Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File:                     yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier:          a9OHH1sfW4blzn1/05sk+cDQTBdAzi5hWHHLsPnN9oc=
Subject key identifier:   F2:66:DB:32:AA:73:54:38:FB:50:94:D4:CD:46:88:8A:67:27:02:25
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer:       /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial:       019FAC083F1FD8EA8E529D9327C8ADA38B40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number:          0977
Signing time:             Wed 29 Jul 2026 04:00:49 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:49 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:49 +0000
Files and hashes:         1: C_wku5jNWsis0PL0WlmaY8cUefc.roa (hash: J88psE63nbYG3X/J1+2VVAZBNf7cffwkkrlJw1ScQ80=)
                          2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: 7KbxcyZO2/fPORiuD/hTpVZBJDkLPRUPD7ho1gGS1jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:3f:1f:d8:ea:8e:52:9d:93:27:c8:ad:a3:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
        Validity
            Not Before: Jul 29 04:00:49 2026 GMT
            Not After : Jul 30 04:00:49 2026 GMT
        Subject: CN=f266db32aa735438fb5094d4cd46888a67270225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:06:9b:d2:c6:3e:a9:22:55:fe:ed:ef:14:
                    69:94:49:a3:11:54:7e:69:3e:57:21:80:33:98:10:
                    8b:c5:71:2b:b3:4e:ec:46:2f:68:c5:27:b2:c1:5a:
                    e7:42:22:3b:0d:97:19:d3:9a:db:b6:80:82:49:08:
                    24:a2:c4:fe:7d:9c:b6:cb:cf:10:b7:6b:a7:47:25:
                    b7:dc:66:06:79:4f:bf:eb:84:3a:cf:80:f4:95:88:
                    01:db:19:78:04:79:05:f4:d9:aa:29:36:cb:3b:d5:
                    cd:3c:a9:ab:61:0a:f8:0e:86:b3:94:95:36:33:51:
                    fa:f9:d0:e2:8e:15:ef:aa:63:58:b1:e8:01:9c:39:
                    7b:32:62:14:66:3c:70:2c:41:03:ac:82:e8:18:26:
                    b0:28:85:d0:b4:75:32:80:18:e9:80:92:4b:cf:3f:
                    e1:a5:f3:09:e5:20:47:a5:02:45:59:e1:15:ee:75:
                    8a:eb:60:f7:2b:0a:36:42:0b:8f:06:ab:55:63:ba:
                    9e:df:9c:78:93:c8:32:66:c8:f6:86:ad:d7:8b:c9:
                    03:e7:62:25:1b:79:6c:e6:26:85:48:76:72:31:fa:
                    d9:9c:c1:c9:cb:20:ee:c6:c8:0f:ef:17:c0:d3:df:
                    0a:92:09:d8:b2:e4:86:68:9d:45:05:8e:15:2a:b4:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:66:DB:32:AA:73:54:38:FB:50:94:D4:CD:46:88:8A:67:27:02:25
            X509v3 Authority Key Identifier:
                keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:03:d6:f0:ed:fb:5b:fe:9b:07:b4:33:dc:80:03:1a:70:
         d1:b8:86:37:eb:63:a7:7b:0d:f1:b5:30:95:fe:7c:25:fd:86:
         f5:a5:52:94:fb:77:fe:9e:f4:7c:c8:39:ea:dc:0e:ad:09:d1:
         62:d8:e5:e6:cf:cf:0d:6e:82:d0:60:9b:28:90:31:65:29:12:
         79:88:79:a1:af:37:3e:2e:fa:7e:21:ac:78:36:00:a6:dd:64:
         b4:76:69:aa:f7:18:1e:ec:7e:14:12:96:c1:f1:4e:6e:5b:09:
         0a:f8:89:1c:e3:ea:4f:10:b8:37:77:80:bc:d2:54:b7:bf:90:
         b0:ae:c0:7c:2b:d0:f1:5f:20:c9:ac:48:3a:2d:60:8a:b9:9f:
         d8:10:9f:ee:c7:32:57:52:98:47:f8:e9:79:c5:e6:80:3b:dc:
         0d:d7:c0:74:ac:d8:61:bd:9a:20:b1:32:ea:32:8c:ac:b3:8b:
         fe:80:23:84:df:ed:42:91:d4:aa:57:ca:25:ff:6d:6e:d4:b2:
         ec:5e:67:ad:54:82:c5:b9:99:36:8e:5d:0d:24:5d:d9:98:b8:
         7f:4f:ec:12:e4:bc:3a:52:6f:19:34:45:c4:6c:f7:2f:62:06:
         06:e3:7b:82:c7:e6:87:5a:c9:e7:33:5d:e0:93:f5:3a:0d:86:
         e9:f4:bf:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCD8f2OqOUp2TJ8ito4tAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MThjNDAxOTQ3NGNjODFlYzY2MWZjZTY0ZTZjOTM4OTcy
MTk2ZGEwHhcNMjYwNzI5MDQwMDQ5WhcNMjYwNzMwMDQwMDQ5WjAzMTEwLwYDVQQD
EyhmMjY2ZGIzMmFhNzM1NDM4ZmI1MDk0ZDRjZDQ2ODg4YTY3MjcwMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMYGm9LGPqkiVf7t7xRplEmjEVR+
aT5XIYAzmBCLxXErs07sRi9oxSeywVrnQiI7DZcZ05rbtoCCSQgkosT+fZy2y88Q
t2unRyW33GYGeU+/64Q6z4D0lYgB2xl4BHkF9NmqKTbLO9XNPKmrYQr4DoazlJU2
M1H6+dDijhXvqmNYsegBnDl7MmIUZjxwLEEDrILoGCawKIXQtHUygBjpgJJLzz/h
pfMJ5SBHpQJFWeEV7nWK62D3Kwo2QguPBqtVY7qe35x4k8gyZsj2hq3Xi8kD52Il
G3ls5iaFSHZyMfrZnMHJyyDuxsgP7xfA098KkgnYsuSGaJ1FBY4VKrSDwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJm2zKqc1Q4+1CU1M1GiIpnJwIlMB8GA1UdIwQY
MBaAFMkYxAGUdMyB7GYfzmTmyTiXIZbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yOTY4NTItYThmZC00OGU1LThkZDYt
OGFiY2JiNjVjNjIxLzEveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yOTY4NTItYThmZC00OGU1LThkZDYtOGFiY2JiNjVjNjIx
LzEveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEcD1vDt
+1v+mwe0M9yAAxpw0biGN+tjp3sN8bUwlf58Jf2G9aVSlPt3/p70fMg56twOrQnR
Ytjl5s/PDW6C0GCbKJAxZSkSeYh5oa83Pi76fiGseDYApt1ktHZpqvcYHux+FBKW
wfFOblsJCviJHOPqTxC4N3eAvNJUt7+QsK7AfCvQ8V8gyaxIOi1girmf2BCf7scy
V1KYR/jpecXmgDvcDdfAdKzYYb2aILEy6jKMrLOL/oAjhN/tQpHUqlfKJf9tbtSy
7F5nrVSCxbmZNo5dDSRd2Zi4f0/sEuS8OlJvGTRFxGz3L2IGBuN7gsfmh1rJ5zNd
4JP1Og2G6fS/AA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:43:25 2026 by rpki-client