Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
File:                     v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json)
Hash identifier:          bSgxcQoq83KcLGLTnLxO66SLzud8yle+sStLWVkZ5fI=
Subject key identifier:   0C:80:5C:BC:FC:46:B8:2E:54:9E:6D:E2:65:06:10:19:84:09:F2:5A
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Certificate issuer:       /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial:       019FAA50BF62BBA684774E518F796683C6A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
Manifest number:          19ED
Signing time:             Tue 28 Jul 2026 20:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:46 +0000
Files and hashes:         1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=)
                          2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=)
                          3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=)
                          4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=)
                          5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=)
                          6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=)
                          7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=)
                          8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=)
                          9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=)
                          10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=)
                          11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=)
                          12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=)
                          13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=)
                          14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=)
                          15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=)
                          16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=)
                          17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=)
                          18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=)
                          19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=)
                          20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=)
                          21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=)
                          22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=)
                          23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=)
                          24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=)
                          25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: QZsbeY9fmm8kLtXhEWMfE+MmM4UxsbZWhNmVupt9Xkg=)
                          26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:bf:62:bb:a6:84:77:4e:51:8f:79:66:83:c6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
        Validity
            Not Before: Jul 28 20:00:46 2026 GMT
            Not After : Jul 29 20:00:46 2026 GMT
        Subject: CN=0c805cbcfc46b82e549e6de2650610198409f25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:2c:f0:ff:ba:e1:47:62:51:c2:71:3c:3a:
                    42:e7:d4:e7:25:29:fd:09:e6:b1:ee:44:86:61:0e:
                    1f:a4:c5:ca:49:bf:0f:89:87:6c:18:09:58:3d:bb:
                    30:81:45:1b:e9:34:7a:df:dd:2e:f6:a9:a0:c7:25:
                    49:c5:6c:e1:7e:72:d0:93:ef:5d:73:17:a1:a5:d6:
                    c9:56:6e:9e:2d:0f:aa:bf:98:e1:ce:0e:51:64:07:
                    69:7e:96:ee:52:6a:69:2c:47:6e:dc:ae:f8:d3:7c:
                    3c:3c:64:6c:64:05:0f:ab:43:af:f6:3d:8f:47:c3:
                    1b:76:98:0f:c2:7b:db:2e:46:54:b6:06:34:de:0e:
                    78:8c:fd:5e:1a:71:81:48:0e:ac:e0:03:6f:4e:8d:
                    5b:ee:1f:68:c4:79:6a:1b:11:91:ae:0a:c5:c1:a4:
                    42:00:f7:51:1a:2d:46:0c:65:b4:56:ec:27:86:b8:
                    a4:79:89:4e:cc:ed:1c:59:c6:c8:37:ee:24:cf:4d:
                    89:44:bb:4e:a7:43:3a:6d:a4:81:b3:09:6c:42:5a:
                    8a:99:f3:89:d1:66:bf:2b:2f:c2:ee:3b:79:d3:51:
                    f9:cc:2a:ff:58:6a:fe:fe:6d:89:97:64:35:13:bd:
                    51:35:b2:d9:e6:16:7c:7d:a0:57:38:45:a0:b8:27:
                    44:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:80:5C:BC:FC:46:B8:2E:54:9E:6D:E2:65:06:10:19:84:09:F2:5A
            X509v3 Authority Key Identifier:
                keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9f:07:0e:08:9f:8b:4e:20:5e:e8:32:f8:ab:03:8a:c4:cf:
         72:2f:32:1d:99:48:61:52:40:68:63:f1:48:37:c4:b1:af:e0:
         1f:0e:29:03:0d:4a:57:71:22:09:1d:dd:a0:86:ea:f1:df:63:
         44:42:82:7b:f2:36:b0:cf:e8:48:3c:e1:28:1e:33:d2:a7:cd:
         86:0e:97:49:78:6c:0c:53:89:5d:a0:7b:6a:93:30:af:0f:78:
         5e:98:85:f6:29:75:ce:07:e5:68:33:54:6d:e9:e0:0f:6b:49:
         1e:2c:60:37:a8:a4:93:99:68:68:6d:0f:a6:34:ce:c2:75:2b:
         1c:51:d3:ac:75:e5:7f:6b:27:46:38:2d:76:19:bc:83:30:dd:
         ab:c9:4c:ec:91:cc:a2:d4:60:b1:70:d9:3a:a8:2f:55:63:21:
         6a:d8:a6:4f:7e:2f:d1:58:bf:82:6e:72:6f:7d:9b:0a:a6:69:
         32:06:76:95:fc:31:ed:c1:f1:ff:a3:58:8d:41:7e:90:f9:00:
         60:f9:3d:d4:1c:53:22:7d:a3:cf:15:40:74:14:a8:06:88:92:
         aa:d0:ef:e9:c6:10:4f:c2:0b:65:10:16:95:2d:91:af:a9:42:
         35:b1:24:70:34:51:8a:95:d1:79:72:14:eb:cd:f5:f8:e2:c8:
         0d:4f:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:24:20 2026 by rpki-client