Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.mft
File:                     fC6U3c5WbZQYOLO8nI6KTznS2kY.mft (raw, json)
Hash identifier:          HC6NeSQYT/K6rfVlF+18FjczGPsrWy0WNikHkVvclas=
Subject key identifier:   99:3B:8D:FD:86:F3:36:33:D2:10:3B:86:5F:B0:6D:DB:00:BC:41:4B
Authority key identifier: 7C:2E:94:DD:CE:56:6D:94:18:38:B3:BC:9C:8E:8A:4F:39:D2:DA:46
Certificate issuer:       /CN=7c2e94ddce566d941838b3bc9c8e8a4f39d2da46
Certificate serial:       019F916C646159C0F556247BE827DEF80C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:27 +0000
Files and hashes:         1: RbKa2MdNi93D_SEy5mldBBAr_6g.roa (hash: DDJFavU8WXwXwFIv80Na6ws8lwRCdKbzrxmE+FCif5A=)
                          2: dt41VRR0PimlyEtWKgjp_m1sl-g.roa (hash: 16MrU0DSxLQHXUU2OJhLiN+r8bslnZH9TQbw0Ga0zUI=)
                          3: e-6WXKXLQVlkp0ljw3-7_Gg6uio.roa (hash: S6VlyRH7fM9NTvjzG86Y+tooHinHAMFIUhEMOhAuGwE=)
                          4: fC6U3c5WbZQYOLO8nI6KTznS2kY.crl (hash: TipLRS1KdF14QxoWgH4Zd844m82r61hwO+zbVWzDFM4=)
                          5: ka7W9UnzjUtfbTLhv4L5SXSWuG8.roa (hash: R2oha/fcFPb0epOdgrfmn0UI+snTa7+8DEeVd1/ufjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:64:61:59:c0:f5:56:24:7b:e8:27:de:f8:0c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2e94ddce566d941838b3bc9c8e8a4f39d2da46
        Validity
            Not Before: Jul 24 00:00:27 2026 GMT
            Not After : Jul 25 00:00:27 2026 GMT
        Subject: CN=993b8dfd86f33633d2103b865fb06ddb00bc414b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:48:29:06:74:de:c7:df:14:b8:b5:b1:f2:
                    ed:43:15:30:80:44:b3:e2:ed:e0:a5:8e:44:02:c8:
                    0e:66:ba:2c:74:9e:27:76:72:70:fc:66:03:b2:1d:
                    29:d2:0e:6c:b5:c6:64:ce:e9:ed:00:01:0b:00:88:
                    70:2f:86:bd:94:47:2b:65:06:5a:7a:8d:5a:5f:35:
                    d4:59:ec:8f:f9:72:c8:2e:7f:8e:8c:45:60:79:ec:
                    04:85:a4:f1:d8:bb:e0:37:65:02:2a:ca:0b:84:20:
                    67:f9:49:12:9a:af:e3:4c:a2:6a:9c:eb:4d:6e:1d:
                    47:81:75:fc:36:8f:a5:28:e5:1c:ef:69:b6:2d:65:
                    34:67:10:40:de:05:d1:be:66:0a:e6:05:47:ab:fc:
                    e8:0c:90:06:61:13:e0:86:2a:14:c7:d5:49:16:6b:
                    e6:6d:0e:3d:84:31:e3:b1:4a:d0:19:0e:5c:7c:ce:
                    97:69:17:83:a5:8f:b0:b1:5f:22:8a:d7:65:b8:a7:
                    ed:59:47:54:d2:76:1b:0a:9e:eb:51:57:c4:3c:01:
                    ec:2a:a5:0f:de:e4:3c:51:1b:ac:9f:d4:e2:54:ad:
                    02:da:df:3a:41:5c:db:7f:61:02:3c:8c:92:4b:0c:
                    bb:21:ee:95:09:58:ce:70:d9:0c:1d:59:5b:ee:39:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3B:8D:FD:86:F3:36:33:D2:10:3B:86:5F:B0:6D:DB:00:BC:41:4B
            X509v3 Authority Key Identifier:
                keyid:7C:2E:94:DD:CE:56:6D:94:18:38:B3:BC:9C:8E:8A:4F:39:D2:DA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:37:8c:dc:f4:90:bd:47:a3:67:fb:5b:65:e9:24:94:d7:79:
         4f:1d:c8:07:e8:a2:71:8c:88:b1:25:6b:cd:06:75:b9:70:30:
         0e:8d:1a:16:aa:99:36:fe:8f:ac:53:7b:f9:13:e5:89:42:91:
         1a:db:d6:7f:04:a4:12:b1:25:30:e1:59:47:c5:82:cf:1a:17:
         2d:99:23:8e:f5:b6:29:f5:50:9a:4b:f9:e4:8e:ba:87:8c:94:
         55:80:8d:25:de:3d:82:b2:b6:65:eb:19:e5:a6:0c:85:c6:a1:
         92:bc:94:09:28:fb:fc:31:18:52:a1:4b:bd:98:bb:f8:8c:e2:
         da:cc:de:0b:09:2f:61:b6:fb:d6:58:8c:6f:5d:10:f2:45:d1:
         1d:29:72:00:25:3d:fe:09:f5:31:bb:56:82:b3:b1:c9:03:a7:
         3c:d5:84:34:d5:be:e9:36:90:9e:d4:be:55:39:80:15:b0:62:
         f6:04:20:08:e6:e4:bb:cb:e3:7f:49:fb:78:ea:f4:51:39:b3:
         05:04:e6:49:a0:fd:91:31:02:af:c2:02:c4:33:99:5a:77:79:
         b9:4e:b1:ed:c8:ce:fd:0f:f4:19:93:c8:75:35:00:49:e5:fa:
         22:e2:2c:2d:0f:e3:f4:d6:36:45:26:c3:cc:eb:cd:ae:e5:e6:
         48:06:ce:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbGRhWcD1ViR76Cfe+AyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMmU5NGRkY2U1NjZkOTQxODM4YjNiYzljOGU4YTRmMzlk
MmRhNDYwHhcNMjYwNzI0MDAwMDI3WhcNMjYwNzI1MDAwMDI3WjAzMTEwLwYDVQQD
Eyg5OTNiOGRmZDg2ZjMzNjMzZDIxMDNiODY1ZmIwNmRkYjAwYmM0MTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuddIKQZ03sffFLi1sfLtQxUwgESz
4u3gpY5EAsgOZrosdJ4ndnJw/GYDsh0p0g5stcZkzuntAAELAIhwL4a9lEcrZQZa
eo1aXzXUWeyP+XLILn+OjEVgeewEhaTx2LvgN2UCKsoLhCBn+UkSmq/jTKJqnOtN
bh1HgXX8No+lKOUc72m2LWU0ZxBA3gXRvmYK5gVHq/zoDJAGYRPghioUx9VJFmvm
bQ49hDHjsUrQGQ5cfM6XaReDpY+wsV8iitdluKftWUdU0nYbCp7rUVfEPAHsKqUP
3uQ8URusn9TiVK0C2t86QVzbf2ECPIySSwy7Ie6VCVjOcNkMHVlb7jnCHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk7jf2G8zYz0hA7hl+wbdsAvEFLMB8GA1UdIwQY
MBaAFHwulN3OVm2UGDizvJyOik850tpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkM2VTNjNVdiWlFZT0xPOG5JNktUem5TMmtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt
M2M3ZTRmOTNlNDJiLzEvZkM2VTNjNVdiWlFZT0xPOG5JNktUem5TMmtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi
LzEvZkM2VTNjNVdiWlFZT0xPOG5JNktUem5TMmtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzeM3PSQ
vUejZ/tbZekklNd5Tx3IB+iicYyIsSVrzQZ1uXAwDo0aFqqZNv6PrFN7+RPliUKR
GtvWfwSkErElMOFZR8WCzxoXLZkjjvW2KfVQmkv55I66h4yUVYCNJd49grK2ZesZ
5aYMhcahkryUCSj7/DEYUqFLvZi7+Izi2szeCwkvYbb71liMb10Q8kXRHSlyACU9
/gn1MbtWgrOxyQOnPNWENNW+6TaQntS+VTmAFbBi9gQgCObku8vjf0n7eOr0UTmz
BQTmSaD9kTECr8ICxDOZWnd5uU6x7cjO/Q/0GZPIdTUASeX6IuIsLQ/j9NY2RSbD
zOvNruXmSAbOtA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:41 2026 by rpki-client