Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File:                     u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier:          /Y/f7h1eCNL5R35e9ctZ293JNqWjK2Dzq294RS3Tl5g=
Subject key identifier:   04:40:B8:A3:43:37:ED:11:CD:BF:7E:9D:D7:1F:FE:9F:20:68:D4:8C
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer:       /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial:       019FA9AB92683BF334C7BECB1881BC191268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number:          19D7
Signing time:             Tue 28 Jul 2026 17:00:21 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:21 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:21 +0000
Files and hashes:         1: dK7BHFnWg4Ak5BA73uAKBbgJyrU.roa (hash: h8SstddteIMfyTQvh7qKg5ql0pCJQQ+o3Yc6Ve2+nJo=)
                          2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: P5jN5Hrk4YPfh4Eck/gahLgNHAK0et9nhOufYIj1pgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:92:68:3b:f3:34:c7:be:cb:18:81:bc:19:12:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
        Validity
            Not Before: Jul 28 17:00:21 2026 GMT
            Not After : Jul 29 17:00:21 2026 GMT
        Subject: CN=0440b8a34337ed11cdbf7e9dd71ffe9f2068d48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:ce:df:fe:a4:25:16:f6:e2:65:6c:38:bd:
                    61:b5:30:f0:51:30:24:ad:e9:97:5a:2c:7c:85:27:
                    0a:8b:a9:65:88:92:84:08:dc:86:5d:73:14:6d:cb:
                    1c:69:b5:1b:80:04:a6:9f:99:f8:00:8a:a6:b6:45:
                    39:2d:80:21:54:14:87:0f:fc:18:dc:bc:f3:3c:67:
                    4f:09:b9:7a:70:71:53:72:f5:f5:3b:c8:64:db:3d:
                    5d:29:50:fc:a9:1a:76:77:77:e0:5c:93:36:9d:f3:
                    60:e7:92:90:ed:43:83:4b:04:67:6d:4f:59:c4:76:
                    14:83:b4:a7:63:87:89:33:dd:e7:f8:95:fe:8a:8a:
                    80:90:0e:5b:34:15:8d:06:9f:ef:c7:5a:f1:ff:44:
                    44:49:ab:59:0f:9e:84:54:30:72:6f:1f:bb:e4:64:
                    1f:94:6b:cf:4f:8d:f6:17:b0:94:45:27:7e:52:1f:
                    fc:19:30:49:96:31:2f:47:1b:22:b3:28:7a:ca:55:
                    36:d4:c2:3e:00:c2:9e:ba:3e:a2:64:2c:60:91:6e:
                    ca:34:72:7f:e7:88:10:6d:2c:fd:c9:60:7f:a6:d5:
                    e0:c9:60:da:b4:fe:a9:91:29:b7:e9:2f:d7:5b:6c:
                    2b:13:ca:4a:18:e5:99:99:85:87:d6:6b:fb:4b:15:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:40:B8:A3:43:37:ED:11:CD:BF:7E:9D:D7:1F:FE:9F:20:68:D4:8C
            X509v3 Authority Key Identifier:
                keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:50:a6:c6:fe:fc:97:a6:c0:67:d2:44:ea:fb:37:6b:83:a4:
         50:15:3f:c1:91:72:cf:34:ee:f2:35:3e:60:60:db:e8:c1:c5:
         ac:4d:dc:41:0e:73:9b:8c:eb:f6:ac:2c:56:13:0f:74:a7:75:
         78:dd:1f:13:aa:bf:3b:0c:77:51:22:f4:e4:ea:dd:43:49:01:
         52:73:f7:d4:c0:fd:1a:68:df:eb:16:e2:e8:ee:bb:fe:52:8a:
         3b:20:56:d5:bf:9c:88:a4:09:2e:33:82:6a:df:32:ad:49:f9:
         ac:cb:aa:35:90:12:7c:82:2c:15:9f:c5:55:cc:eb:ac:e8:56:
         d8:9d:80:94:db:a3:cc:5f:ce:54:87:b3:b5:f4:33:19:99:ef:
         b9:99:65:ba:5a:65:ee:54:57:7f:0b:32:1c:05:62:b8:f6:90:
         1f:4b:44:8b:71:a3:31:01:0c:0d:91:e8:f7:16:9a:71:12:75:
         4e:dc:be:77:aa:ce:f9:0c:b4:9e:3d:32:7c:34:f4:3f:ea:9d:
         b4:ac:f1:d9:0e:97:04:5f:82:88:6b:36:0c:88:41:bb:78:a4:
         97:d1:38:b8:7c:ca:d6:8d:36:42:4a:32:0e:6a:31:b1:4e:7e:
         3a:d8:1c:f7:72:20:cb:69:9b:bd:be:cb:39:50:58:66:7b:cb:
         94:90:88:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq5JoO/M0x77LGIG8GRJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNTc1NjFjYTJkYmY3NTBlOGY1ZTBiNzM4OWVmMDljZTli
NWJjZWEwHhcNMjYwNzI4MTcwMDIxWhcNMjYwNzI5MTcwMDIxWjAzMTEwLwYDVQQD
EygwNDQwYjhhMzQzMzdlZDExY2RiZjdlOWRkNzFmZmU5ZjIwNjhkNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvjO3/6kJRb24mVsOL1htTDwUTAk
remXWix8hScKi6lliJKECNyGXXMUbcscabUbgASmn5n4AIqmtkU5LYAhVBSHD/wY
3LzzPGdPCbl6cHFTcvX1O8hk2z1dKVD8qRp2d3fgXJM2nfNg55KQ7UODSwRnbU9Z
xHYUg7SnY4eJM93n+JX+ioqAkA5bNBWNBp/vx1rx/0RESatZD56EVDBybx+75GQf
lGvPT432F7CURSd+Uh/8GTBJljEvRxsisyh6ylU21MI+AMKeuj6iZCxgkW7KNHJ/
54gQbSz9yWB/ptXgyWDatP6pkSm36S/XW2wrE8pKGOWZmYWH1mv7SxVHHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARAuKNDN+0Rzb9+ndcf/p8gaNSMMB8GA1UdIwQY
MBaAFLtXVhyi2/dQ6PXgtzie8JzptbzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUt
MDIxMjVlNDRlM2E4LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNWY5YWEtMzM3Yi00ZDYwLThmNWUtMDIxMjVlNDRlM2E4
LzEvdTFkV0hLTGI5MURvOWVDM09KN3duT20xdk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVCmxv78
l6bAZ9JE6vs3a4OkUBU/wZFyzzTu8jU+YGDb6MHFrE3cQQ5zm4zr9qwsVhMPdKd1
eN0fE6q/Owx3USL05OrdQ0kBUnP31MD9Gmjf6xbi6O67/lKKOyBW1b+ciKQJLjOC
at8yrUn5rMuqNZASfIIsFZ/FVczrrOhW2J2AlNujzF/OVIeztfQzGZnvuZllulpl
7lRXfwsyHAViuPaQH0tEi3GjMQEMDZHo9xaacRJ1Tty+d6rO+Qy0nj0yfDT0P+qd
tKzx2Q6XBF+CiGs2DIhBu3ikl9E4uHzK1o02QkoyDmoxsU5+Otgc93Igy2mbvb7L
OVBYZnvLlJCIsQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:14 2026 by rpki-client