Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
File:                     2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json)
Hash identifier:          x2yBHk/iHGaF1wEnaZ9i+G6wpHBzusw/G+7K8zWdHYI=
Subject key identifier:   3D:5E:A3:D9:AB:BF:3C:F3:84:DC:EF:8C:9A:23:79:D5:A1:84:E8:ED
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Certificate issuer:       /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial:       019FA93D9FE85B9D0530B2EE9B4E6AF4D4C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
Manifest number:          19E4
Signing time:             Tue 28 Jul 2026 15:00:15 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:15 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:15 +0000
Files and hashes:         1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=)
                          2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: 5xmAA8r4W02OvYAt37RD4Z0KuRsVxFw5BDdPtCmbYd4=)
                          3: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=)
                          4: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=)
                          5: N3iKduG1KyGp7acBh2WOJ0MD0zU.roa (hash: jQXzbIYq6Zxo8qPqawC1/jXuZoeWXKzx3rtmVr5KlSs=)
                          6: ZiRnzXkcSpJurhu_MyLUWMF4fjw.roa (hash: wqIirvJk9KhRbYG9hrmkySthdI26YxcHRINCM7935BQ=)
                          7: dh_dM1Q__KObsaKsgasBYaz1gyo.roa (hash: GY7xesyfU+gqGkJYAJ4MHZlVcXESZ6jYpENdGF3wOCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:9f:e8:5b:9d:05:30:b2:ee:9b:4e:6a:f4:d4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
        Validity
            Not Before: Jul 28 15:00:15 2026 GMT
            Not After : Jul 29 15:00:15 2026 GMT
        Subject: CN=3d5ea3d9abbf3cf384dcef8c9a2379d5a184e8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:40:18:8f:8f:5f:19:a3:a5:56:9a:b1:5c:
                    8c:a1:37:92:27:7a:db:69:c5:86:59:18:d8:df:cd:
                    3c:05:c5:77:5c:38:99:b2:4a:c5:6d:f0:1b:26:4f:
                    d5:37:60:af:a0:ad:a4:90:a6:c2:1e:d6:74:a8:83:
                    cf:f5:81:83:da:24:f1:55:7a:fc:84:3c:ba:e6:97:
                    d4:2d:82:83:05:67:97:db:66:9c:73:75:3b:08:6f:
                    4d:1a:e4:0d:a2:27:f1:b8:15:11:52:43:74:cc:31:
                    ba:11:30:1d:38:af:fd:f8:ec:19:8d:6b:7c:15:cf:
                    36:78:f9:d7:11:92:59:31:fd:08:d1:ca:70:46:6c:
                    5b:e5:36:d3:18:0b:5f:76:f8:b8:c9:07:51:09:eb:
                    30:53:e9:6c:84:85:bf:c6:5c:c9:fe:5e:c7:6a:5d:
                    a5:03:ab:ac:eb:56:0e:13:31:98:c8:65:59:76:24:
                    02:d7:b4:f9:92:e0:91:40:3b:84:37:a6:7e:32:39:
                    15:c5:06:5d:7f:bc:0b:3f:c9:21:45:ec:25:b0:6b:
                    0e:3c:38:fb:bd:bf:24:fb:6f:86:f3:71:5b:e0:36:
                    13:dd:62:61:f6:84:be:af:8a:8b:f5:c5:48:65:44:
                    db:86:22:13:4c:b6:d8:35:0d:c2:3c:0b:95:d5:36:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5E:A3:D9:AB:BF:3C:F3:84:DC:EF:8C:9A:23:79:D5:A1:84:E8:ED
            X509v3 Authority Key Identifier:
                keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f8:83:9e:93:74:c4:bc:a1:77:c7:31:a2:1d:a3:97:be:0d:
         1b:81:01:e3:51:bf:a1:33:13:66:0c:91:2e:45:17:f2:bc:a2:
         9b:b5:4d:a8:56:d4:6a:0b:50:1b:91:76:52:26:7c:fa:23:a7:
         71:6b:d7:3f:87:64:8d:f7:a6:9b:55:76:21:12:47:6a:5a:93:
         80:ff:94:d9:ed:26:e8:77:c0:f7:e4:34:0e:cf:b2:31:b1:b6:
         d4:a2:d1:ed:46:ec:f4:8a:8d:f9:f8:c5:f5:c9:ff:7f:48:42:
         e6:c5:11:ca:1b:ae:70:5c:99:6b:32:9a:c5:a2:63:2f:e8:2c:
         01:74:81:30:34:f1:ca:96:6f:5c:1f:ae:91:a5:d8:90:53:54:
         65:37:85:09:f9:98:2a:ca:c2:a2:2e:2d:61:2b:df:4c:17:42:
         5f:41:2c:7b:d7:69:1b:4b:62:8f:b2:e3:c1:5e:ff:ae:ca:50:
         38:d7:a9:93:9d:ac:a8:18:30:ab:97:b0:72:5d:b8:6a:20:8c:
         61:a5:4f:58:40:c5:cc:c3:c9:f3:6a:8d:65:bc:c2:3e:bd:5d:
         23:b6:d5:e0:a7:33:6d:74:de:c3:cc:c6:aa:b0:26:24:e5:30:
         ca:75:82:f0:3e:c6:ca:35:74:7c:08:84:ad:f7:22:69:6d:34:
         22:fd:1e:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPZ/oW50FMLLum05q9NTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Mjg0ZjE4Y2Q0NDYwNGJkZDZkMDhmNGQ4NzhkYzYxNDU2
YzQwZmQwHhcNMjYwNzI4MTUwMDE1WhcNMjYwNzI5MTUwMDE1WjAzMTEwLwYDVQQD
EygzZDVlYTNkOWFiYmYzY2YzODRkY2VmOGM5YTIzNzlkNWExODRlOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny5AGI+PXxmjpVaasVyMoTeSJ3rb
acWGWRjY3808BcV3XDiZskrFbfAbJk/VN2CvoK2kkKbCHtZ0qIPP9YGD2iTxVXr8
hDy65pfULYKDBWeX22acc3U7CG9NGuQNoifxuBURUkN0zDG6ETAdOK/9+OwZjWt8
Fc82ePnXEZJZMf0I0cpwRmxb5TbTGAtfdvi4yQdRCeswU+lshIW/xlzJ/l7Hal2l
A6us61YOEzGYyGVZdiQC17T5kuCRQDuEN6Z+MjkVxQZdf7wLP8khRewlsGsOPDj7
vb8k+2+G83Fb4DYT3WJh9oS+r4qL9cVIZUTbhiITTLbYNQ3CPAuV1TbW+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1eo9mrvzzzhNzvjJojedWhhOjtMB8GA1UdIwQY
MBaAFNgoTxjNRGBL3W0I9Nh43GFFbED9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0Zjgt
Yzc4NjkxMjg1ODJjLzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0ZjgtYzc4NjkxMjg1ODJj
LzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQviDnpN0
xLyhd8cxoh2jl74NG4EB41G/oTMTZgyRLkUX8ryim7VNqFbUagtQG5F2UiZ8+iOn
cWvXP4dkjfemm1V2IRJHalqTgP+U2e0m6HfA9+Q0Ds+yMbG21KLR7Ubs9IqN+fjF
9cn/f0hC5sURyhuucFyZazKaxaJjL+gsAXSBMDTxypZvXB+ukaXYkFNUZTeFCfmY
KsrCoi4tYSvfTBdCX0Ese9dpG0tij7LjwV7/rspQONepk52sqBgwq5ewcl24aiCM
YaVPWEDFzMPJ82qNZbzCPr1dI7bV4KczbXTew8zGqrAmJOUwynWC8D7GyjV0fAiE
rfciaW00Iv0euw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:58 2026 by rpki-client