Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File:                     _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier:          78LLlc3amxEBq28zB0YOTy21s/dJIHCn5m3Xj5JHpzg=
Subject key identifier:   0C:33:DB:24:FD:2B:E2:3B:12:A2:05:2E:29:EC:34:C9:69:4D:BB:3F
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer:       /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial:       019FAC3F266D615EF55FCB0D39F755A411FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number:          14F4
Signing time:             Wed 29 Jul 2026 05:00:47 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:47 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:47 +0000
Files and hashes:         1: _V1LSsZtamsE4WXP60Yw8QNvv70.roa (hash: 86294W5FbZlicyPxaf1Bh5Vh3kJ1iu3Y1KxTGDfYWAk=)
                          2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: 355U35GTqsp3G1vlVu3zxGeOEspbAcYj+iv0WEojDBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:26:6d:61:5e:f5:5f:cb:0d:39:f7:55:a4:11:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
        Validity
            Not Before: Jul 29 05:00:47 2026 GMT
            Not After : Jul 30 05:00:47 2026 GMT
        Subject: CN=0c33db24fd2be23b12a2052e29ec34c9694dbb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:47:4a:39:43:c1:f4:19:88:f0:d4:6e:54:
                    95:ee:85:01:b4:e0:bd:f5:8c:e6:0d:17:50:a6:63:
                    98:01:20:6f:82:b7:47:93:9a:d0:0a:fc:b3:78:77:
                    c2:00:33:fa:f3:fe:88:02:7f:72:c0:ce:05:0d:38:
                    3b:70:19:d9:92:c3:83:3a:b4:86:08:b2:e0:cc:11:
                    33:5d:62:50:dd:39:01:ff:63:e1:a5:22:a4:8f:62:
                    42:89:62:34:e4:4e:6f:a0:8e:40:ab:63:f0:fd:09:
                    e5:93:17:36:cb:90:4d:01:48:9e:17:9b:8a:ce:44:
                    5f:d4:15:0f:99:4a:63:79:8d:0e:36:f5:ac:d5:ad:
                    64:a0:fc:ef:45:21:55:7d:c0:fd:ad:83:4e:e2:ed:
                    c2:44:00:60:31:b2:7c:6c:f6:d6:b3:ce:86:5d:00:
                    59:0d:f0:0c:4d:89:5d:b1:1f:d6:33:a8:77:2f:b4:
                    64:1e:93:a5:e7:ba:61:2e:d0:83:10:b5:68:06:ea:
                    80:77:5d:4b:42:a3:63:bd:1e:b6:6a:81:d9:99:2b:
                    78:2c:ae:06:1c:7c:bd:c7:76:cc:13:28:f2:0e:7c:
                    b6:92:fb:4e:96:d4:25:2f:77:e8:74:9f:0c:b3:5d:
                    d7:e3:46:a5:e7:45:98:c4:a2:21:03:37:ff:03:11:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:33:DB:24:FD:2B:E2:3B:12:A2:05:2E:29:EC:34:C9:69:4D:BB:3F
            X509v3 Authority Key Identifier:
                keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:96:a5:40:d0:b9:d7:aa:46:24:02:68:fd:f0:dd:11:71:c7:
         6d:09:33:9e:b4:8c:92:cb:05:05:0b:93:9a:76:70:6d:f3:f2:
         b2:2c:ef:44:96:48:4c:86:35:21:1f:33:0c:82:37:2d:36:66:
         0e:4b:66:79:a2:91:b4:da:50:c8:83:31:45:b7:02:76:34:a4:
         71:36:a5:43:51:dd:4c:33:f4:db:d1:32:e1:ba:db:ab:de:ec:
         e2:47:ee:29:5f:2f:58:55:17:9f:6f:4b:9b:08:08:dc:e0:ac:
         01:2d:2c:c1:4c:35:9a:65:3c:8f:36:74:99:89:1d:9d:1e:ba:
         c6:07:14:87:73:cc:5e:cb:26:a6:53:56:fd:96:0a:0b:4f:85:
         6c:89:41:d6:9c:0d:33:3e:cb:1e:f8:47:2a:9a:c9:ed:26:fc:
         24:c3:48:ea:5c:2b:49:3a:fc:ca:e9:05:76:f8:af:c3:cb:48:
         33:a7:9d:98:a7:7a:29:86:3b:00:24:25:fc:50:f1:07:fb:23:
         89:67:c8:08:d4:fb:84:0e:62:87:06:6c:0c:22:32:d4:59:b3:
         b3:7c:d1:50:8c:62:e7:fb:f1:69:8a:2e:5b:7f:a3:6d:96:0d:
         8a:16:d3:29:2e:49:8d:ad:12:90:1a:9c:f3:3b:c7:4d:5f:5f:
         03:80:d4:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPyZtYV71X8sNOfdVpBH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkODkzODEzMDdhZTVlM2IxYmE4NjU4Y2RhN2VlMmFkYTQx
NDE0NDcwHhcNMjYwNzI5MDUwMDQ3WhcNMjYwNzMwMDUwMDQ3WjAzMTEwLwYDVQQD
EygwYzMzZGIyNGZkMmJlMjNiMTJhMjA1MmUyOWVjMzRjOTY5NGRiYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwBHSjlDwfQZiPDUblSV7oUBtOC9
9YzmDRdQpmOYASBvgrdHk5rQCvyzeHfCADP68/6IAn9ywM4FDTg7cBnZksODOrSG
CLLgzBEzXWJQ3TkB/2PhpSKkj2JCiWI05E5voI5Aq2Pw/Qnlkxc2y5BNAUieF5uK
zkRf1BUPmUpjeY0ONvWs1a1koPzvRSFVfcD9rYNO4u3CRABgMbJ8bPbWs86GXQBZ
DfAMTYldsR/WM6h3L7RkHpOl57phLtCDELVoBuqAd11LQqNjvR62aoHZmSt4LK4G
HHy9x3bMEyjyDny2kvtOltQlL3fodJ8Ms13X40al50WYxKIhAzf/AxGgcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwz2yT9K+I7EqIFLinsNMlpTbs/MB8GA1UdIwQY
MBaAFP2JOBMHrl47G6hljNp+4q2kFBRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTct
NjQ2ZWU2ZGZhNmI2LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTctNjQ2ZWU2ZGZhNmI2
LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZalQNC5
16pGJAJo/fDdEXHHbQkznrSMkssFBQuTmnZwbfPysizvRJZITIY1IR8zDII3LTZm
DktmeaKRtNpQyIMxRbcCdjSkcTalQ1HdTDP029Ey4brbq97s4kfuKV8vWFUXn29L
mwgI3OCsAS0swUw1mmU8jzZ0mYkdnR66xgcUh3PMXssmplNW/ZYKC0+FbIlB1pwN
Mz7LHvhHKprJ7Sb8JMNI6lwrSTr8yukFdvivw8tIM6edmKd6KYY7ACQl/FDxB/sj
iWfICNT7hA5ihwZsDCIy1Fmzs3zRUIxi5/vxaYouW3+jbZYNihbTKS5Jja0SkBqc
8zvHTV9fA4DUTA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:44 2026 by rpki-client