Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
File:                     meoF_mActoAa-DeT4GP3njlA8DA.mft (raw, json)
Hash identifier:          RYG8xnJzJsN3jsnZJOw4Se8/hJ6aLqLYHX9DdgmMQ2I=
Subject key identifier:   94:B1:88:B0:3E:B4:AA:59:DB:1D:19:7E:C9:B2:FC:96:70:87:6B:09
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Certificate issuer:       /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial:       019FAA50DBFA7C38BBC73383E261F031C4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
Manifest number:          07D5
Signing time:             Tue 28 Jul 2026 20:00:53 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:53 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:53 +0000
Files and hashes:         1: meoF_mActoAa-DeT4GP3njlA8DA.crl (hash: xsThhy737DCGe3FmbPxIN55lfia4ctNLj+CUWEZ5D8E=)
                          2: yALd4Mt6HE3dj2c5xLfJcrGYWWo.roa (hash: 1lKxwhNATkAVqpc77ycYRa96oFT/1GMPUZCkZLj7654=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:db:fa:7c:38:bb:c7:33:83:e2:61:f0:31:c4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
        Validity
            Not Before: Jul 28 20:00:53 2026 GMT
            Not After : Jul 29 20:00:53 2026 GMT
        Subject: CN=94b188b03eb4aa59db1d197ec9b2fc9670876b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:c6:bf:b3:c3:da:44:00:e6:89:86:9a:26:
                    e9:b9:fa:5a:21:a3:17:84:01:48:24:42:c8:9a:7a:
                    25:55:f7:b5:fd:d1:d0:c3:ed:3c:11:39:ac:9b:ac:
                    f8:46:4d:72:2b:c3:fb:16:66:65:f8:d2:52:bb:fc:
                    e7:b2:72:8a:4f:29:42:fa:d5:9b:99:72:16:40:6b:
                    36:c1:e8:f8:a8:20:d1:59:e6:90:92:3e:2f:fd:5f:
                    b8:ff:0f:d2:0d:c0:4b:dc:2e:0a:01:a0:84:cc:8e:
                    ef:0a:10:e9:2c:46:ab:b4:88:a7:66:c9:c9:ec:59:
                    cb:dd:e6:2d:54:19:4d:ee:8b:d2:90:4b:55:59:ff:
                    fd:13:62:02:9c:80:6b:74:bd:7a:36:40:17:87:1f:
                    03:71:d9:87:c9:0d:71:b0:0b:84:7f:a9:7c:1f:76:
                    b9:b0:ed:fa:ad:82:83:c6:e6:7f:79:02:0d:cb:28:
                    39:3c:f3:f2:ab:bb:df:1b:9f:7d:19:85:b0:5b:af:
                    c1:f3:4d:22:40:61:bb:92:ee:66:ef:3c:61:2e:35:
                    01:19:e8:94:70:36:7e:35:89:76:94:d6:b6:8c:aa:
                    8f:66:5b:a0:48:59:68:e2:b4:08:19:57:69:63:64:
                    7d:52:e5:38:eb:9d:f1:ee:c4:67:9d:9a:28:fe:20:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B1:88:B0:3E:B4:AA:59:DB:1D:19:7E:C9:B2:FC:96:70:87:6B:09
            X509v3 Authority Key Identifier:
                keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:15:1d:c2:2f:e1:b5:a1:2e:e3:92:0d:26:a9:67:f6:e1:61:
         ea:ee:7c:8f:62:93:84:11:15:72:b2:ce:2f:ae:fe:ab:36:67:
         5e:c8:ec:a2:c2:9f:bf:a2:6a:93:53:1e:7b:66:cd:4d:01:6a:
         d7:e9:6d:86:ba:d5:f4:48:ca:1c:74:86:11:2c:bc:06:a4:85:
         ad:be:5d:1b:ce:24:d6:86:0d:d6:c0:fe:08:9d:b0:ab:92:62:
         ce:e6:b3:b4:ce:7a:e6:cc:ef:ba:6b:16:f9:b6:65:8c:0a:33:
         e7:9a:b5:cd:f9:4c:2e:a7:d2:39:ef:db:01:9b:2b:25:d0:9e:
         80:4c:bd:21:61:05:f6:91:5a:ed:3e:eb:3e:28:d6:c2:9c:28:
         27:b9:ad:9e:de:d9:40:60:3b:75:3d:f9:7e:d9:d8:82:a3:cf:
         bf:67:8a:df:f8:8c:f7:5c:fc:e5:db:6c:3c:01:28:14:f4:61:
         6e:60:54:df:dd:a6:e0:74:da:83:b2:c2:39:79:72:3c:c1:a5:
         28:22:cc:f2:30:c0:1c:00:ee:e4:50:5e:53:4d:8e:87:b1:2b:
         d5:86:05:5f:20:1a:35:17:ff:8a:0d:e6:66:46:fb:5e:b5:ed:
         c4:e9:15:09:ee:42:36:58:57:9c:dd:55:7e:03:02:bc:89:99:
         0c:83:a4:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUNv6fDi7xzOD4mHwMcTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZWEwNWZlNjAxY2I2ODAxYWY4Mzc5M2UwNjNmNzllMzk0
MGYwMzAwHhcNMjYwNzI4MjAwMDUzWhcNMjYwNzI5MjAwMDUzWjAzMTEwLwYDVQQD
Eyg5NGIxODhiMDNlYjRhYTU5ZGIxZDE5N2VjOWIyZmM5NjcwODc2YjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWrGv7PD2kQA5omGmibpufpaIaMX
hAFIJELImnolVfe1/dHQw+08ETmsm6z4Rk1yK8P7FmZl+NJSu/znsnKKTylC+tWb
mXIWQGs2wej4qCDRWeaQkj4v/V+4/w/SDcBL3C4KAaCEzI7vChDpLEartIinZsnJ
7FnL3eYtVBlN7ovSkEtVWf/9E2ICnIBrdL16NkAXhx8DcdmHyQ1xsAuEf6l8H3a5
sO36rYKDxuZ/eQINyyg5PPPyq7vfG599GYWwW6/B800iQGG7ku5m7zxhLjUBGeiU
cDZ+NYl2lNa2jKqPZlugSFlo4rQIGVdpY2R9UuU4653x7sRnnZoo/iD0+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSxiLA+tKpZ2x0Zfsmy/JZwh2sJMB8GA1UdIwQY
MBaAFJnqBf5gHLaAGvg3k+Bj9545QPAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzBhNjktZTQ0Yy00OGRhLWI3NjMt
MzdjZmQ0YTY0ZmYxLzEvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85YzBhNjktZTQ0Yy00OGRhLWI3NjMtMzdjZmQ0YTY0ZmYx
LzEvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBUdwi/h
taEu45INJqln9uFh6u58j2KThBEVcrLOL67+qzZnXsjsosKfv6Jqk1Mee2bNTQFq
1+lthrrV9EjKHHSGESy8BqSFrb5dG84k1oYN1sD+CJ2wq5JizuaztM565szvumsW
+bZljAoz55q1zflMLqfSOe/bAZsrJdCegEy9IWEF9pFa7T7rPijWwpwoJ7mtnt7Z
QGA7dT35ftnYgqPPv2eK3/iM91z85dtsPAEoFPRhbmBU392m4HTag7LCOXlyPMGl
KCLM8jDAHADu5FBeU02Oh7Er1YYFXyAaNRf/ig3mZkb7XrXtxOkVCe5CNlhXnN1V
fgMCvImZDIOkAg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:18:13 2026 by rpki-client