Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
File:                     iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft (raw, json)
Hash identifier:          vDPVZT8nyv0sl9Tfd+Vw7E/a9NcT5lIlXphZfBk57dM=
Subject key identifier:   04:16:36:B2:1E:DB:BD:52:BF:5E:F7:1A:CA:50:88:2C:27:70:DD:C5
Authority key identifier: 88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
Certificate issuer:       /CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Certificate serial:       019FAA875ECE27BC5515978011F2177FC78D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
Manifest number:          0487
Signing time:             Tue 28 Jul 2026 21:00:26 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:26 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:26 +0000
Files and hashes:         1: 3IMviFqKeTkgcM4hJ3DCovEJPT4.roa (hash: PJ8bbhBGDwD8QZsH/L9/+WbI+Jn53tual+W0DILWDvw=)
                          2: iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl (hash: VDchcVoL1h/qZ0qmwbUx/8fJwYL0t+EHQZuZzt+poKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:5e:ce:27:bc:55:15:97:80:11:f2:17:7f:c7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885c09522f635fcafa29bcebac72c894e4ffeed2
        Validity
            Not Before: Jul 28 21:00:26 2026 GMT
            Not After : Jul 29 21:00:26 2026 GMT
        Subject: CN=041636b21edbbd52bf5ef71aca50882c2770ddc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:46:7d:2e:06:51:bb:eb:de:4a:3a:1e:52:
                    5e:20:81:42:50:b3:99:2c:89:0e:97:13:54:1f:15:
                    1c:64:91:35:3f:a3:d0:4d:d5:87:74:60:3a:22:8c:
                    b0:84:fc:7a:03:8b:92:55:3d:66:4a:a8:a9:0a:aa:
                    39:4b:a8:15:63:81:05:82:1d:35:a5:28:80:56:f3:
                    f3:ea:dc:ee:f5:56:a1:49:6d:90:a0:0a:e5:f7:8a:
                    73:ed:9e:11:cd:4d:7c:ab:8e:d6:78:9f:78:cc:75:
                    64:d4:ae:1f:3c:c8:b8:80:4e:49:b8:3c:77:8e:ff:
                    e1:1d:90:71:83:df:d9:59:79:46:6e:e2:02:b3:ba:
                    9d:15:51:b4:13:3c:22:9a:48:1f:8f:af:92:92:b6:
                    ef:ef:00:9d:4b:c5:d5:e2:15:4e:50:1d:16:d9:a9:
                    83:f7:75:64:6c:f8:59:08:9c:a7:fa:81:1c:c0:d5:
                    ac:67:44:bc:96:87:54:bc:ab:de:b6:19:19:0a:47:
                    1c:0d:96:1f:2c:19:31:52:34:70:95:20:13:d2:7e:
                    38:9f:47:31:48:d7:7f:e2:03:a1:f5:d5:79:f5:e4:
                    cf:9b:97:65:4f:e6:ab:ec:67:ac:0b:38:5e:24:c5:
                    77:cb:9c:09:5a:0a:c1:a5:17:07:7e:5b:a3:6b:8e:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:16:36:B2:1E:DB:BD:52:BF:5E:F7:1A:CA:50:88:2C:27:70:DD:C5
            X509v3 Authority Key Identifier:
                keyid:88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:be:b1:af:e5:59:61:b0:93:50:ab:6e:69:d3:4b:f3:f3:06:
         26:0d:2e:50:d5:6d:cb:3a:05:44:c7:6e:1b:f2:de:fa:83:ea:
         b2:55:93:bc:dd:60:96:81:7d:58:9c:7e:17:ed:22:18:38:df:
         dc:df:26:a5:b0:e8:d1:de:b5:b5:f1:d1:41:e9:0a:db:e3:c8:
         c8:c7:b4:18:fc:0a:05:1a:1a:bf:b5:73:20:6b:8b:23:91:4c:
         37:f1:71:a4:95:f2:e3:28:aa:e6:0c:99:07:54:29:dc:f6:4f:
         7e:af:bd:a5:4e:53:6a:b5:bd:76:93:4f:54:01:47:a8:22:b5:
         d3:c9:7c:a8:26:71:3c:17:2c:ff:16:31:da:94:36:ed:df:be:
         56:a0:33:73:b2:56:1d:a0:de:7d:c7:d2:05:67:d5:d1:64:22:
         11:11:d6:ce:4d:aa:e2:fe:4e:e1:a1:a8:c6:8c:bf:39:9b:25:
         64:9e:7c:60:41:8b:ba:d8:21:c6:56:36:cd:13:11:d1:19:ca:
         1d:8a:a2:76:14:75:94:ce:e4:d1:d3:08:fa:8f:bd:ce:cf:f0:
         61:44:52:47:bc:0c:48:0e:3a:45:14:46:04:8c:0e:50:24:34:
         e7:ce:d2:5e:dc:d1:8d:77:28:db:56:89:94:19:60:b3:6a:a2:
         f3:41:76:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh17OJ7xVFZeAEfIXf8eNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWMwOTUyMmY2MzVmY2FmYTI5YmNlYmFjNzJjODk0ZTRm
ZmVlZDIwHhcNMjYwNzI4MjEwMDI2WhcNMjYwNzI5MjEwMDI2WjAzMTEwLwYDVQQD
EygwNDE2MzZiMjFlZGJiZDUyYmY1ZWY3MWFjYTUwODgyYzI3NzBkZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jxGfS4GUbvr3ko6HlJeIIFCULOZ
LIkOlxNUHxUcZJE1P6PQTdWHdGA6IoywhPx6A4uSVT1mSqipCqo5S6gVY4EFgh01
pSiAVvPz6tzu9VahSW2QoArl94pz7Z4RzU18q47WeJ94zHVk1K4fPMi4gE5JuDx3
jv/hHZBxg9/ZWXlGbuICs7qdFVG0Ezwimkgfj6+Skrbv7wCdS8XV4hVOUB0W2amD
93VkbPhZCJyn+oEcwNWsZ0S8lodUvKvethkZCkccDZYfLBkxUjRwlSAT0n44n0cx
SNd/4gOh9dV59eTPm5dlT+ar7GesCzheJMV3y5wJWgrBpRcHfluja441BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQWNrIe271Sv173GspQiCwncN3FMB8GA1UdIwQY
MBaAFIhcCVIvY1/K+im866xyyJTk/+7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMDJjMDgtZjMxYi00OGM1LWFkNDct
ZjgzYjhkMDQwODdjLzEvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMDJjMDgtZjMxYi00OGM1LWFkNDctZjgzYjhkMDQwODdj
LzEvaUZ3SlVpOWpYOHI2S2J6cnJITElsT1RfN3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR76xr+VZ
YbCTUKtuadNL8/MGJg0uUNVtyzoFRMduG/Le+oPqslWTvN1gloF9WJx+F+0iGDjf
3N8mpbDo0d61tfHRQekK2+PIyMe0GPwKBRoav7VzIGuLI5FMN/FxpJXy4yiq5gyZ
B1Qp3PZPfq+9pU5TarW9dpNPVAFHqCK108l8qCZxPBcs/xYx2pQ27d++VqAzc7JW
HaDefcfSBWfV0WQiERHWzk2q4v5O4aGoxoy/OZslZJ58YEGLutghxlY2zRMR0RnK
HYqidhR1lM7k0dMI+o+9zs/wYURSR7wMSA46RRRGBIwOUCQ0587SXtzRjXco21aJ
lBlgs2qi80F2lw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:33:25 2026 by rpki-client