Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
File:                     4wzJQptjOC6bFxTSGzyW0uXr4lc.mft (raw, json)
Hash identifier:          OJteK8Pc/Q/itmCIbwBTUGtS0onUtaxiT43TYXDESw4=
Subject key identifier:   BC:67:5D:0C:D3:B6:89:5D:59:96:E8:72:5F:85:8C:D2:F0:DA:80:8F
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Certificate issuer:       /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial:       019FA93DEF128BCBFBCD899C52663C6D99D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
Manifest number:          19E5
Signing time:             Tue 28 Jul 2026 15:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:36 +0000
Files and hashes:         1: 1hUS0dgYuOKagKuRYnGRSU6mdO4.roa (hash: wgVw1wbgU61hnugYMEVTiyojcBCYeUAd4AGAHpCyW28=)
                          2: 2hajvV8gK-m59BYU1-dZQrvoGOU.roa (hash: akWetgY85iiMSrn15VPNa6Tn/6+J6UK1hNE5J48ERz8=)
                          3: 4wzJQptjOC6bFxTSGzyW0uXr4lc.crl (hash: bFdY+D5C3INRl9tHGGzpF1DbCQTQ/enr2TMOYIi1CzQ=)
                          4: 5hx2PgGlsoHU52DnoY5z8nDA6Uc.roa (hash: V6FRtdQair4Jd18FQhevQfbc1XrlHcZDfofcJOEH238=)
                          5: 5jRHAAz_hj8a7OP44v7mWLCpLIg.roa (hash: M9wN8baVpSc5b65dc6iAke2qV/7ywF4aCA4G87mYdOU=)
                          6: 7mNPzDQUy4TWk6yVcvwp5gn92PY.roa (hash: wX/s845m+j+aefEHx+Ug2JNMpDWqfvvDBGuvcQGJjF8=)
                          7: AdZzJXVjU4uhQNVuxwK1-7uDINw.roa (hash: WH7H7jpla88i3rn0oGPohqLaC7h+h5aP6N2rE4fb5+k=)
                          8: AkvQldLQY58hrMuy5JJUpN5DWNI.roa (hash: afG9+wD4QhYrt7Kw2LgpaOdHZKEw2Hl0r195C8kvfAc=)
                          9: BJazlwxqEmJsYMjVhmIaDtQC8e8.roa (hash: 2ZK9c4vofcWeUv3b/fecvK2nc6pClocYLtMjG/t3Axs=)
                          10: GwlPBnPafwNESxPOmYchrobp9kc.roa (hash: 2bg5Zps/9Nl20iDTOVJMixlxSv+z0s4P6wxJpe1+ojE=)
                          11: MENCP9vV-DN8rTiaMKzCj_ZJHTQ.roa (hash: rbtpAaAkeOS9IFdDYYmlnqwTq2cxGgERFnXxmCVRJEA=)
                          12: PlrUxGnUEiHdEwXChXkr73zDzkg.roa (hash: EMehwEJ8sMbKPMfB13BN85G2PxwvK02T0PjHEVbc+3c=)
                          13: RUpO7YzO4Q4u7emkeEttJ-upFss.roa (hash: 4gXmhPhFM6wlFrTW4TyF6zeN7qnZYJUp2trDabq3weE=)
                          14: TBBV9kVE8yxlnA5LtUYB4k1H7Ck.roa (hash: hSK+h3pQm5k7j10oe3W2NOK+/IyzkDBNICSGH9KMJ6s=)
                          15: UqWiGwSKWqyJRdGttOAL9pdFqF0.roa (hash: EcAPWWCFosb1c66v05znaxCwziIYlAJXvCZC4C9hAJM=)
                          16: WBrHOxJFEJMOD-RQR2LqsWU2gfU.roa (hash: 82EurPdNuP1c5NP1AAN5UKQ8eqhgLDwwseGx0U4immw=)
                          17: YE43DFlSdGIi5Y5V0q6Dcu3R1jo.roa (hash: 7y13WjFIQev9f7bZV98y9KEB0ps1yt+8qhRlRU3ZvPA=)
                          18: _pmSmEyGoFs3fpqzGtBjfXV-fa8.roa (hash: fW2hww6BoaOymLlW23CIMa7uBnEa/2LTaq/FpjqoNLI=)
                          19: eEcQktLlsEWr1Q1sZ7Bgl-t_xfg.roa (hash: 3Az08ESnXLCW18L3NJVhsweQ1FstJelwkdv9JOzRZ3Y=)
                          20: m7iwatMXsXjWk65KbnwzYMYe9Jc.roa (hash: Pztt+Fk8+0WLZVKTeBTXG8cVsCcLHqrpi4CgocNceUI=)
                          21: vjlNS9sVhIyqiR3gMRLX2vUoWIA.roa (hash: wh/14x7K5xZ+wn7kq4tAZCLLRZIq3uwLoPywgg8maMw=)
                          22: vmQB5rb8U8ZSKWEOjbzFrnBc8MQ.roa (hash: I6XTBHfwaQQIOTboVRUtz1BJpRM00zCr9ZjaQJkslfg=)
                          23: wcKXCZWW_WrMj-H0vskgHgbK58g.roa (hash: TD379ppG8Ut76tU11pZP2K3s8S4pqHUKncAJlr7fy8Q=)
                          24: yAUJNYcU_3Fdm2A-g9BDYhobeMY.roa (hash: MAEY7tBraubtKoodWTH2DPA+SuxElYKFE3cdaGB9ZX4=)
                          25: zvVYEhGaUBI92FKcl0-d5m_pOTw.roa (hash: P4ADjECiLkZPgfWh/PQnaPWZWlCx25ucl7Lz3XB5G/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:ef:12:8b:cb:fb:cd:89:9c:52:66:3c:6d:99:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
        Validity
            Not Before: Jul 28 15:00:36 2026 GMT
            Not After : Jul 29 15:00:36 2026 GMT
        Subject: CN=bc675d0cd3b6895d5996e8725f858cd2f0da808f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e0:3d:6f:18:e6:2f:dc:a2:92:bc:52:b0:35:
                    87:70:8f:1c:69:9a:8a:93:82:77:5f:c1:6c:07:11:
                    f0:8e:c8:ef:e4:e8:ab:7c:4d:3e:53:27:f2:7f:27:
                    d9:51:4f:8a:1a:cf:e5:f7:10:b8:75:e2:ac:d2:eb:
                    26:bc:48:7d:5f:a6:c9:95:88:1a:2f:53:75:9b:97:
                    55:98:e0:34:56:32:10:ea:41:6a:20:42:68:d1:bb:
                    22:d6:5a:43:fa:2f:cb:57:e7:9b:4e:bc:67:af:53:
                    fb:a2:a7:02:96:89:e0:ca:a3:f3:e7:bf:15:4c:ff:
                    d4:8b:26:6a:b8:fd:67:42:9d:48:ab:08:da:78:cf:
                    9e:df:ba:bc:f2:b1:d1:07:d6:c1:2e:e5:c4:06:d0:
                    0d:85:57:5b:95:60:f9:26:03:19:18:b5:29:59:d4:
                    d1:10:4a:22:a5:ce:f5:e2:64:0c:44:33:40:5d:2d:
                    e6:77:2c:a3:bc:e1:37:82:96:47:22:22:d2:25:fa:
                    b8:d7:5c:7a:0c:8b:3b:f7:cb:f0:0e:82:e4:a9:c4:
                    14:00:e8:a5:fe:0e:a1:fe:66:1c:45:54:c8:30:8a:
                    e4:f6:f0:11:6e:ce:36:c5:84:33:1d:97:71:81:fd:
                    8c:69:aa:32:9f:9c:18:50:e7:62:57:20:ea:e6:06:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:67:5D:0C:D3:B6:89:5D:59:96:E8:72:5F:85:8C:D2:F0:DA:80:8F
            X509v3 Authority Key Identifier:
                keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:59:d4:17:70:53:10:49:1b:a2:d9:57:99:89:de:5b:04:77:
         34:f4:3d:66:67:28:43:68:58:b6:f6:25:7a:ad:3a:f8:06:4a:
         05:63:d8:f9:58:1e:5f:87:a0:4a:86:b3:08:2f:70:85:7f:73:
         87:f3:c4:63:35:8c:58:8f:3c:2e:95:f2:8b:cc:87:7f:4d:3d:
         ec:34:e5:ae:17:54:b3:ce:9f:5c:7c:f4:36:e1:89:aa:ee:31:
         17:51:96:6a:22:3e:df:40:6a:c1:dd:d5:d1:f3:b9:d4:e6:1a:
         38:eb:6b:4b:97:3b:2a:b2:70:36:99:38:f9:87:05:c6:89:09:
         41:cd:e5:72:3c:97:ca:b8:97:f7:d3:dd:04:87:5e:9d:ac:af:
         0b:87:7d:99:86:06:f2:9c:58:90:6b:1d:97:df:9d:64:f4:b6:
         5a:24:e0:73:3c:8e:44:e1:b4:1a:a1:7a:1e:e4:d1:10:b9:35:
         3e:c4:42:93:2a:9d:91:8c:2d:8b:cc:70:5e:08:02:28:43:4e:
         44:c5:69:39:64:4e:c3:b2:49:9e:2e:c4:61:36:e9:58:79:41:
         a7:58:5c:f1:7b:1a:55:b7:45:f3:93:8d:df:e6:2f:6c:93:34:
         6d:66:f2:e5:f9:9f:6f:8e:86:f3:69:3a:c3:1b:58:39:33:33:
         68:7b:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:22 2026 by rpki-client