Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File:                     Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier:          plpMrWdFmSxtj2tUE+iqGdLqB+oHr69tdUMR3DU1ETs=
Subject key identifier:   FB:57:ED:AB:51:01:44:5B:84:76:BF:59:6C:BB:E7:5C:E1:4E:BC:14
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer:       /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial:       019F8AFCA27576ACC7B7FD416AC0E4B239ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number:          07BD
Signing time:             Wed 22 Jul 2026 18:00:40 +0000
Manifest this update:     Wed 22 Jul 2026 18:00:40 +0000
Manifest next update:     Thu 23 Jul 2026 18:00:40 +0000
Files and hashes:         1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: /k+4KJ38KOP7M/LTQwax5B0YBEkEeHn6EOLhRUIlbVo=)
                          2: MWM6QEDr90E-Gb18CyVaMUI1SUg.roa (hash: piGRt6COIMkm6UJI/Tww3fuE2c94SS0LGgDLgxHDNQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8a:fc:a2:75:76:ac:c7:b7:fd:41:6a:c0:e4:b2:39:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
        Validity
            Not Before: Jul 22 18:00:40 2026 GMT
            Not After : Jul 23 18:00:40 2026 GMT
        Subject: CN=fb57edab5101445b8476bf596cbbe75ce14ebc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:90:ac:68:a4:3c:ff:e6:19:06:6b:4e:9c:
                    05:fa:1b:99:2f:3e:92:ad:36:3c:68:f1:db:9e:1e:
                    51:ff:09:1a:c4:bf:31:6c:7f:83:56:2e:b0:4c:ea:
                    17:3c:4e:d4:0f:1e:f4:39:6b:f3:f8:55:18:45:74:
                    e5:13:2c:b0:40:62:e5:69:f4:14:c8:8f:3d:13:d9:
                    69:f2:d0:27:49:3d:d9:f6:a1:e6:a0:14:65:8b:e4:
                    bf:01:45:71:e9:21:6e:54:2a:c7:2b:2a:3c:22:a1:
                    47:f6:20:d2:bd:ba:a3:f4:33:39:72:bb:41:9c:20:
                    d9:80:3d:1d:32:27:22:2f:11:07:13:21:34:4c:c0:
                    5b:24:78:93:a1:5b:bf:1c:8e:53:6d:4f:33:9d:ce:
                    6a:0b:21:2a:05:68:30:97:ca:ac:42:5d:7e:77:17:
                    16:01:5e:55:16:6c:3e:fc:df:d5:c6:86:82:60:33:
                    33:98:54:83:46:9f:f9:a3:5a:f0:df:9b:2a:86:6c:
                    16:59:25:8a:09:04:e0:ac:96:e2:a0:23:41:dd:b7:
                    34:7b:41:8c:9c:d5:b7:7a:97:42:cc:af:5c:e0:a6:
                    92:f3:94:79:22:36:88:46:1d:c8:46:36:2a:63:41:
                    32:3c:52:d9:cc:50:25:e9:6b:4a:a8:48:79:69:e2:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:57:ED:AB:51:01:44:5B:84:76:BF:59:6C:BB:E7:5C:E1:4E:BC:14
            X509v3 Authority Key Identifier:
                keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:54:c9:03:cd:69:ee:32:21:29:d1:1c:a7:56:40:9d:71:b9:
         af:e8:f2:a2:97:15:0e:bc:71:e6:4b:0f:22:7b:bf:d8:59:78:
         7c:30:17:3f:c4:af:75:3d:9e:1f:bf:70:14:75:25:76:fa:8e:
         59:90:cb:62:ae:1b:f8:99:17:1a:7e:23:de:77:5d:89:e8:13:
         19:b5:a3:73:93:bb:64:61:93:e3:ae:d0:db:a7:51:8f:a9:c7:
         1e:e6:1d:cf:60:ae:20:6c:be:6a:cb:07:82:20:9a:25:98:bf:
         1a:64:fe:d8:77:50:e7:00:4f:c9:38:a1:a6:ae:da:53:25:76:
         8e:ae:14:f4:e6:c4:18:0a:8b:ce:64:d1:6c:2b:07:19:a2:5b:
         1b:64:19:d6:5b:99:c6:b1:28:13:3a:50:a1:ad:f4:fe:12:ac:
         79:64:ce:d8:1b:1a:dd:fe:6b:d4:85:95:68:ec:c9:ab:c8:d2:
         a3:43:d3:1b:cd:f7:3e:23:23:65:90:0e:46:c2:ed:6d:b9:0a:
         6e:8a:00:ca:02:c3:96:c3:28:8f:af:58:17:23:7a:3e:83:8a:
         3a:d2:c7:cd:8d:24:15:94:d5:44:27:ef:fe:78:01:ef:8a:7a:
         1e:7e:68:17:a5:0d:52:66:3c:8d:21:c3:b7:5e:4a:83:68:6a:
         7f:c1:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 02:00:47 2026 by rpki-client