Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          v++IWmTIvDiA9duytmszyqJrs/9GSlG21tQMzMYCrrs=
Subject key identifier:   95:32:07:EE:BB:74:FA:AF:31:96:C7:E3:7D:92:9D:E5:75:25:E0:49
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       019FA93DB59D433F0A6E6A5D870267EA0572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 15:00:21 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:21 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:21 +0000
Files and hashes:         1: ABBwkEzotHssFvLAUqOqZl36BVo.roa (hash: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: TlbwstF2/RgiqljGYH2TqFeXt8tuUWEdXX4nShcz04U=)
                          3: JxdVQlPabf5FpimKARBZDSKiNxU.roa (hash: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E=)
                          4: dtKfjS2Cx153-9Bxv94dxO25icU.roa (hash: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:b5:9d:43:3f:0a:6e:6a:5d:87:02:67:ea:05:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Jul 28 15:00:21 2026 GMT
            Not After : Jul 29 15:00:21 2026 GMT
        Subject: CN=953207eebb74faaf3196c7e37d929de57525e049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:7d:6d:11:17:9c:87:8a:7e:15:4f:e8:3a:
                    5b:63:d0:bf:75:df:b8:56:26:39:f3:af:7a:97:33:
                    0a:4e:3c:e3:ad:99:48:80:11:15:99:e1:96:74:8f:
                    6a:49:dc:f1:57:29:61:ce:3a:23:06:bf:33:14:d6:
                    27:c1:d9:22:ef:f4:2e:db:38:2c:a9:8b:d6:b3:27:
                    ed:a7:9f:5f:db:60:f9:70:41:7b:f5:8a:fb:42:23:
                    12:e8:8c:b6:92:44:d7:97:57:80:e7:57:6b:c4:5c:
                    0d:f8:e7:c4:61:82:47:0b:a3:1b:72:6b:59:c4:b2:
                    5c:cb:80:38:05:cb:41:41:f6:ba:78:4e:4a:84:e1:
                    da:89:c6:47:cb:8d:06:cb:7f:e5:b4:00:b3:02:ed:
                    88:4a:53:c5:af:da:5f:bb:71:50:87:a2:4e:3d:5f:
                    5e:40:55:66:3f:a6:00:ea:80:5f:9a:1f:70:39:5b:
                    c2:a5:3d:4a:31:0b:2b:32:e3:65:34:84:dd:5b:31:
                    65:67:cf:30:e2:3c:82:b0:07:a4:23:05:92:f3:93:
                    e4:70:b7:94:bc:88:1c:8e:fb:d0:cc:9b:3a:1a:9b:
                    95:5f:56:6d:e2:17:2d:a5:37:dd:55:b1:fe:5e:cf:
                    ba:c5:ac:00:48:08:60:a6:3f:6d:cb:de:80:88:08:
                    82:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:32:07:EE:BB:74:FA:AF:31:96:C7:E3:7D:92:9D:E5:75:25:E0:49
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:3d:2d:ae:94:48:c9:21:00:85:b9:52:29:c3:4b:85:d9:
         f1:37:b3:a2:b2:93:fa:5d:92:51:1e:ed:0e:79:3d:7d:6d:e4:
         17:ac:ee:54:b4:67:d4:d8:0d:c8:d5:ee:62:82:64:02:fd:7e:
         14:05:c5:9f:cb:6e:2e:22:e5:5f:7b:39:47:27:f2:83:8c:c4:
         8f:8e:c5:ec:ec:58:e1:f0:85:80:81:f9:53:4a:84:aa:f0:a5:
         37:e1:14:31:4c:a5:ac:07:3c:cc:a7:c9:b6:29:7c:74:08:e3:
         29:ed:d9:d4:82:ae:59:fc:8c:9b:cc:68:91:a6:90:c1:21:77:
         6a:50:ae:ef:d1:1f:e3:5f:12:9e:8d:5c:65:2f:a4:d5:e6:43:
         1e:8d:16:7b:24:96:80:46:1c:d8:33:51:45:96:f3:e7:be:29:
         b8:7c:f0:c4:59:06:7a:64:2f:82:84:35:36:a7:8b:f2:a0:a2:
         2d:c7:14:8c:8c:5c:fb:1a:fe:36:03:50:ed:f1:12:e6:ac:65:
         f0:de:aa:1a:4c:8a:ec:2c:f8:8d:5b:e1:5b:6d:56:58:18:36:
         55:9a:c3:9e:8d:8f:a9:42:97:78:98:61:a1:4f:2c:c7:d9:39:
         cf:8b:9b:f3:8d:6c:0f:8f:46:d6:ec:4f:51:e9:a8:98:ff:72:
         fe:2c:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:13 2026 by rpki-client