Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File:                     aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier:          Bxsh1eJK8Kj44XtqF3zywj9XTnWf6NyUiJmp96LhfPQ=
Subject key identifier:   18:40:26:7E:5F:EB:39:6B:F0:73:4D:DE:95:63:1A:39:C7:57:A7:C1
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer:       /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial:       019F91A3E4B1E8E6186255EC36C7F5889278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 01:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:04 +0000
Files and hashes:         1: CbnygaBWTQeTgxo7VtHoGSI5Wjo.roa (hash: YABN8P02IK4MPeY+oFxkFQxQ2hLyZWLZEaI6zjoc+IM=)
                          2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: 9IZtj/cTll5sM/sdlFB274bVCvJRE2bDP5VfnsNE4Iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:e4:b1:e8:e6:18:62:55:ec:36:c7:f5:88:92:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
        Validity
            Not Before: Jul 24 01:01:04 2026 GMT
            Not After : Jul 25 01:01:04 2026 GMT
        Subject: CN=1840267e5feb396bf0734dde95631a39c757a7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ef:ee:81:7e:24:3f:dd:29:c2:98:0c:80:ba:
                    e1:34:2a:b7:7d:f4:38:91:b8:b5:44:ff:f9:fb:58:
                    b4:b9:85:04:42:7a:9d:2a:c8:c6:9f:e7:ff:4a:0f:
                    04:9e:98:bc:82:0c:2c:95:ad:8c:e2:d9:ec:af:13:
                    02:87:7d:d2:75:63:57:84:2c:6b:05:5d:53:85:eb:
                    a8:27:eb:d2:bc:2e:20:f1:de:9f:6a:25:50:51:b5:
                    56:f5:26:e5:ae:fa:15:44:b1:14:f2:42:cb:ff:cf:
                    a6:d4:f3:d6:da:bd:36:3f:61:a9:a2:d6:6c:ac:ad:
                    af:6e:07:af:43:4a:5d:e3:2b:24:55:22:b6:98:d7:
                    79:75:e6:30:d3:48:0f:77:a6:b5:29:2b:b4:07:a4:
                    e7:68:0b:82:4e:91:c0:22:6a:c8:0c:c5:65:2e:6c:
                    07:32:89:14:4e:27:34:0b:4e:be:ae:06:7a:9e:68:
                    7b:5d:7b:e8:ef:27:0b:a1:d9:0c:60:a3:b1:ab:ae:
                    1a:dd:e6:6d:0e:04:60:67:49:19:e2:9f:3e:55:a4:
                    d4:91:60:ef:3f:61:9a:7f:5d:d8:39:e7:b5:74:1a:
                    bb:a9:7b:ee:3f:9b:61:6f:c8:e1:c7:aa:cb:cc:b7:
                    9c:3c:eb:b0:27:7c:3f:9a:28:15:b3:52:62:08:77:
                    32:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:40:26:7E:5F:EB:39:6B:F0:73:4D:DE:95:63:1A:39:C7:57:A7:C1
            X509v3 Authority Key Identifier:
                keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:97:69:86:07:c5:3b:27:f3:9a:2c:ad:07:21:a9:d4:98:31:
         26:23:f4:51:5f:69:0e:cc:df:4a:b2:a8:0d:6c:dd:32:c0:07:
         48:ee:be:9c:4c:69:c9:80:3a:3d:28:98:7d:dc:21:2d:f7:c5:
         27:76:1b:67:5c:89:7e:30:dd:7a:86:94:51:80:08:9e:f6:8e:
         0e:5a:ee:11:40:4a:89:fa:16:09:10:dd:7b:d1:b9:88:75:da:
         27:73:f5:4b:d7:a5:4b:bc:9b:09:c2:ec:c6:c4:04:bc:73:c2:
         d6:de:a1:dd:a3:98:14:fa:cf:a8:11:69:b0:f3:65:05:73:2c:
         1c:b4:18:97:22:9f:5b:ff:00:52:81:2a:b1:30:92:6a:a2:3f:
         bb:52:cc:a2:d9:ac:b9:ce:64:0c:36:8d:db:09:bc:00:b6:2b:
         d7:76:cf:5f:6c:a7:56:79:df:94:87:25:6b:db:ee:c5:26:e9:
         72:e8:41:9e:c6:15:59:c5:1d:07:4f:b2:56:ed:c1:3b:0e:44:
         69:c3:b4:93:68:33:22:46:cc:f6:bf:ee:79:05:d5:5c:97:39:
         e3:0a:4f:a2:64:0b:4d:55:a4:fd:60:da:8c:9b:c4:6a:5f:92:
         43:d0:16:eb:01:cf:26:18:9b:0c:2e:f5:7f:83:09:6d:67:38:
         85:cc:df:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro+Sx6OYYYlXsNsf1iJJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGU1MTVjYzViZTRlMjdlOWQzZDEzZTVlMWMxMWRjNzUy
OTI3NGIwHhcNMjYwNzI0MDEwMTA0WhcNMjYwNzI1MDEwMTA0WjAzMTEwLwYDVQQD
EygxODQwMjY3ZTVmZWIzOTZiZjA3MzRkZGU5NTYzMWEzOWM3NTdhN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e/ugX4kP90pwpgMgLrhNCq3ffQ4
kbi1RP/5+1i0uYUEQnqdKsjGn+f/Sg8Enpi8ggwsla2M4tnsrxMCh33SdWNXhCxr
BV1TheuoJ+vSvC4g8d6faiVQUbVW9SblrvoVRLEU8kLL/8+m1PPW2r02P2GpotZs
rK2vbgevQ0pd4yskVSK2mNd5deYw00gPd6a1KSu0B6TnaAuCTpHAImrIDMVlLmwH
MokUTic0C06+rgZ6nmh7XXvo7ycLodkMYKOxq64a3eZtDgRgZ0kZ4p8+VaTUkWDv
P2Gaf13YOee1dBq7qXvuP5thb8jhx6rLzLecPOuwJ3w/migVs1JiCHcycwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhAJn5f6zlr8HNN3pVjGjnHV6fBMB8GA1UdIwQY
MBaAFGlOUVzFvk4n6dPRPl4cEdx1KSdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYt
NTFjNzdjYzQ5MTQ2LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYtNTFjNzdjYzQ5MTQ2
LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZdphgfF
OyfzmiytByGp1JgxJiP0UV9pDszfSrKoDWzdMsAHSO6+nExpyYA6PSiYfdwhLffF
J3YbZ1yJfjDdeoaUUYAInvaODlruEUBKifoWCRDde9G5iHXaJ3P1S9elS7ybCcLs
xsQEvHPC1t6h3aOYFPrPqBFpsPNlBXMsHLQYlyKfW/8AUoEqsTCSaqI/u1LMotms
uc5kDDaN2wm8ALYr13bPX2ynVnnflIcla9vuxSbpcuhBnsYVWcUdB0+yVu3BOw5E
acO0k2gzIkbM9r/ueQXVXJc54wpPomQLTVWk/WDajJvEal+SQ9AW6wHPJhibDC71
f4MJbWc4hczfjw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:18:36 2026 by rpki-client