Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
File:                     g5qaG34R_ed-Th9X_xGGTO4h8WU.mft (raw, json)
Hash identifier:          b0im3lELOYc2lCI/+L57VCiqiFzRN/rV1gk9Tdw/wxY=
Subject key identifier:   3E:34:3B:7C:AF:38:D2:3B:F2:14:2C:96:75:0C:73:72:3C:F6:FD:9D
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Certificate issuer:       /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial:       019F91A391C3B69A810C3D9B8346DA1E6F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 01:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:43 +0000
Files and hashes:         1: g5qaG34R_ed-Th9X_xGGTO4h8WU.crl (hash: MQ0+Mv6cwdREqa90vRtaU+rSVge59veIm4/yym/vmfE=)
                          2: jpn75Yfp2rf8iixY-pf9HBQZtFQ.roa (hash: 2FkfOX5PwPIaVt0unZh3WoxL9QILOq0nkQ+r0zmQiMM=)
                          3: u0rrwecw3ubOxlMWibDzWHGFQeE.roa (hash: PPKjE8PKmukpw4GpWagL0x0PZuUxYtWJ2kQC/cAQIfc=)
                          4: wWxKrvdoWqK7y69DimZbYdEbApE.roa (hash: yfTG7KBZH/Uzc3GBeio5iSYvohaMSnZRgVyybf7lC/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:91:c3:b6:9a:81:0c:3d:9b:83:46:da:1e:6f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
        Validity
            Not Before: Jul 24 01:00:43 2026 GMT
            Not After : Jul 25 01:00:43 2026 GMT
        Subject: CN=3e343b7caf38d23bf2142c96750c73723cf6fd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:98:bf:03:3d:14:19:cc:b1:33:ff:4d:7a:c7:
                    89:84:c4:27:4f:f7:f0:1f:0f:48:17:e0:56:75:c3:
                    03:7f:53:8c:62:84:41:aa:e9:75:6e:59:8d:fe:96:
                    77:29:8e:b5:d9:ad:f6:a9:d0:ff:b5:a1:61:1c:fe:
                    90:5b:d2:99:e8:26:eb:7f:44:e7:1f:2f:f4:f1:eb:
                    06:c1:00:8b:82:4e:d2:dd:56:a9:7a:8e:ab:2b:a1:
                    90:7f:49:ed:e0:a2:f1:b9:53:30:53:2d:2a:47:46:
                    85:92:57:b8:5b:43:05:6b:42:d9:0d:fb:3f:01:49:
                    b0:3a:cf:8d:cd:10:06:83:84:e0:9c:41:cf:28:df:
                    0b:7f:9e:50:04:fc:ab:fb:75:41:e7:61:46:17:2a:
                    83:c4:48:f8:f2:83:e5:c2:64:3a:3c:b3:86:4d:35:
                    35:9c:22:86:ff:35:2c:0e:a0:87:66:46:ed:e0:82:
                    27:e0:71:42:cd:8a:d1:1e:c7:8b:7c:1c:78:3d:be:
                    8f:fc:51:8c:bf:53:1e:7e:63:b0:66:86:e9:57:da:
                    21:ba:93:90:81:06:aa:78:0d:0a:c7:34:ae:c7:af:
                    90:8e:16:21:11:3d:f6:c5:fb:a6:b2:25:ab:37:ec:
                    ff:12:f1:b4:c4:6e:84:72:5f:29:ed:f7:1f:82:93:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:34:3B:7C:AF:38:D2:3B:F2:14:2C:96:75:0C:73:72:3C:F6:FD:9D
            X509v3 Authority Key Identifier:
                keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ba:76:59:80:63:09:9d:d0:9f:63:73:e0:2c:07:18:a5:67:
         03:27:42:72:54:cf:73:b8:5d:76:79:57:53:b4:be:9a:de:75:
         b3:2a:11:d9:1c:31:f3:18:25:cd:12:ff:b8:ca:c9:e3:be:a9:
         dd:e3:17:9b:96:64:4c:24:db:5f:4f:8a:f8:21:e3:08:a9:4b:
         32:67:79:8a:8d:a2:83:f6:b1:84:78:f5:87:7a:73:4e:5c:69:
         fb:43:8a:e5:8c:35:42:1a:51:a3:05:db:46:41:7f:18:b7:bf:
         99:73:83:64:92:f2:0c:22:a4:d8:4e:e0:8a:7b:92:59:9a:d0:
         5e:bf:2d:50:af:0d:3f:3a:1b:00:8b:05:aa:ab:30:a3:bf:a7:
         21:a4:98:6d:9a:dd:50:8d:74:52:7d:ed:6a:c6:72:78:28:7e:
         4f:f9:4e:b4:a3:15:f6:39:16:6f:f5:cf:56:91:b5:d0:4e:59:
         5c:0c:da:40:21:f5:07:8c:75:f6:5c:2f:ce:19:70:d5:c6:9e:
         97:af:98:7a:e2:ee:00:83:39:2a:36:5b:69:7f:9a:42:a7:ce:
         ff:34:23:e3:52:46:21:c9:16:d4:6a:e6:7e:08:f0:00:63:c0:
         a3:90:ed:43:d0:7a:d7:30:fd:09:b9:55:81:3c:43:52:4d:1c:
         be:ad:6e:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro5HDtpqBDD2bg0baHm8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOWE5YTFiN2UxMWZkZTc3ZTRlMWY1N2ZmMTE4NjRjZWUy
MWYxNjUwHhcNMjYwNzI0MDEwMDQzWhcNMjYwNzI1MDEwMDQzWjAzMTEwLwYDVQQD
EygzZTM0M2I3Y2FmMzhkMjNiZjIxNDJjOTY3NTBjNzM3MjNjZjZmZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Ji/Az0UGcyxM/9NeseJhMQnT/fw
Hw9IF+BWdcMDf1OMYoRBqul1blmN/pZ3KY612a32qdD/taFhHP6QW9KZ6Cbrf0Tn
Hy/08esGwQCLgk7S3Vapeo6rK6GQf0nt4KLxuVMwUy0qR0aFkle4W0MFa0LZDfs/
AUmwOs+NzRAGg4TgnEHPKN8Lf55QBPyr+3VB52FGFyqDxEj48oPlwmQ6PLOGTTU1
nCKG/zUsDqCHZkbt4IIn4HFCzYrRHseLfBx4Pb6P/FGMv1MefmOwZobpV9ohupOQ
gQaqeA0KxzSux6+QjhYhET32xfumsiWrN+z/EvG0xG6Ecl8p7fcfgpMGRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD40O3yvONI78hQslnUMc3I89v2dMB8GA1UdIwQY
MBaAFIOamht+Ef3nfk4fV/8RhkzuIfFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVxYUczNFJfZWQtVGg5WF94R0dUTzRoOFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NjdiZDAtYjBlZi00MTE0LWE1OGUt
ZmY4NmJmODgxNjQ4LzEvZzVxYUczNFJfZWQtVGg5WF94R0dUTzRoOFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NjdiZDAtYjBlZi00MTE0LWE1OGUtZmY4NmJmODgxNjQ4
LzEvZzVxYUczNFJfZWQtVGg5WF94R0dUTzRoOFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirp2WYBj
CZ3Qn2Nz4CwHGKVnAydCclTPc7hddnlXU7S+mt51syoR2Rwx8xglzRL/uMrJ476p
3eMXm5ZkTCTbX0+K+CHjCKlLMmd5io2ig/axhHj1h3pzTlxp+0OK5Yw1QhpRowXb
RkF/GLe/mXODZJLyDCKk2E7ginuSWZrQXr8tUK8NPzobAIsFqqswo7+nIaSYbZrd
UI10Un3tasZyeCh+T/lOtKMV9jkWb/XPVpG10E5ZXAzaQCH1B4x19lwvzhlw1cae
l6+YeuLuAIM5KjZbaX+aQqfO/zQj41JGIckW1GrmfgjwAGPAo5DtQ9B61zD9CblV
gTxDUk0cvq1uyg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:15 2026 by rpki-client