Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File:                     E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier:          MpN4/JBVHFwZ+nhfDPWSItfM5OXkxIPy9FQqQJHBoJg=
Subject key identifier:   22:B3:ED:35:7B:8C:00:1C:3E:5A:61:F7:6D:44:90:33:B5:D0:4B:11
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer:       /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial:       019FAAF573E46D28D8F5FC88040D083AF253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number:          1554
Signing time:             Tue 28 Jul 2026 23:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:40 +0000
Files and hashes:         1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: J+UbsAk1qXzVwPuFSVeIlq2Tz4YGrWQ2C6zSHyquQhY=)
                          2: c8_lqB8zuXEzmspKXzyipWp0Oa0.roa (hash: 2ZR0m4jkOWS1KPdLD0KrcVGTacYGG1RI331SCTXCoGQ=)
                          3: if86lxu5nlPzs7hkWMJDZ9tMh_c.roa (hash: ORNVkMFl7t2RmENsppqBUHYflyrOzGV65xG9bRC2Ckw=)
                          4: pbc4SdtODYEUzlwKQZU-lgRu770.roa (hash: Aa4AR2Tswo+VpEELO6t1/gEy+JGa3NESKeediOsubQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:73:e4:6d:28:d8:f5:fc:88:04:0d:08:3a:f2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
        Validity
            Not Before: Jul 28 23:00:40 2026 GMT
            Not After : Jul 29 23:00:40 2026 GMT
        Subject: CN=22b3ed357b8c001c3e5a61f76d449033b5d04b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:83:71:0b:96:0b:26:57:27:08:8a:37:72:0a:
                    ca:d7:75:72:89:6c:45:29:88:29:3a:2e:95:67:75:
                    91:ad:b8:c8:28:3c:65:a4:0d:1f:83:e7:df:0d:3b:
                    5f:d2:1f:26:18:7a:26:97:de:6c:c8:c1:3e:52:13:
                    b4:3a:a3:59:ba:8a:bb:06:4a:88:b8:a5:6b:da:87:
                    af:d3:b1:46:3e:84:56:e5:8f:61:df:57:2d:f7:25:
                    8f:45:4f:c9:72:c5:db:7a:7a:51:e5:c5:38:9a:81:
                    15:1a:9e:b6:65:4c:d5:1d:3e:7d:eb:0f:9b:7e:4e:
                    e1:30:75:9b:ba:a2:c7:1b:d1:d8:c3:26:f8:01:71:
                    0a:df:55:c1:32:16:9d:a7:5d:7f:fe:87:8f:05:cb:
                    db:57:16:5d:59:ac:fd:3f:e6:02:ef:08:ea:67:45:
                    9f:e8:59:31:97:e3:77:19:81:92:1d:22:7e:fa:b9:
                    3d:c6:c8:b6:1c:2d:5d:4b:be:68:3b:f9:79:83:8d:
                    9a:6b:d7:ba:eb:af:6a:38:f4:e0:a5:35:1f:07:5d:
                    36:c2:1c:55:bb:91:bf:26:c5:a7:47:d3:5b:ff:00:
                    31:ea:e9:25:59:96:31:ab:d4:30:5f:f8:2c:d1:0d:
                    28:48:23:3f:1f:6c:2f:cb:d2:ae:f0:5d:1c:9c:d8:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B3:ED:35:7B:8C:00:1C:3E:5A:61:F7:6D:44:90:33:B5:D0:4B:11
            X509v3 Authority Key Identifier:
                keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:c5:44:de:80:c2:99:bd:65:e9:c6:95:dd:3b:07:f0:8d:4d:
         f3:2a:87:cc:17:d3:7a:da:52:8e:bc:5f:30:d2:0c:5a:d8:a1:
         f2:47:84:c6:d3:47:10:35:94:f7:5b:c5:af:e7:be:51:85:ff:
         b0:62:68:5c:52:8d:80:e6:10:e0:14:17:4c:7c:de:e5:5e:79:
         5d:eb:15:1d:32:50:90:8e:f0:90:ea:da:d5:52:87:f6:96:95:
         c7:07:fd:57:84:10:24:82:fa:ca:f9:be:4a:08:f0:23:d5:a0:
         2b:99:5d:6b:9a:8b:1d:3e:64:fb:cf:39:a2:87:f3:88:bb:58:
         c4:03:67:f5:65:2e:3b:55:39:92:16:df:fa:e8:aa:5c:c0:93:
         1d:a2:ec:34:c1:b4:96:c1:f7:2e:fb:0f:09:b0:64:5d:ab:b8:
         39:0e:a6:11:b6:70:e0:4a:f8:ff:d0:9c:11:40:0c:00:16:8c:
         a1:fa:9f:8f:36:e0:3c:73:7a:dd:f5:d9:2e:93:e8:e7:32:16:
         6f:84:52:37:83:e8:66:fb:8b:fc:b3:73:a8:57:9f:f6:04:ef:
         c4:40:ad:12:6e:7d:52:32:de:78:b1:11:2e:e1:60:8f:5b:68:
         eb:61:96:c3:a9:a5:2c:85:e0:a0:35:d7:44:0f:3d:f7:29:3f:
         43:4c:ce:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9XPkbSjY9fyIBA0IOvJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjRmNmI5MDE2N2I3MWJkNjYzZmEwMzkxZTAzOGEwMTU1
YmI5MzkwHhcNMjYwNzI4MjMwMDQwWhcNMjYwNzI5MjMwMDQwWjAzMTEwLwYDVQQD
EygyMmIzZWQzNTdiOGMwMDFjM2U1YTYxZjc2ZDQ0OTAzM2I1ZDA0YjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oNxC5YLJlcnCIo3cgrK13VyiWxF
KYgpOi6VZ3WRrbjIKDxlpA0fg+ffDTtf0h8mGHoml95syME+UhO0OqNZuoq7BkqI
uKVr2oev07FGPoRW5Y9h31ct9yWPRU/JcsXbenpR5cU4moEVGp62ZUzVHT596w+b
fk7hMHWbuqLHG9HYwyb4AXEK31XBMhadp11//oePBcvbVxZdWaz9P+YC7wjqZ0Wf
6Fkxl+N3GYGSHSJ++rk9xsi2HC1dS75oO/l5g42aa9e6669qOPTgpTUfB102whxV
u5G/JsWnR9Nb/wAx6uklWZYxq9QwX/gs0Q0oSCM/H2wvy9Ku8F0cnNgPNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKz7TV7jAAcPlph921EkDO10EsRMB8GA1UdIwQY
MBaAFBO09rkBZ7cb1mP6A5HgOKAVW7k5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODkt
Y2IzZmE0MDdlMGY0LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODktY2IzZmE0MDdlMGY0
LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8VE3oDC
mb1l6caV3TsH8I1N8yqHzBfTetpSjrxfMNIMWtih8keExtNHEDWU91vFr+e+UYX/
sGJoXFKNgOYQ4BQXTHze5V55XesVHTJQkI7wkOra1VKH9paVxwf9V4QQJIL6yvm+
SgjwI9WgK5lda5qLHT5k+885oofziLtYxANn9WUuO1U5khbf+uiqXMCTHaLsNMG0
lsH3LvsPCbBkXau4OQ6mEbZw4Er4/9CcEUAMABaMofqfjzbgPHN63fXZLpPo5zIW
b4RSN4PoZvuL/LNzqFef9gTvxECtEm59UjLeeLERLuFgj1to62GWw6mlLIXgoDXX
RA899yk/Q0zOzw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:58:19 2026 by rpki-client