Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
File:                     bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json)
Hash identifier:          VpEnkDgD5Obp1yZSL1mljhxU+AeXPAGREKDkc+6uwaY=
Subject key identifier:   64:D3:CB:AC:AD:98:63:F8:E4:CE:13:F7:1C:A3:81:31:40:DC:F9:41
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Certificate issuer:       /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial:       019F92110F898091929CF7981DDA551CF8B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
Manifest number:          18E2
Signing time:             Fri 24 Jul 2026 03:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:19 +0000
Files and hashes:         1: 8TeZpbl_qus5n0g90QhzhZotgWI.roa (hash: jS66+I6BTf47/f9YsHIptnfwhsFPalQW0oQ6WBC3rB0=)
                          2: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=)
                          3: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=)
                          4: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=)
                          5: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=)
                          6: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=)
                          7: EfWuRA4xuDAvflS5tv0JhzSei28.roa (hash: SAzMnIbvWnao7wpDdbRqrdkwbQWMAO6Jj0G8Oc5qkbI=)
                          8: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=)
                          9: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=)
                          10: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=)
                          11: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=)
                          12: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=)
                          13: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: oHGLkH3/gVBXeXx2CDBUkcTuRoltQ+5TVJshQGFNy3Q=)
                          14: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=)
                          15: lQ5I1RQhBLo7oEEMwItGQL1D4co.roa (hash: JsbTSCE7CBEzvAaKOwDU8edPgIOKQAAWgiGQC/UlKpg=)
                          16: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=)
                          17: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=)
                          18: u_DOEx2r_J3BkCywvogfeZZkNpA.roa (hash: oEGf5LtDawHz/AlzF45DhMZpwO1j9J3oHupUypQDU5Q=)
                          19: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=)
                          20: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:0f:89:80:91:92:9c:f7:98:1d:da:55:1c:f8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
        Validity
            Not Before: Jul 24 03:00:19 2026 GMT
            Not After : Jul 25 03:00:19 2026 GMT
        Subject: CN=64d3cbacad9863f8e4ce13f71ca3813140dcf941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:aa:27:ba:64:25:2d:16:2d:e9:30:c6:d6:
                    5d:26:af:6b:8e:68:7b:38:bb:a0:7d:a5:70:32:f3:
                    0d:ba:e7:9e:c3:c6:9b:97:a2:d5:a4:90:cd:9b:09:
                    04:20:cb:56:e3:c5:e0:3c:31:64:a5:a3:d4:de:04:
                    10:d8:06:2b:43:a6:f4:f3:fe:21:4e:e1:18:dd:7a:
                    6e:03:1b:97:89:81:2a:0f:a2:5d:38:20:ad:5c:a6:
                    78:30:63:d4:36:78:fc:64:72:d1:cf:d8:c9:67:66:
                    d8:9d:fc:a9:4e:a4:f1:d0:44:ad:e7:82:40:17:60:
                    75:bf:1f:2d:b7:7c:00:12:6f:81:e6:93:04:60:d7:
                    60:29:7c:25:78:71:fb:69:fd:43:99:4b:4c:78:74:
                    3e:95:f2:ca:84:64:b0:8a:9e:44:b4:19:22:04:58:
                    32:3c:51:76:69:3c:84:96:84:90:d8:68:96:90:40:
                    9d:a7:7b:ef:d3:dc:26:1f:3c:dc:41:1f:60:53:c4:
                    1c:68:d6:74:cb:34:40:8a:55:c1:89:f3:d3:67:21:
                    ad:74:97:cf:a3:68:c9:51:98:b9:49:cb:b8:5c:d6:
                    45:a1:9d:0d:a4:03:6d:7f:9d:c8:95:d4:44:94:e6:
                    c6:29:e9:08:94:90:2d:c6:d8:92:c5:90:af:bb:b3:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D3:CB:AC:AD:98:63:F8:E4:CE:13:F7:1C:A3:81:31:40:DC:F9:41
            X509v3 Authority Key Identifier:
                keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cc:3c:99:24:e4:c2:e0:02:17:b9:9e:92:d1:13:0e:e7:cb:
         90:e7:fc:08:af:27:9f:4f:f5:cb:14:f8:09:23:25:52:04:c4:
         94:b2:1b:3d:1c:ea:f5:2a:23:41:f0:8c:f5:be:9f:f9:2f:23:
         8e:e2:0f:8c:81:71:65:84:40:7d:9f:f6:32:90:7e:e6:a5:d9:
         67:b6:76:5e:62:09:c8:f2:a3:88:d3:4e:33:b2:38:e0:b4:eb:
         ac:28:ed:35:52:e7:07:6c:4b:fb:e2:6b:f9:9a:e3:9c:5f:3d:
         6f:2f:65:25:dd:4d:2e:d6:d4:e3:9e:6e:85:41:5c:7b:4a:0c:
         55:a9:8d:32:fa:48:96:7f:b7:f9:ee:04:c0:ee:89:94:60:00:
         ca:f5:82:00:7e:25:14:63:cf:a7:ed:64:ca:bb:35:3d:91:75:
         7b:3d:be:04:8f:c7:4c:bc:2d:ca:ed:56:a3:dd:1e:00:82:25:
         2f:05:b7:03:20:b4:a7:1c:20:d8:64:09:8b:f4:73:07:c4:58:
         9c:ec:f6:45:60:31:26:96:06:0f:3d:71:8e:f6:a5:8e:86:09:
         2f:2d:1e:44:68:a1:b0:59:bd:27:89:4f:8a:54:f2:b0:7e:bf:
         ef:29:a6:83:40:a8:ac:aa:24:89:83:3a:ab:1b:78:18:ac:a2:
         90:75:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:39:56 2026 by rpki-client