Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File:                     e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier:          pUBN7fms5gMPWNe9Rppx7m2Ng4HFi8RZabtj7EQpfEU=
Subject key identifier:   2A:B1:EF:A6:D9:33:FA:C9:7B:B2:13:50:0F:D6:8B:56:3F:B3:66:F7
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer:       /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial:       019F93C8F0C9D055456B2749393189F956DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 11:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:47 +0000
Files and hashes:         1: IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa (hash: cDrqltz5JUNSKHmEVA8KR/liv1EQj+DHA9UlbgBwDnc=)
                          2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: r5Ke3qQLznvuEIDlteTH/zVQjKmfuNMhqW0zNrsKJog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:f0:c9:d0:55:45:6b:27:49:39:31:89:f9:56:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
        Validity
            Not Before: Jul 24 11:00:47 2026 GMT
            Not After : Jul 25 11:00:47 2026 GMT
        Subject: CN=2ab1efa6d933fac97bb213500fd68b563fb366f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:f6:2b:11:6d:51:d2:75:b2:f0:a1:2d:b9:
                    30:e7:6d:4a:7f:e8:8c:6e:52:69:43:b1:7f:95:73:
                    ab:07:71:7e:d7:74:d0:3b:d6:ad:9e:f8:d4:25:50:
                    d6:39:ef:c6:71:e3:cb:cf:d8:3c:db:95:d3:80:34:
                    f6:0c:97:80:43:f4:27:51:37:eb:e3:36:bf:09:44:
                    96:e0:b5:b5:0b:5b:97:4b:0b:f7:e5:5d:00:43:bd:
                    d0:53:c9:8c:80:06:7f:2f:fb:62:e5:e3:01:1a:2f:
                    fb:aa:8d:17:9c:27:7a:1c:9f:89:07:11:a9:60:ed:
                    b3:54:68:5d:98:51:11:98:da:94:a0:50:e3:b9:34:
                    26:9a:35:56:42:8c:26:b3:6f:eb:ca:2a:a7:89:45:
                    91:f3:90:3e:dc:49:28:98:3d:ec:91:d0:0e:b1:60:
                    47:4e:1e:c5:41:c6:8c:c8:8b:2e:65:95:d2:47:b3:
                    06:4b:0c:4f:f1:30:de:b0:d5:43:51:d1:7b:29:65:
                    9a:63:9b:a7:49:e5:ff:c7:07:f6:90:52:2e:d5:ba:
                    4d:fa:24:91:24:96:e9:77:b3:92:53:17:5d:4b:ef:
                    7a:c8:b1:1a:64:bd:af:4c:d0:c5:26:48:b1:15:69:
                    39:24:c4:de:fa:e1:ab:5b:ac:08:e8:ce:d7:54:f7:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B1:EF:A6:D9:33:FA:C9:7B:B2:13:50:0F:D6:8B:56:3F:B3:66:F7
            X509v3 Authority Key Identifier:
                keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:42:19:01:65:25:09:ed:4b:ae:c9:66:3e:b1:2f:0e:cd:97:
         7b:dd:6a:f0:a4:68:18:e0:94:19:28:60:61:92:76:e3:2a:ca:
         4c:35:11:86:03:9b:71:2e:24:83:41:a1:5f:ba:ed:d4:0b:cb:
         c2:d5:49:95:a5:7d:9e:ac:e5:f6:35:ce:01:c5:cd:6b:5f:c4:
         2f:ae:ab:38:17:83:b4:6b:2e:34:f9:26:69:14:55:7e:ac:e4:
         a1:e5:6a:c4:4b:7a:b1:d0:22:e6:5d:44:58:28:ff:c9:b3:31:
         35:57:77:f4:69:22:c6:36:d4:97:f6:b7:49:cd:e7:a5:6f:ce:
         e3:53:7e:c8:be:71:16:0d:fd:ba:9f:7e:0d:ee:92:36:c7:24:
         e1:82:89:11:f7:eb:99:2e:59:22:14:7b:2a:84:94:c1:3b:24:
         0b:a1:26:5c:ac:4b:14:33:de:08:bc:e0:30:40:b1:4e:6c:05:
         b0:2b:28:0f:0f:29:9d:bb:40:1c:d9:22:bb:1a:8f:24:36:4e:
         78:0a:66:37:bd:44:08:59:bc:76:23:06:33:ba:a5:9c:e2:12:
         e6:d6:2e:33:9a:98:76:41:cc:85:ab:39:32:d2:39:a8:af:ff:
         3e:69:04:fe:d6:7e:b1:24:f0:c3:a8:e6:42:6c:f6:51:23:64:
         c3:14:35:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyPDJ0FVFaydJOTGJ+VbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTc3MzYyZTMxNDU4NmQwZDIxODg0ZDAxYTg1YWRiNzc2
NjViNzQwHhcNMjYwNzI0MTEwMDQ3WhcNMjYwNzI1MTEwMDQ3WjAzMTEwLwYDVQQD
EygyYWIxZWZhNmQ5MzNmYWM5N2JiMjEzNTAwZmQ2OGI1NjNmYjM2NmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvib2KxFtUdJ1svChLbkw521Kf+iM
blJpQ7F/lXOrB3F+13TQO9atnvjUJVDWOe/GcePLz9g825XTgDT2DJeAQ/QnUTfr
4za/CUSW4LW1C1uXSwv35V0AQ73QU8mMgAZ/L/ti5eMBGi/7qo0XnCd6HJ+JBxGp
YO2zVGhdmFERmNqUoFDjuTQmmjVWQowms2/ryiqniUWR85A+3EkomD3skdAOsWBH
Th7FQcaMyIsuZZXSR7MGSwxP8TDesNVDUdF7KWWaY5unSeX/xwf2kFIu1bpN+iSR
JJbpd7OSUxddS+96yLEaZL2vTNDFJkixFWk5JMTe+uGrW6wI6M7XVPdChwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqx76bZM/rJe7ITUA/Wi1Y/s2b3MB8GA1UdIwQY
MBaAFHunc2LjFFhtDSGITQGoWtt3Zlt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jYTY5OGUtZTZhOC00MWY0LTg2OWMt
OTYxZjQzNzEzNWM2LzEvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jYTY5OGUtZTZhOC00MWY0LTg2OWMtOTYxZjQzNzEzNWM2
LzEvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkIZAWUl
Ce1LrslmPrEvDs2Xe91q8KRoGOCUGShgYZJ24yrKTDURhgObcS4kg0GhX7rt1AvL
wtVJlaV9nqzl9jXOAcXNa1/EL66rOBeDtGsuNPkmaRRVfqzkoeVqxEt6sdAi5l1E
WCj/ybMxNVd39GkixjbUl/a3Sc3npW/O41N+yL5xFg39up9+De6SNsck4YKJEffr
mS5ZIhR7KoSUwTskC6EmXKxLFDPeCLzgMECxTmwFsCsoDw8pnbtAHNkiuxqPJDZO
eApmN71ECFm8diMGM7qlnOIS5tYuM5qYdkHMhas5MtI5qK//PmkE/tZ+sSTww6jm
Qmz2USNkwxQ1+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:36 2026 by rpki-client