Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
File:                     a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json)
Hash identifier:          fwxfQAzXuw6XF65eW/Grv2IN++Brs03K+fVdQf14gM4=
Subject key identifier:   41:01:EE:AB:E4:59:AE:86:36:D2:79:A7:BC:36:21:B2:6F:B0:1E:87
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Certificate issuer:       /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial:       019FAA5096520123721DA2165CA80BCFBC99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
Manifest number:          19B5
Signing time:             Tue 28 Jul 2026 20:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:35 +0000
Files and hashes:         1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=)
                          2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=)
                          3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=)
                          4: B7aE9R9fg8NCdOQeiZzwMIi2ZNw.roa (hash: d1Ep9dN1bkXXcsIWaTx6sw5pJSc2xeGu6SeeEZeK/UM=)
                          5: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=)
                          6: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=)
                          7: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=)
                          8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: FhtHZ/AdEE5TWvAuihX1aI7mmd7g0OwYWzkXO7lTuiA=)
                          9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=)
                          10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=)
                          11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=)
                          12: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:96:52:01:23:72:1d:a2:16:5c:a8:0b:cf:bc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
        Validity
            Not Before: Jul 28 20:00:35 2026 GMT
            Not After : Jul 29 20:00:35 2026 GMT
        Subject: CN=4101eeabe459ae8636d279a7bc3621b26fb01e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:93:e4:e3:4e:0a:f8:a7:b4:66:59:6b:cb:
                    99:cc:08:84:e8:64:36:3e:03:b2:e8:f7:6b:de:39:
                    40:10:d4:d0:9f:6d:42:e2:09:44:c9:13:cf:73:84:
                    c3:a6:cc:38:ab:ad:97:c5:b6:8e:d4:cf:3f:64:9b:
                    7c:e1:60:ac:13:be:21:9a:2f:58:62:b6:7f:e4:31:
                    1c:de:7a:24:44:af:1e:9a:95:af:1e:d3:83:3e:fb:
                    f0:01:dd:0d:c9:90:24:c8:81:25:83:5f:a8:6e:b9:
                    c4:33:56:7b:ae:64:e7:5e:c7:40:8e:48:8a:4a:02:
                    ab:d5:01:2c:c1:a3:8e:51:8b:ef:56:a4:73:c4:45:
                    bb:dd:6d:87:d2:aa:24:29:ac:39:36:42:a7:20:c6:
                    b5:87:58:c4:7f:4c:a8:71:21:45:1c:a0:6c:0b:1c:
                    15:85:9f:53:e5:af:5d:3b:fa:de:d7:78:d1:6a:1b:
                    7b:c2:b7:66:92:8e:c6:da:dc:ee:75:ff:7b:9b:c9:
                    5c:84:99:50:ce:bf:f4:bb:f9:1e:22:ba:e0:52:62:
                    06:a3:4a:c3:2d:9a:16:c1:61:07:99:1d:d3:e1:21:
                    e3:57:3e:32:77:42:a8:e5:30:0a:f9:16:15:42:19:
                    12:35:c6:43:3f:ee:c8:08:ee:81:98:83:df:da:46:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:01:EE:AB:E4:59:AE:86:36:D2:79:A7:BC:36:21:B2:6F:B0:1E:87
            X509v3 Authority Key Identifier:
                keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:19:a6:d8:3e:07:e2:a0:6e:97:ad:e9:c2:9b:fd:35:5d:a7:
         86:05:ee:a2:d6:40:1c:13:c7:80:f6:5a:4d:75:3c:12:2a:09:
         6a:51:f3:6d:fc:36:37:f8:fc:98:60:54:45:61:3b:e9:30:53:
         9d:46:a1:57:0e:95:d0:3a:5e:4b:eb:9f:52:9f:0e:7d:cf:0e:
         13:62:8d:f4:e0:1f:e7:92:b1:4e:1e:31:a9:84:a0:2b:eb:cf:
         7d:e1:18:3a:9a:e1:8c:3c:1a:d2:22:d0:af:78:9c:22:02:9a:
         af:ce:ce:7c:a2:d4:7c:52:48:2b:a8:d5:4b:d2:10:21:7f:a1:
         2f:4f:ec:a2:32:b7:af:d9:30:29:59:0d:69:f6:56:8a:b4:c4:
         18:8d:07:9a:27:f3:7c:e7:59:81:b1:39:c3:e5:f9:1d:d3:a9:
         ab:1c:e4:ed:1e:72:38:c2:96:c3:78:92:77:f7:96:95:44:e0:
         5a:1a:af:0c:13:ff:3d:d9:5a:cb:1b:16:27:5c:27:ef:00:d5:
         6e:93:49:7a:4d:7e:f8:c8:c7:c5:dd:50:76:5b:e9:f2:8d:e6:
         04:24:db:27:60:31:5a:7e:d1:4c:1e:82:ea:c2:04:b9:64:ac:
         f3:44:a2:11:8f:98:82:bf:70:9d:b0:5b:28:a5:c0:de:1d:78:
         c9:bc:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:36 2026 by rpki-client