Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
File:                     x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft (raw, json)
Hash identifier:          N6icpSfIdPDADE1KQsLTGtF99EtOtnEFUqYekPZGAdE=
Subject key identifier:   7D:8B:91:AB:E4:87:DC:DC:93:B6:3F:C4:89:F3:BD:7D:99:05:8E:A0
Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A
Certificate issuer:       /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
Certificate serial:       019FAD5234FDA172692A0718E9340DFCDEDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
Manifest number:          025E
Signing time:             Wed 29 Jul 2026 10:01:13 +0000
Manifest this update:     Wed 29 Jul 2026 10:01:13 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:13 +0000
Files and hashes:         1: w-oyu6Dt2pR1vO2yb74Z1MeDHhc.roa (hash: 3NZ9tfleTSDXUKf2CN0AIsezDYvSZLjibOtJobFnX+M=)
                          2: x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl (hash: 21HBVttWT6arecz6gbpuDLJWDgscZ12jW0fr6yXlMW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:52:34:fd:a1:72:69:2a:07:18:e9:34:0d:fc:de:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a
        Validity
            Not Before: Jul 29 10:01:13 2026 GMT
            Not After : Jul 30 10:01:13 2026 GMT
        Subject: CN=7d8b91abe487dcdc93b63fc489f3bd7d99058ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:f0:c6:2a:ac:66:5c:49:11:36:e0:ed:ba:
                    b8:d4:95:a1:35:d1:d1:a3:a7:3a:2d:23:10:2b:34:
                    c2:6f:fe:d3:1c:ee:41:6b:a6:04:a9:dc:3b:11:e2:
                    b6:77:b5:5b:ad:0f:0d:92:f5:a9:74:03:1b:8a:0e:
                    55:0f:b2:bd:81:94:b7:fe:39:06:e5:8a:f3:6b:ac:
                    f2:d7:8b:ad:8c:87:5f:1b:53:29:b7:47:8d:85:e0:
                    23:62:67:d0:24:a2:f8:7d:ac:49:24:d8:9b:54:01:
                    74:56:29:27:30:84:01:84:d4:ea:88:fc:ba:73:6d:
                    b3:bb:52:31:ae:62:35:ff:3c:a3:20:ca:37:e5:cf:
                    96:5a:b5:f0:28:20:3a:67:f0:21:d0:9f:bb:f3:75:
                    ba:db:f3:2d:d3:2a:ce:61:7e:50:60:3a:af:52:0e:
                    12:8a:e7:6d:02:ab:76:b4:be:84:7d:5a:65:04:98:
                    76:9e:5b:ee:70:23:66:86:00:39:8a:8c:a6:3f:14:
                    8d:3a:5a:7a:bb:1a:92:b7:7a:e8:32:20:8d:5a:7a:
                    64:b8:4d:a3:77:48:06:74:81:a9:ce:b7:b4:d9:23:
                    df:e1:75:9f:c4:ea:fc:7d:8a:b1:d2:6b:2c:bb:0a:
                    75:3f:71:fe:a1:f3:43:6a:2e:f2:ea:9b:6a:7e:36:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8B:91:AB:E4:87:DC:DC:93:B6:3F:C4:89:F3:BD:7D:99:05:8E:A0
            X509v3 Authority Key Identifier:
                keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:d3:0f:04:c2:98:93:9d:28:a1:b0:cc:bb:2a:7b:73:a2:31:
         5f:d5:18:1c:a0:a1:79:10:55:90:3b:f2:9d:0e:3a:e5:56:70:
         d0:eb:ea:23:a3:2a:17:50:a3:e2:98:f5:70:eb:dc:36:96:a6:
         49:cf:25:0d:69:a9:28:5c:ef:6a:20:b7:7a:0c:55:0e:8d:3b:
         a8:96:9c:a9:84:c1:a0:8e:94:28:58:c9:a0:c1:39:2e:b6:37:
         5c:70:d7:3f:9c:bd:4f:d0:d6:84:55:04:e2:dc:8b:5d:4d:f4:
         65:ed:47:f6:1e:84:cf:ee:27:09:88:1b:dd:5f:8d:b1:99:06:
         93:13:d3:53:7d:56:57:32:c7:6e:8b:40:44:3c:57:bc:1a:88:
         61:e6:9f:d0:f5:dc:35:a5:09:5b:29:7e:ea:2b:82:65:94:c8:
         79:df:40:c0:ed:7a:86:7b:a8:3b:b9:3e:95:b3:dc:e0:f3:76:
         39:3e:cd:b0:8a:0c:71:1c:d3:ad:ca:c6:6a:03:c2:59:22:5f:
         d7:d5:90:82:92:79:04:c8:d6:f6:b6:c2:ca:0e:f5:8a:29:e7:
         c6:75:f5:d0:e5:99:b4:0a:09:a2:a9:8c:c1:73:b9:d0:e9:a6:
         88:96:f7:00:40:61:f3:61:1d:9f:8f:4e:a1:02:4d:90:68:83:
         54:f5:3b:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUjT9oXJpKgcY6TQN/N7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Y2JhOTgxY2U1OGExMGVkZDJjOTk4MDFlMDQzYWQ4MDRh
ODVmOWEwHhcNMjYwNzI5MTAwMTEzWhcNMjYwNzMwMTAwMTEzWjAzMTEwLwYDVQQD
Eyg3ZDhiOTFhYmU0ODdkY2RjOTNiNjNmYzQ4OWYzYmQ3ZDk5MDU4ZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8fwxiqsZlxJETbg7bq41JWhNdHR
o6c6LSMQKzTCb/7THO5Ba6YEqdw7EeK2d7VbrQ8NkvWpdAMbig5VD7K9gZS3/jkG
5Yrza6zy14utjIdfG1Mpt0eNheAjYmfQJKL4faxJJNibVAF0ViknMIQBhNTqiPy6
c22zu1IxrmI1/zyjIMo35c+WWrXwKCA6Z/Ah0J+783W62/Mt0yrOYX5QYDqvUg4S
iudtAqt2tL6EfVplBJh2nlvucCNmhgA5ioymPxSNOlp6uxqSt3roMiCNWnpkuE2j
d0gGdIGpzre02SPf4XWfxOr8fYqx0mssuwp1P3H+ofNDai7y6ptqfjZBEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2Lkavkh9zck7Y/xInzvX2ZBY6gMB8GA1UdIwQY
MBaAFMfLqYHOWKEO3SyZgB4EOtgEqF+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Y2QyODktZDE2ZS00NjA0LWI1NGEt
ZDlhMWJmMTBjNTdmLzEveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80Y2QyODktZDE2ZS00NjA0LWI1NGEtZDlhMWJmMTBjNTdm
LzEveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx9MPBMKY
k50oobDMuyp7c6IxX9UYHKCheRBVkDvynQ465VZw0OvqI6MqF1Cj4pj1cOvcNpam
Sc8lDWmpKFzvaiC3egxVDo07qJacqYTBoI6UKFjJoME5LrY3XHDXP5y9T9DWhFUE
4tyLXU30Ze1H9h6Ez+4nCYgb3V+NsZkGkxPTU31WVzLHbotARDxXvBqIYeaf0PXc
NaUJWyl+6iuCZZTIed9AwO16hnuoO7k+lbPc4PN2OT7NsIoMcRzTrcrGagPCWSJf
19WQgpJ5BMjW9rbCyg71iinnxnX10OWZtAoJoqmMwXO50OmmiJb3AEBh82Edn49O
oQJNkGiDVPU7Pg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 19:04:17 2026 by rpki-client