Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File:                     tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier:          OkKalgYdnhuD3wMd1Q7Cj54a/3LgOkssJVIdzB7LOD8=
Subject key identifier:   A3:6A:B8:18:FB:79:CE:54:50:66:7E:9C:C4:28:2A:8E:8A:B7:90:E7
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer:       /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial:       019FAB9A401A434855045B4551647DF8C4C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number:          19DC
Signing time:             Wed 29 Jul 2026 02:00:40 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:40 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:40 +0000
Files and hashes:         1: fK9aO2I8AtgF0c0rdh_GX4O4_G4.roa (hash: u0RKyLKqUhdTzKSmpaGBlbuO8M5rtJXGLGs1u6N9C1g=)
                          2: nUmXXOPkWjccJgN8O22tzPhWVlA.roa (hash: UqKB7riKgf3jbIKMj8rldXeyuF7eaO+XqFxWCXQioCw=)
                          3: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: 8uBWmyuIxt0axUXFmTaYfx8eoDafWPHvHGRvBKKOVFI=)
                          4: xYSs50B2xtsvWdJxMD0UuyzwnRE.roa (hash: wUK1v8a3MmWnPSffQ5f8oxAVVqstmvh7KosqvxbaO78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:40:1a:43:48:55:04:5b:45:51:64:7d:f8:c4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
        Validity
            Not Before: Jul 29 02:00:40 2026 GMT
            Not After : Jul 30 02:00:40 2026 GMT
        Subject: CN=a36ab818fb79ce5450667e9cc4282a8e8ab790e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:81:ea:34:59:64:9b:ce:d4:2a:19:ae:26:
                    61:88:b7:96:68:1c:46:e8:cc:09:55:44:8b:b1:c0:
                    f9:a0:f4:cf:c5:99:a4:9f:cc:6d:8e:ac:c0:16:de:
                    f9:c4:40:e5:80:c5:3c:54:30:15:4e:7f:d1:b0:c5:
                    bf:44:c3:fa:8a:3b:c3:fa:9c:da:19:ef:7d:f7:01:
                    db:7b:8c:ff:7a:98:c5:54:6f:54:8e:a3:27:af:97:
                    e8:52:d4:8a:be:4a:77:cb:5e:b1:ca:c5:b5:a6:8a:
                    0d:6b:86:f9:b6:58:41:3a:a6:ac:21:d4:f1:91:07:
                    65:80:b9:f7:f1:02:ff:ec:51:1f:46:1d:5e:7f:a0:
                    22:05:75:0c:04:e5:a6:6f:ac:c7:83:67:85:39:88:
                    c4:ed:a1:e9:15:15:0c:a1:cc:b2:36:7c:9c:41:35:
                    9a:d3:62:6d:6a:41:d6:41:d6:9e:e3:52:e5:9b:ad:
                    ab:9b:b1:ff:13:0c:27:4d:42:fa:8d:1d:96:3e:c6:
                    78:56:de:bd:77:93:ed:9d:57:4c:73:07:31:89:96:
                    88:19:4d:93:32:fe:c5:fb:e1:af:93:e3:ed:a2:08:
                    97:dc:62:56:58:d3:a6:2a:11:1e:08:5c:8c:ce:28:
                    9b:b0:51:62:51:90:8a:21:33:c5:a3:35:dd:22:d1:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6A:B8:18:FB:79:CE:54:50:66:7E:9C:C4:28:2A:8E:8A:B7:90:E7
            X509v3 Authority Key Identifier:
                keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:83:fc:c3:12:24:a5:3f:58:65:a3:e1:f3:65:78:2a:92:6b:
         0f:56:3a:00:0a:64:0f:fa:08:a1:07:c7:e8:75:ee:6f:13:94:
         8c:2c:d8:92:e4:6c:f2:36:fc:4c:0e:75:86:a5:24:aa:a8:da:
         e2:60:aa:f5:f5:56:53:3c:f1:bb:8f:dd:f5:bd:6d:94:9b:f6:
         47:96:db:7d:07:b8:c8:69:39:d9:72:a1:7d:f3:2d:a0:6d:7b:
         a1:12:e8:29:73:3b:8f:70:47:6d:0f:fe:f8:13:33:d6:f1:00:
         52:55:65:50:7d:37:85:de:7e:3f:70:e6:68:8e:2e:09:cd:a6:
         f0:0b:68:ab:b3:66:99:8e:44:4b:4f:0c:06:96:d4:e4:a7:11:
         e7:be:7d:d8:15:0a:b7:da:09:77:ca:25:3c:43:5d:c4:ed:2d:
         9e:40:77:e7:dd:ed:15:f7:c1:f9:a4:30:f6:96:ff:52:33:1a:
         d0:ac:83:ed:fc:20:08:45:0b:67:08:e9:b9:44:dd:7e:2a:32:
         ec:39:0f:73:24:78:60:c5:f2:cc:e6:89:73:35:bd:13:52:b1:
         2e:73:c3:14:fe:85:9b:c2:d5:40:ef:07:89:f2:36:bf:e4:33:
         e4:d2:2f:aa:b5:f0:8b:db:c2:cc:92:8d:90:a4:4a:de:c8:15:
         05:6a:b8:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmkAaQ0hVBFtFUWR9+MTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NDA3NGFhODQ0OTgzMGRhOWIyMGIzYWZiMDY4MmQzYzAz
MmY5ZmUwHhcNMjYwNzI5MDIwMDQwWhcNMjYwNzMwMDIwMDQwWjAzMTEwLwYDVQQD
EyhhMzZhYjgxOGZiNzljZTU0NTA2NjdlOWNjNDI4MmE4ZThhYjc5MGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yGB6jRZZJvO1CoZriZhiLeWaBxG
6MwJVUSLscD5oPTPxZmkn8xtjqzAFt75xEDlgMU8VDAVTn/RsMW/RMP6ijvD+pza
Ge999wHbe4z/epjFVG9UjqMnr5foUtSKvkp3y16xysW1pooNa4b5tlhBOqasIdTx
kQdlgLn38QL/7FEfRh1ef6AiBXUMBOWmb6zHg2eFOYjE7aHpFRUMocyyNnycQTWa
02JtakHWQdae41Llm62rm7H/EwwnTUL6jR2WPsZ4Vt69d5PtnVdMcwcxiZaIGU2T
Mv7F++Gvk+PtogiX3GJWWNOmKhEeCFyMziibsFFiUZCKITPFozXdItHUwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNquBj7ec5UUGZ+nMQoKo6Kt5DnMB8GA1UdIwQY
MBaAFLZAdKqESYMNqbILOvsGgtPAMvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEt
MzUxNzFhZWRkMzEzLzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEtMzUxNzFhZWRkMzEz
LzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYP8wxIk
pT9YZaPh82V4KpJrD1Y6AApkD/oIoQfH6HXubxOUjCzYkuRs8jb8TA51hqUkqqja
4mCq9fVWUzzxu4/d9b1tlJv2R5bbfQe4yGk52XKhffMtoG17oRLoKXM7j3BHbQ/+
+BMz1vEAUlVlUH03hd5+P3DmaI4uCc2m8Atoq7NmmY5ES08MBpbU5KcR57592BUK
t9oJd8olPENdxO0tnkB3593tFffB+aQw9pb/UjMa0KyD7fwgCEULZwjpuUTdfioy
7DkPcyR4YMXyzOaJczW9E1KxLnPDFP6Fm8LVQO8HifI2v+Qz5NIvqrXwi9vCzJKN
kKRK3sgVBWq4MQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:49:57 2026 by rpki-client