Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File:                     4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier:          qEFNwhiz0OHiINHIYGAy6duomAiN8jW3pm9Q7yRrl/8=
Subject key identifier:   A1:5D:06:C6:DC:4E:FA:8E:F3:91:E5:61:60:1C:28:13:30:12:8F:33
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer:       /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial:       019F8FB5B63E997972D90353FAE46CC6F7D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number:          19D7
Signing time:             Thu 23 Jul 2026 16:01:18 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:18 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:18 +0000
Files and hashes:         1: 3qwG3xPSfwa0YxOj5FJBzoydLoM.roa (hash: V1GEjUt4Eq1OKBUX6efcLjByQeBfNaO1ln7hfsoEcr8=)
                          2: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 3Mzap5Gmk33najEs/nuG1c/MrzmnNPJk/i4TH1WT4pc=)
                          3: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=)
                          4: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=)
                          5: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=)
                          6: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=)
                          7: VUMNA6zRqMDbJLH8n7Dv0wu3Yj8.roa (hash: JF7LReHN5tEwtuDy7Vt1DvkFsxPQcE6Wq6RuqABJqP8=)
                          8: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=)
                          9: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=)
                          10: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:b6:3e:99:79:72:d9:03:53:fa:e4:6c:c6:f7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
        Validity
            Not Before: Jul 23 16:01:18 2026 GMT
            Not After : Jul 24 16:01:18 2026 GMT
        Subject: CN=a15d06c6dc4efa8ef391e561601c281330128f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:7a:92:e4:a0:d7:b1:29:42:4f:19:ba:0d:
                    99:53:9e:61:ad:22:df:9a:c3:4a:0a:2f:8e:46:ce:
                    da:3f:c4:d7:5d:a9:03:d7:28:3f:6c:ad:e5:07:69:
                    d1:01:1e:ac:03:44:57:b1:00:53:45:70:72:67:6c:
                    9e:c1:08:f2:0d:b8:0f:96:b7:81:87:08:4b:74:f8:
                    b4:96:c9:f0:9c:dc:cf:e5:73:12:1a:00:a8:37:b2:
                    e2:4a:a3:2f:bd:bf:c8:12:ef:e7:92:47:27:96:2d:
                    b7:95:56:27:2d:df:ea:b2:07:5d:27:f8:ac:75:d8:
                    de:a7:f6:18:68:63:a6:6b:ba:89:5d:20:c7:44:7f:
                    7e:3f:12:68:7b:51:0d:e2:9c:e6:6a:3e:9f:60:e9:
                    e7:f5:c4:cd:91:9a:6a:39:14:f6:a2:9e:e5:c1:07:
                    eb:16:0b:71:d5:ce:00:c1:26:73:ae:bd:6a:02:6d:
                    57:02:85:01:11:c6:94:82:a6:f4:47:67:bf:73:08:
                    ca:23:9a:f0:dd:89:30:f3:fe:d5:9a:7f:09:03:98:
                    0a:ae:22:80:6a:e7:de:18:15:0b:25:3b:c2:f4:1b:
                    2a:9e:b4:f3:58:f3:52:fc:46:d8:6b:b3:63:68:f4:
                    05:65:81:0a:e4:f5:e5:ab:7c:09:2c:fd:16:09:fb:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5D:06:C6:DC:4E:FA:8E:F3:91:E5:61:60:1C:28:13:30:12:8F:33
            X509v3 Authority Key Identifier:
                keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b5:1b:09:22:bb:f3:e0:b1:40:d9:e7:83:a3:34:d0:51:4c:
         d7:20:7d:94:87:ba:bb:90:eb:1f:db:cf:84:28:e5:d2:b2:6e:
         ee:15:5c:29:c7:87:80:9e:41:96:ce:7d:b0:e3:2b:2f:d1:09:
         22:9f:b9:e5:ba:63:f4:63:1e:6b:fe:a2:17:e5:09:87:1f:76:
         6b:bf:37:e7:57:ae:d2:af:7f:ee:5e:90:44:04:99:af:10:1d:
         45:3d:94:f1:44:6d:c9:b8:28:05:0f:90:75:44:16:ca:df:e3:
         c1:e7:fd:f0:4d:27:e8:45:eb:e3:16:56:70:8d:fb:ac:7e:46:
         f6:f2:b9:d6:e2:44:a1:ad:d9:3b:f9:b9:5d:f3:88:7b:52:96:
         10:83:32:9c:f0:49:32:f7:e6:23:f0:5e:61:df:f2:4d:37:a9:
         99:76:cc:3f:fb:6c:d5:f7:44:8a:bd:ea:10:6b:16:7c:2f:df:
         2f:94:bd:d2:fe:5c:d9:b0:29:36:3b:95:c8:ea:95:ea:64:03:
         43:da:17:d3:75:6d:4c:93:d4:8e:a2:5d:e2:a1:25:d4:f6:40:
         38:ce:b2:18:b3:87:bd:f2:38:1f:fb:2b:1e:07:54:5b:25:55:
         0b:8a:bc:e6:f3:d9:c6:93:68:c1:2b:3c:8a:b1:5f:7e:a5:b9:
         fc:5e:0e:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtbY+mXly2QNT+uRsxvfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz
ZDNmNDYwHhcNMjYwNzIzMTYwMTE4WhcNMjYwNzI0MTYwMTE4WjAzMTEwLwYDVQQD
EyhhMTVkMDZjNmRjNGVmYThlZjM5MWU1NjE2MDFjMjgxMzMwMTI4ZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNF6kuSg17EpQk8Zug2ZU55hrSLf
msNKCi+ORs7aP8TXXakD1yg/bK3lB2nRAR6sA0RXsQBTRXByZ2yewQjyDbgPlreB
hwhLdPi0lsnwnNzP5XMSGgCoN7LiSqMvvb/IEu/nkkcnli23lVYnLd/qsgddJ/is
ddjep/YYaGOma7qJXSDHRH9+PxJoe1EN4pzmaj6fYOnn9cTNkZpqORT2op7lwQfr
Fgtx1c4AwSZzrr1qAm1XAoUBEcaUgqb0R2e/cwjKI5rw3Ykw8/7Vmn8JA5gKriKA
aufeGBULJTvC9BsqnrTzWPNS/EbYa7NjaPQFZYEK5PXlq3wJLP0WCfsSQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFdBsbcTvqO85HlYWAcKBMwEo8zMB8GA1UdIwQY
MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt
Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx
LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLUbCSK7
8+CxQNnng6M00FFM1yB9lIe6u5DrH9vPhCjl0rJu7hVcKceHgJ5Bls59sOMrL9EJ
Ip+55bpj9GMea/6iF+UJhx92a78351eu0q9/7l6QRASZrxAdRT2U8URtybgoBQ+Q
dUQWyt/jwef98E0n6EXr4xZWcI37rH5G9vK51uJEoa3ZO/m5XfOIe1KWEIMynPBJ
MvfmI/BeYd/yTTepmXbMP/ts1fdEir3qEGsWfC/fL5S90v5c2bApNjuVyOqV6mQD
Q9oX03VtTJPUjqJd4qEl1PZAOM6yGLOHvfI4H/srHgdUWyVVC4q85vPZxpNowSs8
irFffqW5/F4OMw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:27 2026 by rpki-client