Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File:                     uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier:          ua+aN52Aeof6cq3s9rAv6AjR7PSJ63NLOdiiFaWwkZI=
Subject key identifier:   9D:87:C2:F9:44:72:AB:61:78:F1:18:7F:D1:AB:88:CB:30:2D:4C:B7
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer:       /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial:       019FA9E2DDF8556EF62426AEF911B1C187E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 18:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:45 +0000
Files and hashes:         1: AXJwwgLV20qOfdiRkcLp7cuyLa8.roa (hash: TJd1vyVMSaddwqO1mLObhJwRHoC09A1cxMdzGIXMVxA=)
                          2: JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa (hash: qDG/lBnPGvBdowawU0zXsB0DnTTCTXSKOxuDVEvE+Lw=)
                          3: JciEJIGTlcBIQFyaMf4k2cUulG0.roa (hash: PsuB426mDHmj/nCSN0DLQAoyVz9KEoXVW/4qNh6n7rE=)
                          4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: GjtLKKQQaz2V6J2Kc6A/RAoFQVq3eFN7REcbTZGDl3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:dd:f8:55:6e:f6:24:26:ae:f9:11:b1:c1:87:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
        Validity
            Not Before: Jul 28 18:00:45 2026 GMT
            Not After : Jul 29 18:00:45 2026 GMT
        Subject: CN=9d87c2f94472ab6178f1187fd1ab88cb302d4cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:84:af:ee:85:3e:9a:4f:52:43:d5:33:fb:
                    04:68:ca:86:19:2f:1a:c8:06:a0:bb:96:94:19:32:
                    54:29:ce:8e:59:57:95:50:a8:ae:bf:b5:bd:d5:d7:
                    81:af:fe:c8:7f:7c:d3:5d:a5:1d:9d:1d:f2:c8:f3:
                    cd:a8:f8:60:77:53:98:46:ef:82:e7:c4:69:32:3a:
                    4c:7d:8a:21:63:43:96:38:ed:2e:0c:60:5d:8b:ad:
                    55:cf:15:05:60:5a:19:a1:f8:4a:94:67:ee:04:c5:
                    95:54:e0:c9:fd:d4:d4:c7:95:49:ec:ba:64:c8:fe:
                    c2:ff:f5:be:06:f2:fd:4f:27:dc:da:c0:a2:22:15:
                    1e:a1:da:20:1f:f3:db:f7:5e:22:da:f9:ef:89:29:
                    6d:98:43:fd:d1:81:54:42:f2:f2:14:a1:5c:df:55:
                    c6:b3:42:3c:ca:54:7d:14:b1:1d:c5:e6:13:01:da:
                    b6:71:a8:34:ed:f0:9b:a1:c7:2d:97:97:cf:d3:07:
                    03:7f:ca:b2:33:8e:fd:c9:26:96:8a:ee:1d:a3:66:
                    6b:28:ae:1e:c3:4d:18:0f:3c:ae:5a:cf:a7:cc:fc:
                    6f:4e:d0:2a:1d:80:57:09:0f:cb:0e:47:b9:9a:4b:
                    4b:58:b4:0a:36:2d:f7:83:1a:3a:4e:57:1f:f0:70:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:87:C2:F9:44:72:AB:61:78:F1:18:7F:D1:AB:88:CB:30:2D:4C:B7
            X509v3 Authority Key Identifier:
                keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:0f:d5:85:72:c5:12:c0:96:f8:7b:bf:e4:03:10:c9:0a:
         70:be:da:c3:ad:5e:04:b2:8a:33:c3:e3:93:b3:ae:af:4d:fc:
         ed:66:dd:5c:c0:11:e3:dd:83:53:a1:01:5f:2b:bb:49:c6:c1:
         7e:99:c2:fe:52:69:2a:a4:29:b1:d3:82:de:7f:9b:8c:e9:64:
         cf:74:68:7a:7f:3a:13:6c:8c:bf:49:f9:52:d7:63:31:de:a5:
         0d:d3:a6:f6:0d:5f:ff:5f:53:d6:35:54:80:bd:ef:96:16:79:
         35:04:21:d8:8d:05:c7:78:0c:6f:08:4b:d9:14:87:c6:7e:7e:
         30:7a:76:23:67:92:a4:96:c9:0a:06:41:3b:c7:c3:b5:f0:91:
         f2:5d:41:d1:56:bf:c8:7b:4e:fa:a5:41:a5:03:db:5a:4c:3a:
         e2:fb:85:aa:ea:35:9a:a7:8a:64:98:e4:e8:59:9f:ca:9a:0b:
         48:60:31:e7:cf:2b:bc:29:bc:75:8b:de:dd:f6:48:c7:c8:df:
         bf:ee:d1:95:56:50:98:ed:27:ba:b3:2a:ea:52:f1:57:df:b0:
         12:4b:ae:0a:ba:bc:ef:9c:08:74:ed:7e:f3:94:e6:1d:f2:34:
         7f:6d:5d:09:66:dc:d0:9a:16:eb:4c:5f:f1:79:c3:b8:b0:2a:
         7d:74:ee:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4t34VW72JCau+RGxwYfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZTBmNzk4NDFjMDIxMGQ5NWI0ZWY1NmZmNjg0NDFjMmFh
OWZjMGYwHhcNMjYwNzI4MTgwMDQ1WhcNMjYwNzI5MTgwMDQ1WjAzMTEwLwYDVQQD
Eyg5ZDg3YzJmOTQ0NzJhYjYxNzhmMTE4N2ZkMWFiODhjYjMwMmQ0Y2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteKEr+6FPppPUkPVM/sEaMqGGS8a
yAagu5aUGTJUKc6OWVeVUKiuv7W91deBr/7If3zTXaUdnR3yyPPNqPhgd1OYRu+C
58RpMjpMfYohY0OWOO0uDGBdi61VzxUFYFoZofhKlGfuBMWVVODJ/dTUx5VJ7Lpk
yP7C//W+BvL9Tyfc2sCiIhUeodogH/Pb914i2vnviSltmEP90YFUQvLyFKFc31XG
s0I8ylR9FLEdxeYTAdq2cag07fCbocctl5fP0wcDf8qyM479ySaWiu4do2ZrKK4e
w00YDzyuWs+nzPxvTtAqHYBXCQ/LDke5mktLWLQKNi33gxo6Tlcf8HBexQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2HwvlEcqthePEYf9GriMswLUy3MB8GA1UdIwQY
MBaAFLjg95hBwCENlbTvVv9oRBwqqfwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2Mt
NmVhM2NiZmQzYTg0LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2MtNmVhM2NiZmQzYTg0
LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGa0P1YVy
xRLAlvh7v+QDEMkKcL7aw61eBLKKM8Pjk7Our0387WbdXMAR492DU6EBXyu7ScbB
fpnC/lJpKqQpsdOC3n+bjOlkz3Roen86E2yMv0n5UtdjMd6lDdOm9g1f/19T1jVU
gL3vlhZ5NQQh2I0Fx3gMbwhL2RSHxn5+MHp2I2eSpJbJCgZBO8fDtfCR8l1B0Va/
yHtO+qVBpQPbWkw64vuFquo1mqeKZJjk6FmfypoLSGAx588rvCm8dYve3fZIx8jf
v+7RlVZQmO0nurMq6lLxV9+wEkuuCrq875wIdO1+85TmHfI0f21dCWbc0JoW60xf
8XnDuLAqfXTuYg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:11:54 2026 by rpki-client