Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
File:                     FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json)
Hash identifier:          mmtIAPnS+ohIarB1WNALIVdrmEOZFJdNlZp+blEEriY=
Subject key identifier:   8B:6D:08:FE:65:5C:DF:58:DA:22:45:04:D9:E2:29:99:F9:71:17:A3
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       019FA9E308CD0AB13BADCFF298C070C94874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 18:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:56 +0000
Files and hashes:         1: B8AGidGKLoQLti3y3WxY0M6Ums8.roa (hash: GW4/8IG15yoULapMWSUA1tjQmytW8th3DPjNUReuGJY=)
                          2: Dnmq_-IXcuuCYcO66EjRn9inPJA.roa (hash: JBkzUBE+QTQ6AfEZVnlaYzg8oi2JCs+6/Xvoz9ACRuE=)
                          3: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: Hit0tOHxo3xcHdj930LQHZS/sw0mUYQIML88n6K0n1s=)
                          4: Y1Sj94JEWNEu02oE1R3YlRFCB-s.roa (hash: usulbFFGi1WaHBoDqV6MzsH9CvtQ7PX9NAUWfnNmmj4=)
                          5: uR5nbvWvEqFKcr15HMG7q7wElj4.roa (hash: IzuEMc/xhLnvFIqk3mMDeFSvUitKaMgCVjRpshfp5kU=)
                          6: yGnG3HP3nemnG7Yzwu4wtoayiDo.roa (hash: lWgaSw9AoddwDlUpkfGonh4HcHHKtgX9pZvTG5NcRBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e3:08:cd:0a:b1:3b:ad:cf:f2:98:c0:70:c9:48:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: Jul 28 18:00:56 2026 GMT
            Not After : Jul 29 18:00:56 2026 GMT
        Subject: CN=8b6d08fe655cdf58da224504d9e22999f97117a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:2d:86:93:8f:7e:72:2c:37:fd:8d:a9:d4:
                    2b:d3:15:72:6e:19:87:12:de:76:c8:14:4c:76:3f:
                    5f:3c:41:d3:78:df:a0:80:d9:b7:06:bf:0b:00:c5:
                    8b:86:df:30:b5:c0:b4:f2:77:92:66:da:d5:fb:22:
                    00:6a:65:01:38:a7:59:9d:78:a3:99:5a:5f:61:14:
                    0c:4b:8a:89:06:94:81:39:7f:19:92:db:73:4c:9c:
                    1a:a0:ac:8f:81:1a:e4:c5:78:ee:98:45:e5:ac:0f:
                    68:e4:8a:8a:ad:62:5a:56:42:44:98:22:c1:f8:79:
                    e1:c3:03:3d:f0:cb:32:7c:a0:2b:77:59:94:45:a9:
                    47:64:48:cd:a7:38:16:6f:49:38:76:37:86:1b:ed:
                    9d:ce:05:f6:99:f2:31:90:83:ed:b9:71:4a:ab:f2:
                    c5:f7:fe:f8:b6:82:4a:3a:b8:14:cd:fd:06:87:2b:
                    1d:20:c0:a6:a0:e1:76:5a:ea:6a:00:51:cd:3f:fc:
                    53:85:53:34:22:7e:ae:b2:05:19:4d:55:75:98:be:
                    cc:ad:2f:03:65:b3:c1:5f:c6:06:9f:b3:a5:7b:50:
                    4f:2f:24:28:83:fd:d5:7c:49:97:59:ab:56:4d:98:
                    f6:ea:fe:6f:d5:67:fe:8b:3f:31:58:ef:1f:6e:d7:
                    fe:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6D:08:FE:65:5C:DF:58:DA:22:45:04:D9:E2:29:99:F9:71:17:A3
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ee:cb:29:5f:8b:47:91:6f:19:40:31:37:37:a8:30:70:d0:
         c5:c6:4f:71:c2:10:e0:bf:aa:b4:bf:51:7d:41:38:25:6b:31:
         72:78:db:ea:33:38:e2:1f:28:61:72:69:08:4d:17:f4:a8:86:
         28:11:cc:7c:58:53:fb:c8:04:23:80:14:7d:4c:31:62:ba:71:
         8c:30:b3:5a:15:f0:c0:50:28:ba:e7:2e:2b:cf:61:87:32:6d:
         40:a7:d1:7c:b4:05:da:97:ff:c3:45:bb:1b:8f:6e:d6:15:a6:
         e8:a2:c5:f2:20:4c:58:fb:c3:a2:77:59:22:f8:3a:cb:7d:c3:
         a7:35:92:fe:00:41:51:53:01:9d:c1:6f:3f:7d:e1:c7:a1:7e:
         23:8e:e8:a7:50:f0:91:18:5f:14:eb:17:98:55:59:f2:c6:a0:
         96:37:84:73:cb:a9:28:7e:17:b4:7e:6a:9a:e1:1f:7f:96:9f:
         3e:00:7f:9f:ef:1d:a1:5a:da:d1:ab:2e:aa:e8:8f:27:cc:d2:
         ca:7d:a6:a5:a3:30:03:1b:e8:10:eb:f7:1b:dd:fa:ad:25:65:
         e5:19:86:90:bb:44:b0:ff:ab:07:b0:8b:e6:59:eb:ed:bc:cb:
         93:58:76:3f:b3:86:14:0b:ed:cc:10:e4:00:c4:88:4c:27:7a:
         48:e9:f4:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4wjNCrE7rc/ymMBwyUh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Mjc1NzNjNjg5MjlhYjJhNDU5MGU5MmE1MWFiYzQwZWE5
ZTU4MTcwHhcNMjYwNzI4MTgwMDU2WhcNMjYwNzI5MTgwMDU2WjAzMTEwLwYDVQQD
Eyg4YjZkMDhmZTY1NWNkZjU4ZGEyMjQ1MDRkOWUyMjk5OWY5NzExN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVcthpOPfnIsN/2NqdQr0xVybhmH
Et52yBRMdj9fPEHTeN+ggNm3Br8LAMWLht8wtcC08neSZtrV+yIAamUBOKdZnXij
mVpfYRQMS4qJBpSBOX8ZkttzTJwaoKyPgRrkxXjumEXlrA9o5IqKrWJaVkJEmCLB
+HnhwwM98MsyfKArd1mURalHZEjNpzgWb0k4djeGG+2dzgX2mfIxkIPtuXFKq/LF
9/74toJKOrgUzf0GhysdIMCmoOF2WupqAFHNP/xThVM0In6usgUZTVV1mL7MrS8D
ZbPBX8YGn7Ole1BPLyQog/3VfEmXWatWTZj26v5v1Wf+iz8xWO8fbtf+pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIttCP5lXN9Y2iJFBNniKZn5cRejMB8GA1UdIwQY
MBaAFBYnVzxokpqypFkOkqUavEDqnlgXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2Ut
ZTZmOWRiNzQxMzlkLzEvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2UtZTZmOWRiNzQxMzlk
LzEvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+7LKV+L
R5FvGUAxNzeoMHDQxcZPccIQ4L+qtL9RfUE4JWsxcnjb6jM44h8oYXJpCE0X9KiG
KBHMfFhT+8gEI4AUfUwxYrpxjDCzWhXwwFAouucuK89hhzJtQKfRfLQF2pf/w0W7
G49u1hWm6KLF8iBMWPvDondZIvg6y33DpzWS/gBBUVMBncFvP33hx6F+I47op1Dw
kRhfFOsXmFVZ8sagljeEc8upKH4XtH5qmuEff5afPgB/n+8doVra0asuquiPJ8zS
yn2mpaMwAxvoEOv3G936rSVl5RmGkLtEsP+rB7CL5lnr7bzLk1h2P7OGFAvtzBDk
AMSITCd6SOn0Iw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:46:44 2026 by rpki-client