Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
File:                     Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft (raw, json)
Hash identifier:          MglMxkvaRJQTm1Q/0LpcpE7reAAuxpJPTaeX7ptutGM=
Subject key identifier:   29:81:19:3D:A5:6D:D0:B7:E3:D3:8B:85:41:0F:A7:94:0D:0D:0C:42
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Certificate issuer:       /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial:       019FA9AC65CC702B8B3C3E6C5CD8897D6247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
Manifest number:          19EE
Signing time:             Tue 28 Jul 2026 17:01:15 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:15 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:15 +0000
Files and hashes:         1: BrIm_z1kkv8RckEqhOuO9GLHSNo.asa (hash: D7Q+B8ChIGVwHpq7x6SOCB27HyUsaYE/TBbIK6j7j4Q=)
                          2: Dpgo4cDU1mscMX_CBOiypw89lis.roa (hash: 8mfwVN6lhdlH9CLh9R1lsuHG76iz8iY1mnvSJDuNBqo=)
                          3: T9mevdqWtNZfyBgMq55mLo4_NGY.asa (hash: i1bQotm0KZ02q33gBaWmVlAwdUqJwdGXipOsl27HFpE=)
                          4: Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl (hash: koFje3z6wM11J/oOaIBBuiWXQbc5GQ5VEuBI5ieNx+0=)
                          5: Zd7eWqpO82rj4tMVM1FiOzZTNwI.roa (hash: GTjYTfCCVp1Wx0hphN/N2xZgmhKU/cU0xSNlx/oabus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:65:cc:70:2b:8b:3c:3e:6c:5c:d8:89:7d:62:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
        Validity
            Not Before: Jul 28 17:01:15 2026 GMT
            Not After : Jul 29 17:01:15 2026 GMT
        Subject: CN=2981193da56dd0b7e3d38b85410fa7940d0d0c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:72:39:26:84:14:53:14:55:64:c8:4d:f3:e1:
                    1d:e9:ea:df:4a:eb:8f:68:29:76:0d:8d:ad:90:f7:
                    10:d5:a2:68:0c:33:4a:01:76:98:e3:0b:c3:6c:9f:
                    e2:63:93:6e:d4:18:19:d8:4e:eb:c3:e2:18:65:fa:
                    20:0e:60:d7:17:14:e1:2d:58:2b:72:59:05:d2:4a:
                    73:54:b9:e4:7f:c2:fb:d1:fd:76:4e:f2:97:54:c0:
                    71:26:05:df:1e:2b:63:e8:12:77:0f:d0:3b:30:13:
                    bc:9f:a2:12:84:22:a2:ba:38:67:83:52:3c:16:4f:
                    0d:31:d9:95:f3:52:20:bb:be:b3:34:09:da:b9:9e:
                    a0:75:f1:ce:3a:56:7f:fa:be:54:c8:3b:45:0b:d7:
                    3d:1b:93:a3:6a:55:0e:0a:be:ef:24:bb:67:ad:0e:
                    c9:e8:90:e9:f5:3b:a3:21:b6:b2:d5:f0:e8:3b:00:
                    26:fe:77:48:c6:b0:29:02:4f:23:79:ba:94:cf:70:
                    6c:e3:b6:80:0b:ac:99:45:2b:c4:42:a8:0f:1f:09:
                    03:7a:b7:f2:ef:c0:28:bf:3d:f7:31:a3:66:fb:2f:
                    78:02:68:68:37:2c:79:7f:69:7d:06:6e:be:b1:5d:
                    86:99:19:ad:85:ca:e1:7e:96:78:e6:96:ca:46:b3:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:81:19:3D:A5:6D:D0:B7:E3:D3:8B:85:41:0F:A7:94:0D:0D:0C:42
            X509v3 Authority Key Identifier:
                keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:83:21:4c:94:38:61:60:bf:f2:fd:81:8a:8f:45:43:f6:f1:
         20:bc:4f:54:dc:78:bb:8a:0f:79:cc:96:4c:0c:cc:7c:77:b5:
         c1:af:2a:e9:85:bc:04:68:14:30:36:fa:c6:39:15:b5:ab:ce:
         b6:c6:a9:cf:27:c8:e1:49:80:18:a8:02:21:fb:fd:2d:2e:c9:
         9c:27:20:5e:64:52:9e:4e:b6:3e:72:73:31:c7:77:d6:ed:0b:
         63:2a:dd:24:65:a1:ac:60:70:a4:f4:79:a8:b1:a3:cf:26:29:
         f9:21:64:a0:c1:ca:1a:d6:a3:5d:1c:6c:13:81:69:51:3c:8c:
         0f:2d:83:06:f5:dc:7c:5c:c0:7c:94:ec:57:8a:fb:9c:c5:e4:
         0c:f8:0b:4b:ec:71:42:60:0a:c3:25:21:68:22:0c:e8:e9:4b:
         a9:a9:50:d3:e1:1d:f6:ad:e3:ae:96:3b:1a:3b:ff:76:45:79:
         7f:5e:be:8e:2f:07:6d:41:db:3b:91:1b:6c:93:14:87:47:4c:
         ac:aa:23:47:dd:11:c5:bf:76:b0:cd:e2:42:fd:a5:41:aa:dd:
         64:09:17:79:f8:b5:ec:99:2e:59:2a:1e:99:69:f9:a9:39:a8:
         c7:cd:37:2a:15:30:c4:df:66:73:11:3f:b9:b8:27:f6:40:0a:
         0f:3f:92:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:29:30 2026 by rpki-client