Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File:                     Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier:          B36Mv4GmB8R32XwVcOVU7nNKaac8IDkXzYuy0HVV7Q8=
Subject key identifier:   D7:75:0A:29:9A:A0:89:2A:36:E6:E4:67:6B:AC:1E:5C:F5:09:CC:63
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer:       /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial:       019FAB9A765586705703711391F0D8EF56E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 02:00:54 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:54 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:54 +0000
Files and hashes:         1: 2UPTAgiJvUFj9KxwMHk_neJV1Ts.roa (hash: chaCLnBUf8VW3Cyy0U4Y2DmReJ/YoQuLRxfoEk9G/Zs=)
                          2: 5r35RdY0vy4lh3WOV010F9-QFXw.roa (hash: G+I8XeYNJKZwLdV9Hm/0m91ziGrBNMHkmj6EJpZj11c=)
                          3: CIsoBMnJ1HH2_kjCOniPyHt_zdo.roa (hash: rIsVKuNDzl7s31Uqv2wlQw7E8fHntXl7uQadNq2LiGk=)
                          4: LU_rRpVG0rNU5sbORgmoor-WG8E.roa (hash: v6SXttNOyzn7P8hwnB7Tofa/4Bnu7wdokfdtafR2ixc=)
                          5: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: lmBUGNaeyYTueUT47Vdeu+MjmxZC0hWqOOwE/yCcA6M=)
                          6: SP8ZFm--93L34rMKDZHfL8Eh_ro.roa (hash: cp6DWhPPeKxvKEzaDsnvDh3dMYI9vYEIXkFKulFhNyA=)
                          7: aZAulIKVvXbN8omq0JhX_jGTQpQ.roa (hash: a1Ep0d4JmHuZC92VG94ayoNuXL+o7ITThTyrhPBbaU4=)
                          8: exjfT9uAFU7f_gIJUid1TXJtR8A.roa (hash: 4rc5j3Of5lWDlFZbenegwws4HWNu69CTDYEmMKe9DAY=)
                          9: o6k4KBPjdil3WuB7HudYZFQVuio.roa (hash: 5XEGVtaoTy/OrakXg9NARGFxY6y76Ds7hBFFlDQicdE=)
                          10: rcsE8T3loa9paQtOZYTdGqYZZdQ.roa (hash: aTqIKXOe4lJEG0nzJ4iYV8aOwdLjU0r2z02TUxqz12s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:76:55:86:70:57:03:71:13:91:f0:d8:ef:56:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
        Validity
            Not Before: Jul 29 02:00:54 2026 GMT
            Not After : Jul 30 02:00:54 2026 GMT
        Subject: CN=d7750a299aa0892a36e6e4676bac1e5cf509cc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:48:1b:b1:76:7a:54:3a:4c:92:ea:72:1a:
                    0e:45:99:2b:f2:3d:2e:d5:5c:c5:6f:72:a9:32:c4:
                    64:5f:bf:87:5f:cc:72:9f:9b:00:b3:8a:33:29:10:
                    a0:e8:3a:76:a4:93:f1:ef:e3:b8:92:16:13:39:1b:
                    0d:0d:87:6f:3a:5c:27:3e:f0:3e:11:62:43:7c:66:
                    1e:c7:e3:f0:7d:de:03:f4:43:9f:83:ef:6e:a3:37:
                    18:c8:54:5e:6d:eb:7d:92:fb:e1:74:f6:95:db:0e:
                    69:d5:6f:4b:8e:c3:73:9a:92:52:5a:31:3c:d7:69:
                    14:e0:40:b4:cd:12:48:8a:21:d2:ab:72:59:ec:60:
                    d9:62:e6:42:9d:de:00:06:61:44:da:48:89:6c:23:
                    3e:e0:dc:8e:52:69:88:10:61:11:9b:c6:e6:7f:f9:
                    1c:bf:bb:18:ee:db:42:8e:27:42:b5:4f:9b:46:0c:
                    21:84:55:6a:f8:c8:94:48:dc:02:27:ff:68:11:ba:
                    a7:45:f2:15:e3:de:54:28:21:4b:b1:f0:8f:7d:bd:
                    b7:07:38:54:55:ae:c9:09:3f:52:51:91:3b:cb:82:
                    7a:56:35:3a:28:47:97:e7:e5:b5:e1:10:d8:cb:d7:
                    ae:7b:9e:b7:0c:88:f1:d6:cd:eb:07:9f:88:99:72:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:75:0A:29:9A:A0:89:2A:36:E6:E4:67:6B:AC:1E:5C:F5:09:CC:63
            X509v3 Authority Key Identifier:
                keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:47:96:3b:21:3c:bc:c6:4d:ae:47:47:cf:4c:62:ca:02:9e:
         a7:50:51:6b:19:8e:8a:72:57:8b:c5:b9:e2:88:17:5e:d9:fc:
         3b:b6:8d:e4:94:31:2b:09:fa:18:1d:57:e6:ec:c6:34:75:e1:
         23:95:0e:f3:80:a5:84:c6:f0:99:c2:90:95:1d:d1:46:b1:b5:
         c8:53:a6:43:ae:fe:23:57:17:e3:ab:4f:65:7b:9e:28:0d:0c:
         ca:f5:37:3b:93:3f:15:ab:a6:8b:7c:15:11:97:1d:48:50:7a:
         b0:d0:c7:25:2a:8e:5c:00:b9:cb:db:f4:60:c9:db:9a:97:36:
         c4:a3:36:58:ce:3f:04:99:2d:d1:a5:cd:11:e3:0a:9a:27:40:
         3a:44:43:8e:09:6d:84:9c:4b:06:a0:f0:8e:5c:f3:54:ed:61:
         19:3e:e7:47:0a:fa:8d:37:56:8e:9d:73:e6:e5:7c:52:7a:00:
         ec:60:19:bb:49:74:00:f6:d3:3a:a1:b6:f7:7d:09:52:dc:ff:
         2b:cb:b4:5f:53:67:5c:e0:db:29:80:20:c8:6e:f7:3c:30:7d:
         b9:c8:78:3e:24:56:44:3a:e3:1d:e0:9e:49:33:5b:8a:4f:cc:
         0d:94:5a:57:cb:0b:b4:ee:1d:5f:4c:5f:e7:ec:15:22:24:09:
         06:c0:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:32:59 2026 by rpki-client