Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
File:                     121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json)
Hash identifier:          oH7gk02yIhi493hrJxgyLHy4EKbfBZYmsRFP/GPmnv4=
Subject key identifier:   5D:30:09:3B:95:C5:82:39:AD:9F:AB:57:79:68:CF:6C:7E:14:A6:B8
Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A
Certificate issuer:       /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
Certificate serial:       019FAB99EBE9A68E5962FA178F9EBEEA0E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
Manifest number:          19DD
Signing time:             Wed 29 Jul 2026 02:00:19 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:19 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:19 +0000
Files and hashes:         1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: IOJvb1fh5rfAYXzgPg27hLcSRm8Cm2176MgfPb1RQ+g=)
                          2: PYC5VmfJr8R_CWcpbSFGWUPORN8.roa (hash: ni//q5JfG12C/jFNrjnRjeiKy+Pl48zK6T66mzOL5KA=)
                          3: ucYb6qB_KaTWYUSU6LAo8719FDs.roa (hash: +ASle/PB3Ogg8HVIw0p9waPXwti0vvLog6UAfw5L79w=)
                          4: x04dCWjItyDGXFoquqgz5jnrMRg.roa (hash: hVlcjFxSr+ykf+gKZRqjXZQpnt9aXT76dSufsRzsGvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:99:eb:e9:a6:8e:59:62:fa:17:8f:9e:be:ea:0e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a
        Validity
            Not Before: Jul 29 02:00:19 2026 GMT
            Not After : Jul 30 02:00:19 2026 GMT
        Subject: CN=5d30093b95c58239ad9fab577968cf6c7e14a6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:d8:c4:b5:d9:6c:b1:fa:a4:1a:9d:a2:dc:
                    93:9d:9d:dd:09:ab:98:3b:29:4e:55:62:f0:05:ba:
                    81:aa:67:d9:df:f0:d9:ad:98:a8:7c:f7:de:46:3a:
                    fb:94:a8:b3:23:fd:6b:67:3a:8b:5a:8c:c8:ed:c1:
                    28:92:ec:8a:fb:61:61:82:e5:ab:cc:44:ae:46:b5:
                    58:b5:7a:84:c0:72:42:4f:02:1d:67:7e:27:51:fe:
                    1b:86:74:b7:3a:97:12:d7:b8:0f:8c:f2:b3:b7:2d:
                    8b:cc:fe:15:0b:8f:07:ca:c0:25:09:56:19:c6:ee:
                    a3:e2:6e:6f:bd:57:6a:ef:78:10:7a:c2:6d:bd:60:
                    36:e5:54:67:4e:0f:73:d7:45:ce:f2:65:a3:98:73:
                    34:4a:ae:d6:a0:4e:39:53:12:51:24:3c:de:5c:67:
                    4e:5b:5c:98:06:ca:2a:09:e4:b5:94:1e:3c:18:6e:
                    c9:c3:f1:48:0b:55:16:4f:eb:cc:79:79:b2:89:f6:
                    ce:9f:af:4e:39:39:14:76:a2:be:a6:01:b9:ca:00:
                    6f:7a:cb:05:83:dc:57:be:5d:e9:1f:c4:ec:2d:be:
                    75:97:10:7b:40:2f:de:e7:8b:67:50:ef:54:ad:98:
                    e3:04:c1:eb:6d:43:f6:db:33:de:f7:dd:69:9e:93:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:30:09:3B:95:C5:82:39:AD:9F:AB:57:79:68:CF:6C:7E:14:A6:B8
            X509v3 Authority Key Identifier:
                keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:66:4d:7f:fb:eb:3d:fe:a2:69:a8:92:33:05:51:7d:d2:
         20:7a:68:1b:b4:33:cf:aa:1e:0e:4c:22:61:62:60:5f:5a:3a:
         5e:2e:3c:49:f1:45:23:6b:2c:1e:7a:70:0e:25:9e:f7:f3:42:
         27:e7:e0:67:09:4c:f7:f9:96:1b:d5:7c:fa:74:68:7a:cd:c0:
         5c:51:8b:bc:f8:a7:17:6e:d9:a7:16:f2:d4:05:d4:9d:06:fc:
         cd:a4:56:83:ef:43:bf:da:5c:ec:5d:30:4e:aa:f2:b3:8e:14:
         37:c0:8d:8b:31:dc:0b:d8:6e:61:e8:80:f2:cc:b7:5f:49:28:
         76:ce:cb:ae:93:b7:71:be:10:86:5e:c0:c5:72:b7:0a:02:14:
         af:73:4e:d3:38:3d:16:74:73:6f:66:af:66:69:0b:69:02:70:
         2d:cd:59:23:42:ed:74:27:e9:f7:a1:23:0b:9c:eb:61:83:75:
         1f:0e:cc:76:7d:7f:33:e0:b5:9f:77:c1:02:6a:f6:e4:37:d9:
         fd:a6:d6:df:ae:9c:7b:ba:0c:1c:8e:fa:83:1b:9c:62:f0:fa:
         76:37:7c:bc:e5:ce:45:a5:4c:a4:f8:1c:ab:a7:e9:c3:ab:6e:
         f8:fc:8b:8f:1c:38:43:c9:df:22:7b:fb:12:d2:84:b7:c9:13:
         90:57:14:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmevppo5ZYvoXj56+6g6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmQ3MWQ4ODQ1ZDJmZTI5NmE0NmQ3OTE3NmY1OTBkOGRi
NGYxNmEwHhcNMjYwNzI5MDIwMDE5WhcNMjYwNzMwMDIwMDE5WjAzMTEwLwYDVQQD
Eyg1ZDMwMDkzYjk1YzU4MjM5YWQ5ZmFiNTc3OTY4Y2Y2YzdlMTRhNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmjYxLXZbLH6pBqdotyTnZ3dCauY
OylOVWLwBbqBqmfZ3/DZrZiofPfeRjr7lKizI/1rZzqLWozI7cEokuyK+2FhguWr
zESuRrVYtXqEwHJCTwIdZ34nUf4bhnS3OpcS17gPjPKzty2LzP4VC48HysAlCVYZ
xu6j4m5vvVdq73gQesJtvWA25VRnTg9z10XO8mWjmHM0Sq7WoE45UxJRJDzeXGdO
W1yYBsoqCeS1lB48GG7Jw/FIC1UWT+vMeXmyifbOn69OOTkUdqK+pgG5ygBvessF
g9xXvl3pH8TsLb51lxB7QC/e54tnUO9UrZjjBMHrbUP22zPe991pnpNCqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0wCTuVxYI5rZ+rV3loz2x+FKa4MB8GA1UdIwQY
MBaAFNdtcdiEXS/ilqRteRdvWQ2NtPFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTIt
ZGJkOTFiMTExODQ0LzEvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTItZGJkOTFiMTExODQ0
LzEvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8BmTX/7
6z3+ommokjMFUX3SIHpoG7Qzz6oeDkwiYWJgX1o6Xi48SfFFI2ssHnpwDiWe9/NC
J+fgZwlM9/mWG9V8+nRoes3AXFGLvPinF27Zpxby1AXUnQb8zaRWg+9Dv9pc7F0w
Tqrys44UN8CNizHcC9huYeiA8sy3X0kods7LrpO3cb4Qhl7AxXK3CgIUr3NO0zg9
FnRzb2avZmkLaQJwLc1ZI0LtdCfp96EjC5zrYYN1Hw7Mdn1/M+C1n3fBAmr25DfZ
/abW366ce7oMHI76gxucYvD6djd8vOXORaVMpPgcq6fpw6tu+PyLjxw4Q8nfInv7
EtKEt8kTkFcUXA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:38 2026 by rpki-client