Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File:                     w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier:          0/yUtqjybK60zIACegU6kVRVKUwCJfbQM1bCgMpDdgU=
Subject key identifier:   D0:DB:E7:9B:5A:0C:BB:E9:53:FC:CF:B4:A5:E9:1B:AE:99:4D:6B:5A
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer:       /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial:       019FAC07B8820876AD2C1A585907B8E3592A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number:          1667
Signing time:             Wed 29 Jul 2026 04:00:14 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:14 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:14 +0000
Files and hashes:         1: aNkPm_ezm0ctJK7MUUoxpovWRR4.roa (hash: 0s/77SfpzH3RIt4lNEcqz/Xnu6SS7M01lJXkiMcJwCI=)
                          2: adEMxHyupcifqh018PDSo4aZYRU.roa (hash: 2ejGSNPMnDgazqPRclsg72M/nQyRhAE01Ub1Oiox0Y0=)
                          3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: JX/+mZjhAkbwmM1qORo5c+9PT9/5er/+YHwXk041Stc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:b8:82:08:76:ad:2c:1a:58:59:07:b8:e3:59:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
        Validity
            Not Before: Jul 29 04:00:14 2026 GMT
            Not After : Jul 30 04:00:14 2026 GMT
        Subject: CN=d0dbe79b5a0cbbe953fccfb4a5e91bae994d6b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:65:7f:36:ec:24:af:c9:75:5c:73:9a:82:
                    15:4e:a1:f0:42:e1:46:dc:bf:1e:13:ac:8c:20:11:
                    ce:e2:da:52:e4:09:fb:8d:e5:2e:fc:e1:da:ab:14:
                    c8:9e:7a:78:56:b5:46:50:c8:a7:e2:c3:be:da:63:
                    39:85:6f:8e:58:da:ec:9e:ac:ed:cd:e7:a1:c7:08:
                    72:e8:31:67:62:57:b3:71:a5:d6:b7:00:64:68:da:
                    d9:eb:30:c8:a3:0f:09:0e:2e:40:bb:09:e7:75:b7:
                    4b:17:ad:29:ec:ad:e7:a5:bb:6d:d2:de:5a:4c:04:
                    26:7f:ca:e8:ae:65:76:90:f8:6f:d7:5c:b0:5f:13:
                    4e:0c:d4:9a:33:f4:bd:9f:e7:1d:bd:b8:4f:9c:a6:
                    e3:a6:0e:b0:a1:1f:39:74:a6:85:e6:c7:bf:54:ac:
                    73:58:ac:0e:9c:0f:62:87:9e:3c:b0:58:03:94:1e:
                    7c:6f:66:1c:73:12:49:68:06:38:21:ca:8f:14:7d:
                    76:42:85:ad:9b:85:54:a2:a1:92:e8:8e:97:85:07:
                    e3:54:b2:f6:b0:f3:0d:09:a6:61:88:aa:83:4a:c4:
                    d4:84:9f:61:3a:ee:05:23:4d:03:33:6e:78:e3:9c:
                    d3:77:fd:bf:b7:3e:04:fd:27:1f:64:e4:ae:42:a0:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DB:E7:9B:5A:0C:BB:E9:53:FC:CF:B4:A5:E9:1B:AE:99:4D:6B:5A
            X509v3 Authority Key Identifier:
                keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:57:4f:c0:8b:3e:96:55:42:fc:aa:c2:c0:5a:2e:9e:02:62:
         4f:1d:c5:4a:e9:ce:ec:0f:4c:e6:f9:39:2f:87:10:94:f2:94:
         46:34:c8:89:86:13:4f:67:be:46:9d:8b:7b:3b:73:5d:69:5d:
         47:02:36:a0:ef:0e:b5:c6:4e:b5:db:04:ff:6c:e2:8f:45:0a:
         59:6b:b3:e3:ca:7c:1c:04:c1:25:e6:20:b4:59:c9:0f:84:28:
         ac:82:60:cc:c0:bb:b0:ae:53:3d:23:53:d4:60:05:4d:29:5e:
         c7:e3:33:61:66:55:5c:f8:4d:97:a4:cd:17:f0:ce:b1:ab:cc:
         2f:da:72:1b:93:0f:0a:e5:23:65:71:16:42:c7:81:ca:78:d3:
         f8:17:99:60:6d:90:49:e6:9c:9d:e5:62:b1:4d:e3:ec:06:49:
         36:86:46:4f:7f:a2:3c:fc:80:7e:99:4b:34:9c:0b:39:c4:7e:
         13:1b:81:d8:75:fa:f7:18:0b:e4:2c:56:27:14:24:24:00:21:
         a5:00:c4:bc:b3:48:d2:6b:12:40:53:7e:b0:a2:fe:01:5c:bc:
         69:7e:15:68:44:82:5c:1f:45:0e:9a:41:f5:fb:d8:45:56:bd:
         e4:d8:25:38:dc:80:cf:c0:cc:71:df:e2:48:20:44:67:b0:a4:
         cd:16:96:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sB7iCCHatLBpYWQe441kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNDA5MDlhZWMzMjBhOGMyZWUxY2FiY2UxMzAyY2JiN2Q0
ZTA0ODYwHhcNMjYwNzI5MDQwMDE0WhcNMjYwNzMwMDQwMDE0WjAzMTEwLwYDVQQD
EyhkMGRiZTc5YjVhMGNiYmU5NTNmY2NmYjRhNWU5MWJhZTk5NGQ2YjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC5lfzbsJK/JdVxzmoIVTqHwQuFG
3L8eE6yMIBHO4tpS5An7jeUu/OHaqxTInnp4VrVGUMin4sO+2mM5hW+OWNrsnqzt
zeehxwhy6DFnYlezcaXWtwBkaNrZ6zDIow8JDi5AuwnndbdLF60p7K3npbtt0t5a
TAQmf8rormV2kPhv11ywXxNODNSaM/S9n+cdvbhPnKbjpg6woR85dKaF5se/VKxz
WKwOnA9ih548sFgDlB58b2YccxJJaAY4IcqPFH12QoWtm4VUoqGS6I6XhQfjVLL2
sPMNCaZhiKqDSsTUhJ9hOu4FI00DM25445zTd/2/tz4E/ScfZOSuQqAgIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDb55taDLvpU/zPtKXpG66ZTWtaMB8GA1UdIwQY
MBaAFMNAkJrsMgqMLuHKvOEwLLt9TgSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MGIyMDUtOGYyMS00NmY1LWEzZjYt
YmNhMGE4ZjJmNzhjLzEvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MGIyMDUtOGYyMS00NmY1LWEzZjYtYmNhMGE4ZjJmNzhj
LzEvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0FdPwIs+
llVC/KrCwFoungJiTx3FSunO7A9M5vk5L4cQlPKURjTIiYYTT2e+Rp2LeztzXWld
RwI2oO8OtcZOtdsE/2zij0UKWWuz48p8HATBJeYgtFnJD4QorIJgzMC7sK5TPSNT
1GAFTSlex+MzYWZVXPhNl6TNF/DOsavML9pyG5MPCuUjZXEWQseBynjT+BeZYG2Q
SeacneVisU3j7AZJNoZGT3+iPPyAfplLNJwLOcR+ExuB2HX69xgL5CxWJxQkJAAh
pQDEvLNI0msSQFN+sKL+AVy8aX4VaESCXB9FDppB9fvYRVa95NglONyAz8DMcd/i
SCBEZ7CkzRaWpg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:49:24 2026 by rpki-client