Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
File:                     _MziomuQk8lrKlzN3XA0u1zgEvw.mft (raw, json)
Hash identifier:          A8NJNa8TT0HDoL2g/v0TSeVtaZqyk29oilTdTnEc9CM=
Subject key identifier:   5D:CD:CD:17:4B:65:84:AD:C4:42:D9:0B:38:CD:4A:A0:61:5A:D6:BC
Authority key identifier: FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC
Certificate issuer:       /CN=fccce2a26b9093c96b2a5ccddd7034bb5ce012fc
Certificate serial:       019FAC766C7E3563EB316155114A7CFF1FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:09 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:09 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:09 +0000
Files and hashes:         1: SFuwL9n2ykHG8Q1bG2zh3J3rMY8.roa (hash: MQYGYdS73ZtBvhBLN7sM94ounBVaM1F31AdoiiH3acc=)
                          2: _MziomuQk8lrKlzN3XA0u1zgEvw.crl (hash: AIb/dxC2hRROnu52H9gMZTel5X5n+to8hxj5Z4IvsdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:6c:7e:35:63:eb:31:61:55:11:4a:7c:ff:1f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccce2a26b9093c96b2a5ccddd7034bb5ce012fc
        Validity
            Not Before: Jul 29 06:01:09 2026 GMT
            Not After : Jul 30 06:01:09 2026 GMT
        Subject: CN=5dcdcd174b6584adc442d90b38cd4aa0615ad6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1a:dc:7c:84:1c:86:4d:fb:85:3f:0e:f4:b5:
                    42:d2:4a:fa:d5:73:0d:c3:e6:90:42:26:83:fd:19:
                    ce:f9:4b:fe:39:9a:07:dd:7b:ca:d2:f0:ec:26:39:
                    4d:d4:d9:9b:67:d6:1c:39:88:7a:26:97:45:0d:74:
                    cf:34:61:09:5b:2a:94:86:52:03:10:43:89:3f:66:
                    a2:cb:8a:71:e1:5c:05:15:cb:8b:59:31:1d:b0:00:
                    46:ec:0b:0d:11:fb:49:2f:03:7b:c6:cd:dc:94:e8:
                    d9:01:22:c1:00:f9:d7:06:a0:06:38:d9:22:4d:ee:
                    6d:d8:5a:2f:46:0f:0a:63:df:40:db:cb:9b:9f:1f:
                    1e:7c:4d:eb:21:96:79:08:15:fa:53:5a:16:79:88:
                    88:b4:73:59:05:20:6e:d8:5a:d1:6e:69:77:25:68:
                    ed:8e:66:89:d8:8d:84:98:93:08:ed:b0:b3:7e:7a:
                    2e:46:4e:8e:88:30:5e:a2:87:3f:fd:22:97:f5:cd:
                    46:d8:a3:9b:a6:fd:d6:fa:5f:54:0f:47:4f:ba:9e:
                    b1:01:9c:2f:ad:77:11:28:73:e8:0e:2e:8f:ab:16:
                    4f:10:bd:e6:3a:e5:49:03:1a:c6:cd:ea:c9:f0:9c:
                    ae:5d:16:76:c7:2a:3f:2c:bb:8c:95:27:2c:2f:d1:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CD:CD:17:4B:65:84:AD:C4:42:D9:0B:38:CD:4A:A0:61:5A:D6:BC
            X509v3 Authority Key Identifier:
                keyid:FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f0:a9:25:3b:64:04:01:bc:34:49:84:c2:44:e9:d1:5a:e4:
         1f:07:a5:1e:71:6a:f3:a4:d0:0e:cc:6f:b3:5b:08:5c:0e:90:
         f9:17:23:6e:dc:c5:70:b6:14:0c:a6:e5:db:36:c8:20:b0:42:
         39:2f:a9:6b:d5:b9:4f:8c:51:7c:35:a6:68:9d:51:b0:b8:08:
         fe:cd:e4:ef:da:c4:53:4a:dd:7b:32:0c:50:ac:b3:ca:ed:9c:
         5c:c1:a7:e7:2c:db:8d:8a:d9:a1:ef:af:4b:84:a3:f1:96:6d:
         b9:dd:e4:5b:3d:3b:f2:ba:d8:5d:ed:2c:9b:9c:93:0b:85:65:
         d0:95:7f:58:c1:a5:dd:da:a9:ca:b8:e5:3b:79:61:c3:b1:00:
         2a:5e:ea:a4:a1:f7:5e:1e:31:3f:b9:95:80:13:47:95:d2:38:
         cf:91:13:9f:73:3c:9b:f5:31:fd:93:f9:46:f6:83:16:7c:70:
         73:ee:8b:d2:10:75:96:c2:f2:8f:cb:cb:45:04:73:41:9d:23:
         96:c9:ee:64:92:fd:97:09:3e:46:2c:cd:c7:09:04:52:09:8d:
         ce:46:82:06:7c:d4:6b:c9:67:46:3c:f5:ff:51:f3:9f:54:af:
         23:70:31:9a:05:3b:e2:d1:bc:b6:f3:9d:e1:5b:92:47:9f:c7:
         70:b1:a3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdmx+NWPrMWFVEUp8/x/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjY2NlMmEyNmI5MDkzYzk2YjJhNWNjZGRkNzAzNGJiNWNl
MDEyZmMwHhcNMjYwNzI5MDYwMTA5WhcNMjYwNzMwMDYwMTA5WjAzMTEwLwYDVQQD
Eyg1ZGNkY2QxNzRiNjU4NGFkYzQ0MmQ5MGIzOGNkNGFhMDYxNWFkNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BrcfIQchk37hT8O9LVC0kr61XMN
w+aQQiaD/RnO+Uv+OZoH3XvK0vDsJjlN1NmbZ9YcOYh6JpdFDXTPNGEJWyqUhlID
EEOJP2aiy4px4VwFFcuLWTEdsABG7AsNEftJLwN7xs3clOjZASLBAPnXBqAGONki
Te5t2FovRg8KY99A28ubnx8efE3rIZZ5CBX6U1oWeYiItHNZBSBu2FrRbml3JWjt
jmaJ2I2EmJMI7bCzfnouRk6OiDBeooc//SKX9c1G2KObpv3W+l9UD0dPup6xAZwv
rXcRKHPoDi6PqxZPEL3mOuVJAxrGzerJ8JyuXRZ2xyo/LLuMlScsL9GAQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3NzRdLZYStxELZCzjNSqBhWta8MB8GA1UdIwQY
MBaAFPzM4qJrkJPJaypczd1wNLtc4BL8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX016aW9tdVFrOGxyS2x6TjNYQTB1MXpnRXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZWUyYWItMDdkOS00YTgxLWFiZjAt
ZTBlNGJlNjY5NmY5LzEvX016aW9tdVFrOGxyS2x6TjNYQTB1MXpnRXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZWUyYWItMDdkOS00YTgxLWFiZjAtZTBlNGJlNjY5NmY5
LzEvX016aW9tdVFrOGxyS2x6TjNYQTB1MXpnRXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/CpJTtk
BAG8NEmEwkTp0VrkHwelHnFq86TQDsxvs1sIXA6Q+RcjbtzFcLYUDKbl2zbIILBC
OS+pa9W5T4xRfDWmaJ1RsLgI/s3k79rEU0rdezIMUKyzyu2cXMGn5yzbjYrZoe+v
S4Sj8ZZtud3kWz078rrYXe0sm5yTC4Vl0JV/WMGl3dqpyrjlO3lhw7EAKl7qpKH3
Xh4xP7mVgBNHldI4z5ETn3M8m/Ux/ZP5RvaDFnxwc+6L0hB1lsLyj8vLRQRzQZ0j
lsnuZJL9lwk+RizNxwkEUgmNzkaCBnzUa8lnRjz1/1Hzn1SvI3AxmgU74tG8tvOd
4VuSR5/HcLGjzQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:07:20 2026 by rpki-client