Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File:                     A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier:          3EFexYhqCPyyci1I8I16W6R3k1CurGQ2TQRHGkihrLE=
Subject key identifier:   87:7C:2F:5D:99:AD:CA:64:9F:F5:A3:F8:9A:90:51:F6:FE:94:5C:93
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       019FA8CFE8AFEE93800B64D85B68D9615E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number:          0C1B
Signing time:             Tue 28 Jul 2026 13:00:25 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:25 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:25 +0000
Files and hashes:         1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: EADEVpsmDxsjd2dJDBTm6wlZaVakHkxUAu7SqQcbHUU=)
                          2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
                          3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
                          4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
                          5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:e8:af:ee:93:80:0b:64:d8:5b:68:d9:61:5e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: Jul 28 13:00:25 2026 GMT
            Not After : Jul 29 13:00:25 2026 GMT
        Subject: CN=877c2f5d99adca649ff5a3f89a9051f6fe945c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:b9:2e:fd:c9:f3:85:29:fa:04:7a:8e:89:
                    51:c3:64:c1:37:7c:ba:cf:1b:9b:3e:07:0e:e0:b6:
                    6b:cf:f8:2b:fd:d3:4a:7d:3d:be:a2:60:c2:09:8c:
                    3d:0b:bc:1b:06:5d:1d:bf:8b:c8:ff:de:4e:af:90:
                    b2:d6:04:35:aa:07:a4:da:6b:f6:db:52:5d:a8:55:
                    c8:e0:86:9d:02:9c:14:4b:20:13:e2:ff:da:08:3b:
                    33:33:10:04:ca:9d:1b:32:06:80:ef:88:0a:3e:ad:
                    da:e6:75:1c:6f:00:9c:5e:57:ff:f6:b9:13:3d:9b:
                    7b:5c:5c:94:64:1f:6f:59:5f:4f:08:22:b0:55:66:
                    e7:fe:79:02:10:ff:df:ae:6a:44:be:ef:66:8e:1d:
                    a4:a7:59:ab:14:35:53:5c:32:ae:bc:07:c6:b8:58:
                    57:a5:bb:d9:15:88:39:d6:02:30:d9:ac:a2:83:99:
                    ea:c0:3c:aa:aa:59:1e:1e:e3:52:d3:23:22:0a:ae:
                    d3:80:62:48:8e:97:53:8e:5e:ba:5b:35:d9:b7:ea:
                    02:c0:55:c4:d2:56:88:d2:6a:19:3c:ba:2b:41:76:
                    86:19:04:e2:1e:ca:ff:29:aa:56:b3:2f:86:7b:c0:
                    ef:19:8d:dc:28:5e:25:4d:31:81:63:84:ed:30:d1:
                    b0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:2F:5D:99:AD:CA:64:9F:F5:A3:F8:9A:90:51:F6:FE:94:5C:93
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:54:77:6f:f3:7b:8f:0a:ce:db:3a:3f:c6:d8:35:b5:3d:a9:
         90:85:95:58:2c:dc:eb:3b:0c:9b:1e:89:06:e2:22:a8:3b:72:
         88:af:14:62:83:c7:8e:93:96:c9:da:a4:e8:e6:e6:09:ea:70:
         c8:bb:71:3f:61:96:15:31:92:12:4b:1b:a1:28:04:ab:25:93:
         78:c0:38:6f:65:05:ac:78:b5:e8:cd:33:58:b4:c0:b7:aa:ba:
         0b:71:1f:1a:71:2f:9c:2e:da:fb:c0:12:83:25:09:40:4d:f0:
         51:d3:82:8d:87:fb:3b:2a:e9:b1:ce:26:d6:0f:72:bc:48:4c:
         f0:7e:3b:79:7b:6d:c5:59:21:ce:87:0c:90:28:2f:8a:0e:e7:
         90:81:91:7a:7b:cf:49:8b:9c:28:69:3b:06:35:63:71:27:1d:
         ba:5d:14:af:1b:21:53:86:f5:e9:87:88:97:a0:9b:22:08:d6:
         c0:c3:08:58:2a:06:f2:7c:61:b2:a1:d1:20:27:d3:19:ba:a4:
         0a:5b:d4:f6:0b:96:6b:67:fc:3d:03:59:4c:7a:59:b7:9e:ea:
         f0:5f:92:42:9a:a0:01:e7:15:10:a3:e1:2f:f4:82:9a:8f:ba:
         4a:68:75:62:3e:e1:2b:49:cb:e5:63:62:3f:28:db:29:2e:65:
         d1:44:10:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oz+iv7pOAC2TYW2jZYV56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw
NzIwYmIwHhcNMjYwNzI4MTMwMDI1WhcNMjYwNzI5MTMwMDI1WjAzMTEwLwYDVQQD
Eyg4NzdjMmY1ZDk5YWRjYTY0OWZmNWEzZjg5YTkwNTFmNmZlOTQ1YzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNG5Lv3J84Up+gR6jolRw2TBN3y6
zxubPgcO4LZrz/gr/dNKfT2+omDCCYw9C7wbBl0dv4vI/95Or5Cy1gQ1qgek2mv2
21JdqFXI4IadApwUSyAT4v/aCDszMxAEyp0bMgaA74gKPq3a5nUcbwCcXlf/9rkT
PZt7XFyUZB9vWV9PCCKwVWbn/nkCEP/frmpEvu9mjh2kp1mrFDVTXDKuvAfGuFhX
pbvZFYg51gIw2ayig5nqwDyqqlkeHuNS0yMiCq7TgGJIjpdTjl66WzXZt+oCwFXE
0laI0moZPLorQXaGGQTiHsr/KapWsy+Ge8DvGY3cKF4lTTGBY4TtMNGw9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId8L12Zrcpkn/Wj+JqQUfb+lFyTMB8GA1UdIwQY
MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt
NzQwM2UxMzY3NWFiLzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi
LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFR3b/N7
jwrO2zo/xtg1tT2pkIWVWCzc6zsMmx6JBuIiqDtyiK8UYoPHjpOWydqk6ObmCepw
yLtxP2GWFTGSEksboSgEqyWTeMA4b2UFrHi16M0zWLTAt6q6C3EfGnEvnC7a+8AS
gyUJQE3wUdOCjYf7Oyrpsc4m1g9yvEhM8H47eXttxVkhzocMkCgvig7nkIGRenvP
SYucKGk7BjVjcScdul0UrxshU4b16YeIl6CbIgjWwMMIWCoG8nxhsqHRICfTGbqk
ClvU9guWa2f8PQNZTHpZt57q8F+SQpqgAecVEKPhL/SCmo+6Smh1Yj7hK0nL5WNi
PyjbKS5l0UQQ5w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:33 2026 by rpki-client