ZQvwFmhxM8M.roa (hash: t3cGJbOcrlvOyLZpl4oiRqWt7x2OUIpembveyAOtfHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:29:25:1d:08:09:56:38:4f:f8:91:ba:79:df:92:3c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735f01f333887cece70cc5e7292f2703dea65560
        Validity
            Not Before: Jul  3 18:02:05 2026 GMT
            Not After : Jul  4 18:02:05 2026 GMT
        Subject: CN=972c2484040de56256fcb129bbc805bf0b150e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:75:2e:b3:5a:a7:2f:51:72:39:47:b4:16:9c:
                    3d:16:68:c5:76:66:7c:f4:66:df:aa:47:24:51:c6:
                    17:6e:a8:ea:69:bf:de:5e:67:63:2d:75:85:92:62:
                    de:92:e0:99:5a:61:ef:0f:63:7d:4a:c8:93:b7:d7:
                    c5:13:f3:5f:6d:2c:d3:7f:bf:ad:a9:54:63:26:66:
                    d8:b0:9d:a9:08:ae:38:f1:ed:d1:cb:0a:23:ea:90:
                    73:29:48:b9:a3:d9:07:c0:0d:6c:9c:39:35:97:4e:
                    f1:86:d0:96:17:49:68:64:d4:4f:2f:d9:cd:43:7b:
                    f8:65:10:82:e0:f3:4d:f7:29:d4:84:d0:f3:72:08:
                    7e:6a:cb:5f:0f:b6:8e:b9:a2:ec:4a:22:1f:34:bf:
                    c6:99:4b:ea:76:cd:6e:4f:b5:cb:95:62:ba:e9:27:
                    e6:41:e1:df:d6:cc:8f:f2:a4:04:56:35:1d:4b:76:
                    d7:0f:a9:24:81:ea:f4:90:67:b1:16:98:ee:08:81:
                    2f:95:1c:4b:b1:75:c2:20:d8:7c:4d:bc:65:a0:09:
                    86:ac:61:9d:5f:47:eb:22:18:8d:90:9f:f5:50:09:
                    b0:72:70:f8:3b:47:8a:b4:46:9c:91:a8:fe:7a:52:
                    57:fc:f9:85:67:80:4b:2a:c5:33:6a:04:02:7d:a9:
                    d5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2C:24:84:04:0D:E5:62:56:FC:B1:29:BB:C8:05:BF:0B:15:0E:09
            X509v3 Authority Key Identifier:
                keyid:73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ac:c3:2c:19:77:fc:95:8f:b8:95:45:2d:b2:9d:40:f7:5a:
         5c:76:04:42:31:3e:c6:e0:b0:0b:d9:9e:fb:17:3f:79:e8:5b:
         95:8b:77:ed:1a:eb:92:4a:05:00:60:80:b6:d7:99:56:73:27:
         e6:38:ce:27:1a:0d:4f:bd:82:b4:b5:85:65:cd:f7:1b:d9:a6:
         20:e0:30:01:78:8b:98:d1:79:47:29:8a:5b:2e:9c:29:da:9c:
         a4:07:d5:20:26:34:52:6a:1b:47:1d:29:6a:f8:40:d2:96:09:
         a4:0b:ca:6c:4d:28:a9:db:2a:8f:b6:02:54:a5:42:b5:71:e5:
         31:ad:80:2b:51:03:51:f5:bd:d8:aa:90:40:3a:5e:94:ba:5d:
         b6:2b:64:45:bf:40:fa:aa:43:d4:de:95:9e:80:a4:c0:8b:41:
         f8:04:29:0d:d8:4c:68:2e:82:f3:e0:b6:41:f3:fb:25:d8:9d:
         b2:f7:b4:c8:14:e9:79:53:52:5e:39:00:96:80:06:8a:56:1d:
         86:a9:94:1b:3a:03:45:81:b1:75:98:5f:65:1a:73:31:4b:c8:
         95:43:0c:f9:d5:61:f6:19:30:2a:0b:a7:f8:e4:47:2c:ac:4b:
         18:9f:f4:07:75:03:a4:aa:74:5e:35:37:41:e3:a4:35:a2:d6:
         d5:4e:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 20:53:08 2026 by rpki-client