Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File:                     uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier:          W0fj57PKJp3OaaniGPtgRIQhDMxlM9X/qh2Lp2wp6gg=
Subject key identifier:   5A:59:BA:60:21:15:E8:53:09:A3:BE:6D:AC:6A:55:F7:71:59:19:77
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer:       /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial:       019F909083C646CD8D6A9DD109DE24EA6DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 20:00:17 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:17 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:17 +0000
Files and hashes:         1: FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa (hash: V6ldsVa/sdoxhFtU1dGezva/tghG5qZAguTA3/NtrDw=)
                          2: YG_wDFENOqVU5myZSFJwFFRQIGo.roa (hash: IKdcIVVEkC9wFm1DM+wG6bBK4y8HgYiZDQKQ7434QC4=)
                          3: lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa (hash: DSGrSvYMDlk724DBlB7/WGTLaoZcHPiH4iyTmdQidKM=)
                          4: m-OAweDj7IYWvNC6YulzJlZP2oY.roa (hash: SiV8TM2QfFlhSK0UqbnB7bWFP5VUqLMFVQELQm9ocug=)
                          5: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: Fu+gAq6AKzymcLPNQc5MaVIgVgsICp2dX5U5JZ59iAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:83:c6:46:cd:8d:6a:9d:d1:09:de:24:ea:6d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
        Validity
            Not Before: Jul 23 20:00:17 2026 GMT
            Not After : Jul 24 20:00:17 2026 GMT
        Subject: CN=5a59ba602115e85309a3be6dac6a55f771591977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:b0:bd:f3:48:fe:67:b3:de:83:6b:c2:79:
                    ca:8b:99:ae:ea:c5:d9:1e:07:4f:75:b9:61:cc:09:
                    c4:4b:6a:1d:ca:e5:1a:ce:ba:a4:75:7d:35:03:a1:
                    fb:a4:45:95:9f:23:67:b6:36:5c:2c:ad:fb:99:84:
                    7c:b5:51:d9:19:a3:9e:3d:59:73:37:c6:7b:8f:68:
                    09:0b:59:22:9f:c5:18:e2:42:a7:d6:3f:d6:c9:ff:
                    ab:73:1c:9a:9f:3f:fe:63:41:a5:e7:80:3b:11:9d:
                    18:71:24:51:f0:9f:3f:08:d2:dc:fb:aa:7f:d7:91:
                    0f:bc:a8:ab:27:40:d0:4d:75:59:09:0f:a8:f4:bc:
                    e8:7d:48:25:ce:f1:a2:63:38:92:82:82:b5:2f:eb:
                    2c:f5:23:37:18:82:b6:29:fe:a7:3f:15:44:76:e3:
                    c5:4c:97:0d:ec:3d:ee:51:fa:ab:9a:f3:c7:27:70:
                    aa:49:98:9a:71:f5:e9:e3:33:c7:fd:3a:6c:54:2e:
                    94:da:8e:95:33:01:85:6e:4c:10:fb:58:d0:0c:8a:
                    45:70:d7:98:02:6a:bd:bc:23:77:a2:2d:1d:33:4f:
                    d2:24:4d:0e:b6:52:3c:b7:69:65:04:bf:8f:42:20:
                    00:06:44:bb:10:e3:da:ef:4e:a2:43:f7:13:46:a1:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:59:BA:60:21:15:E8:53:09:A3:BE:6D:AC:6A:55:F7:71:59:19:77
            X509v3 Authority Key Identifier:
                keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1e:f2:48:48:92:52:a8:7d:0a:95:97:0d:3a:aa:aa:4b:86:
         d3:0e:30:76:cb:54:90:04:9c:88:5f:ac:ce:1f:ee:bf:95:36:
         69:2c:a9:4c:f0:4c:ce:9d:01:9a:a8:b8:e1:52:7b:5a:fe:e0:
         17:e4:e2:17:fe:43:67:8b:1d:7e:50:38:bf:7e:28:34:b9:19:
         09:46:cc:a7:b9:6c:37:e8:2b:0e:09:9b:93:8c:b0:25:45:b3:
         20:88:70:cf:44:4b:41:14:69:15:bb:dc:ac:93:88:09:95:ee:
         27:c7:cc:e6:6b:59:f0:79:e1:db:59:f5:3b:d5:c7:d3:ed:75:
         cb:58:5c:65:18:b0:87:b6:04:ed:8a:ec:c9:cf:90:9f:da:bf:
         b7:a5:3b:bf:2c:61:b7:1d:2e:02:ed:3e:d6:ab:35:d5:04:91:
         a7:44:24:e7:03:a8:57:53:e4:8a:6f:2b:ca:06:7f:ca:79:5e:
         ed:e5:7b:0c:d5:48:18:1d:fc:2d:29:03:db:f6:47:97:ed:e4:
         99:9a:4b:f1:f8:41:a9:16:9d:bf:9d:a8:4b:15:e8:28:ee:ec:
         bd:e8:1c:49:ec:33:67:51:0e:bf:c7:7f:4b:fb:f2:03:8c:18:
         9c:c9:2e:55:9c:dd:b2:5a:f3:80:34:30:8b:10:b9:56:db:e4:
         eb:e4:5c:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkIPGRs2Nap3RCd4k6m3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx
MjA2Y2UwHhcNMjYwNzIzMjAwMDE3WhcNMjYwNzI0MjAwMDE3WjAzMTEwLwYDVQQD
Eyg1YTU5YmE2MDIxMTVlODUzMDlhM2JlNmRhYzZhNTVmNzcxNTkxOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0iwvfNI/mez3oNrwnnKi5mu6sXZ
HgdPdblhzAnES2odyuUazrqkdX01A6H7pEWVnyNntjZcLK37mYR8tVHZGaOePVlz
N8Z7j2gJC1kin8UY4kKn1j/Wyf+rcxyanz/+Y0Gl54A7EZ0YcSRR8J8/CNLc+6p/
15EPvKirJ0DQTXVZCQ+o9LzofUglzvGiYziSgoK1L+ss9SM3GIK2Kf6nPxVEduPF
TJcN7D3uUfqrmvPHJ3CqSZiacfXp4zPH/TpsVC6U2o6VMwGFbkwQ+1jQDIpFcNeY
Amq9vCN3oi0dM0/SJE0OtlI8t2llBL+PQiAABkS7EOPa706iQ/cTRqFvfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpZumAhFehTCaO+baxqVfdxWRl3MB8GA1UdIwQY
MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt
NDc1ZGJiYjBjMDhjLzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj
LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASB7ySEiS
Uqh9CpWXDTqqqkuG0w4wdstUkASciF+szh/uv5U2aSypTPBMzp0Bmqi44VJ7Wv7g
F+TiF/5DZ4sdflA4v34oNLkZCUbMp7lsN+grDgmbk4ywJUWzIIhwz0RLQRRpFbvc
rJOICZXuJ8fM5mtZ8Hnh21n1O9XH0+11y1hcZRiwh7YE7Yrsyc+Qn9q/t6U7vyxh
tx0uAu0+1qs11QSRp0Qk5wOoV1Pkim8rygZ/ynle7eV7DNVIGB38LSkD2/ZHl+3k
mZpL8fhBqRadv52oSxXoKO7svegcSewzZ1EOv8d/S/vyA4wYnMkuVZzdslrzgDQw
ixC5Vtvk6+RcMA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:49 2026 by rpki-client