Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          GBGeGJXQntwvJJyDdthFWWnhIfZa1NnNZt1iJPGezuY=
Subject key identifier:   5D:41:50:20:D9:08:99:76:0D:C9:26:06:D1:A3:4B:56:0A:10:B8:AB
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       019DA3AF1D04FEB80D55BC694CF8B47ED7AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          19A7
Signing time:             Sun 19 Apr 2026 03:00:55 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:55 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:55 +0000
Files and hashes:         1: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: 6Nnvq1VHh8+GGCGE2pqPLffYtc6OO80URzb751zrbks=)
                          2: 9_qzaYR-EszIpBxI4ownqBBUFGw.roa (hash: VhzjhZWKdSpMHocreuG2Si0iTaWmN7K1sjii56hPLwc=)
                          3: KjzZQ3XHTR1E4K2w5QoidTvxCog.roa (hash: 0FtQ/w38a9SAPO2B+4vZGc9BxQRkeEmmddcJQ1zQ63s=)
                          4: PdBo5LYrW3mTEROFtgvAOtWJw7o.roa (hash: FthkQ7lp8mIcRsIs/VRf4z45qSoRaUz1xKUgBE6qdA4=)
                          5: QOp6ldZ4aq2zfMPYvuOeV0oKmeY.roa (hash: 8YOvlrB9urinWAqeR4fd1zgfcxdDnYVPoOrAJi9cHqo=)
                          6: YuD6mYeegaW9d29Ci66BL3l4jWw.roa (hash: cYyPCH7nR9uMcm/IXKU1fKBDvQZmREUlYnB22XhXA1A=)
                          7: ZwzMVBy8CQGi7dgiJsUSKeT8HE8.roa (hash: HVOk+Ojs9E5CX5Y8X8rj+E4fOAQU89YrUSU3IEVB5kU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:1d:04:fe:b8:0d:55:bc:69:4c:f8:b4:7e:d7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Apr 19 03:00:55 2026 GMT
            Not After : Apr 20 03:00:55 2026 GMT
        Subject: CN=5d415020d90899760dc92606d1a34b560a10b8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:bb:a9:2a:88:d1:cc:c6:f1:06:96:9e:8b:
                    cd:e2:0d:ac:cf:a0:4e:85:dc:e1:e2:95:23:99:26:
                    b6:62:c4:c8:36:24:60:a9:79:a1:e5:94:d2:b6:fb:
                    a5:4c:97:ee:2f:e6:25:85:72:4a:a3:69:a7:df:bd:
                    f1:d6:7f:9e:0f:17:ed:43:4d:1b:55:65:a3:d2:da:
                    23:79:0c:a4:0c:48:24:66:35:17:99:77:23:18:a9:
                    50:66:50:0d:30:a8:e5:3c:f5:35:a7:7c:8f:51:2c:
                    11:4b:fe:ab:88:74:54:65:1d:ac:df:a7:e5:67:3a:
                    20:40:0c:c7:20:5c:e9:03:ec:de:3c:26:1e:00:07:
                    90:2d:80:6a:5d:dd:12:2d:21:37:da:17:c6:27:31:
                    17:6c:c4:a3:52:3f:c0:0d:3a:3f:1b:6c:48:57:9c:
                    08:3e:35:dd:79:1e:b1:3a:cc:59:00:01:5f:e3:13:
                    6e:89:22:ce:38:f8:dd:5e:c5:c3:04:a0:57:58:5c:
                    b9:4f:63:a0:42:38:34:d6:34:2b:53:5c:f3:85:5c:
                    98:39:17:44:f9:dd:be:e9:de:79:27:a6:19:9e:65:
                    4a:46:cc:e7:dd:fa:7c:83:bc:b1:fe:4f:d5:f4:ba:
                    81:5e:5b:47:35:78:0a:58:48:15:a2:96:18:1b:b2:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:41:50:20:D9:08:99:76:0D:C9:26:06:D1:A3:4B:56:0A:10:B8:AB
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:1c:29:d0:81:29:19:65:d1:f6:07:05:cf:a4:f7:45:6a:
         c4:ec:e1:e8:25:0c:0e:39:5d:6f:f5:dd:3e:4e:05:07:d0:2c:
         0e:8a:cb:7b:64:c6:d9:41:01:9d:ec:e4:78:42:9d:bb:4c:d2:
         0b:11:e2:e6:7d:6d:eb:37:ac:92:60:af:cc:77:c4:80:53:62:
         ad:30:e8:d6:81:e0:28:6d:d3:e4:89:33:d1:33:2f:36:3e:31:
         21:e7:bb:40:64:14:a5:34:35:23:4c:b8:78:36:2f:aa:61:ec:
         50:64:81:97:30:78:ce:1a:d2:47:7a:99:7d:1c:92:04:b4:c0:
         6f:d2:c0:b8:7d:d0:f0:b6:02:0b:21:83:91:1a:43:07:34:90:
         2d:15:04:7b:fe:93:b4:6b:eb:ef:89:65:7b:c7:c8:ef:91:1a:
         2d:c4:ef:62:5a:f0:ae:4e:10:3d:3a:25:2c:52:24:50:09:6a:
         a2:1b:52:83:86:7c:ed:36:54:3e:3e:6b:03:8f:a8:4e:8f:5f:
         e1:e3:e2:9f:06:12:c4:cb:88:19:6d:5c:54:2c:5d:08:8c:2b:
         74:14:81:83:dc:78:aa:ff:f1:a5:bf:30:6b:ba:7a:c8:42:d3:
         68:4a:1c:67:25:a8:99:b9:1a:a8:52:f5:80:b6:23:0f:fc:3c:
         f8:85:38:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrx0E/rgNVbxpTPi0fteuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGJhODgyNGM1YzhkMjA3MzI2YTRhM2FiODkzZWJiOGY1
MDk2YWQwHhcNMjYwNDE5MDMwMDU1WhcNMjYwNDIwMDMwMDU1WjAzMTEwLwYDVQQD
Eyg1ZDQxNTAyMGQ5MDg5OTc2MGRjOTI2MDZkMWEzNGI1NjBhMTBiOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26y7qSqI0czG8QaWnovN4g2sz6BO
hdzh4pUjmSa2YsTINiRgqXmh5ZTStvulTJfuL+YlhXJKo2mn373x1n+eDxftQ00b
VWWj0tojeQykDEgkZjUXmXcjGKlQZlANMKjlPPU1p3yPUSwRS/6riHRUZR2s36fl
ZzogQAzHIFzpA+zePCYeAAeQLYBqXd0SLSE32hfGJzEXbMSjUj/ADTo/G2xIV5wI
PjXdeR6xOsxZAAFf4xNuiSLOOPjdXsXDBKBXWFy5T2OgQjg01jQrU1zzhVyYORdE
+d2+6d55J6YZnmVKRszn3fp8g7yx/k/V9LqBXltHNXgKWEgVopYYG7Ih7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1BUCDZCJl2DckmBtGjS1YKELirMB8GA1UdIwQY
MBaAFO6LqIJMXI0gcyako6uJPruPUJatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQt
ZWVjZDI4ZTI4ZTM1LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQtZWVjZDI4ZTI4ZTM1
LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXF0cKdCB
KRll0fYHBc+k90VqxOzh6CUMDjldb/XdPk4FB9AsDorLe2TG2UEBnezkeEKdu0zS
CxHi5n1t6zeskmCvzHfEgFNirTDo1oHgKG3T5Ikz0TMvNj4xIee7QGQUpTQ1I0y4
eDYvqmHsUGSBlzB4zhrSR3qZfRySBLTAb9LAuH3Q8LYCCyGDkRpDBzSQLRUEe/6T
tGvr74lle8fI75EaLcTvYlrwrk4QPTolLFIkUAlqohtSg4Z87TZUPj5rA4+oTo9f
4ePinwYSxMuIGW1cVCxdCIwrdBSBg9x4qv/xpb8wa7p6yELTaEocZyWombkaqFL1
gLYjD/w8+IU4yw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:41 2026 by rpki-client