Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File:                     SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier:          1N8ah/VENnqIvWeGt1TrbWzPScDhbcQMdEBxey5B6PU=
Subject key identifier:   75:AF:AB:03:2A:61:44:C1:4E:42:97:1B:33:FC:F8:54:D4:71:09:BC
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer:       /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial:       019FA1F22D934A10C00BB3F6BC3828E065F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number:          17CE
Signing time:             Mon 27 Jul 2026 05:00:30 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:30 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:30 +0000
Files and hashes:         1: 32houEZJjYMHYgPuRqIg-2gVrRU.roa (hash: SgYOhNo4HZLgeATCDQYMmqSzEM1MXHyJPN6hUBC7MIM=)
                          2: JnkLx50ImRIwe6DLwjoBPmLJiIM.roa (hash: ZgcI3W3bS8GffqjlQ449bvcUFmbTNqw4WdF2nIUN8ao=)
                          3: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: a/yIa9TYnjODC3Z327y9Xx3roY/EcuMzwqR/KW2xRCw=)
                          4: TSB5mTZZzRTTPnt6-Y8o-3CQEPA.roa (hash: PsDTk/dMLVROLGkVcO0KwNjR8rb+3K2JtemVORHSo8Y=)
                          5: Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa (hash: OMd6zbL5MprZ3M6eB+ZY4S4Gxx6gPSlVJAESUBQW+L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:2d:93:4a:10:c0:0b:b3:f6:bc:38:28:e0:65:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
        Validity
            Not Before: Jul 27 05:00:30 2026 GMT
            Not After : Jul 28 05:00:30 2026 GMT
        Subject: CN=75afab032a6144c14e42971b33fcf854d47109bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:9b:6d:b7:a2:0c:a2:fb:c3:de:4b:88:54:
                    eb:b4:fe:45:0a:d9:6e:05:78:0c:6d:75:11:95:12:
                    e9:d7:6d:de:fc:a9:df:a2:e4:80:2c:55:fd:66:00:
                    a2:1d:3a:72:a0:a2:cb:bf:cd:2e:ee:06:38:e6:d7:
                    62:61:82:c4:d8:e8:d2:0a:ec:9b:9f:b7:75:e5:ca:
                    11:f8:d9:91:80:9a:c9:0e:06:a9:9f:08:16:c1:47:
                    8d:26:26:da:79:a8:33:99:a9:3c:f8:3f:90:93:c7:
                    81:3b:25:a8:10:43:d3:37:41:a1:3d:56:1b:ec:fa:
                    79:ff:27:7e:0a:a7:59:e8:99:8a:b8:c1:3c:f0:d0:
                    e6:dd:54:eb:c4:3e:55:58:ec:b2:ab:34:04:cb:9e:
                    2c:b3:57:5f:b1:18:d2:3c:f0:24:ff:f7:fb:53:2f:
                    ca:82:2d:21:9f:f7:48:97:45:5f:c8:82:ea:f1:c6:
                    f4:fc:e4:f4:f0:aa:ef:6d:92:8d:13:1f:67:62:1a:
                    bc:3c:60:4d:be:e9:51:66:9e:e4:13:40:ea:d6:a1:
                    21:80:77:76:ed:bd:ad:bc:33:1b:c3:7a:92:91:49:
                    75:82:54:5a:7c:ed:f7:36:81:fc:5c:71:8a:38:40:
                    af:05:bf:b1:54:a2:60:63:67:04:c0:0b:c0:a9:40:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AF:AB:03:2A:61:44:C1:4E:42:97:1B:33:FC:F8:54:D4:71:09:BC
            X509v3 Authority Key Identifier:
                keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:a7:8d:9b:97:6e:a8:e2:cf:89:c2:a3:96:0f:91:8f:b3:
         8a:65:3d:46:06:26:d4:a4:be:83:97:34:6d:0e:29:bd:16:e4:
         58:a5:fb:73:4f:26:4c:06:31:cb:bb:eb:cc:36:62:f9:93:23:
         d2:09:5c:2b:70:8c:68:da:8f:15:d3:61:c4:a1:c8:7e:bc:8f:
         71:46:fa:08:55:0f:47:07:7c:cf:4e:4f:fa:fd:18:4a:f3:d7:
         d0:e6:a4:93:88:f4:ee:fe:91:46:ee:09:51:8c:67:f0:c6:26:
         2a:d7:48:95:ff:de:4e:13:5d:2e:aa:78:5c:f1:ea:12:7f:90:
         f1:14:3a:65:d1:3b:ab:58:9b:80:6a:3f:bd:d6:9d:ab:ab:9c:
         ee:4b:28:24:fb:15:51:b1:ce:7d:78:9f:b0:33:0a:13:6b:2b:
         26:c9:25:a5:19:63:b9:fd:5f:25:6c:40:27:34:a4:e8:4c:b1:
         da:e6:fe:5c:e0:b3:ab:a2:9a:c1:ca:6b:c3:ec:0b:9a:7f:b8:
         95:ef:7f:d6:9a:3d:d2:81:c0:39:98:8b:b1:d7:08:6e:66:61:
         f8:81:62:4f:b9:b7:fa:6a:49:39:73:b4:9e:6f:bc:04:e4:3e:
         99:b9:cb:64:4c:65:05:44:91:5e:51:a8:ad:89:b4:a2:f7:24:
         8d:db:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:18 2026 by rpki-client