Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
File:                     RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft (raw, json)
Hash identifier:          AufKIViXO1gVtIcH7atgADstX2cyKzivOrQZawah+mU=
Subject key identifier:   C6:D7:FD:AB:67:74:D6:DB:01:E3:9F:E2:F4:69:26:C1:1D:7F:C3:07
Authority key identifier: 46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47
Certificate issuer:       /CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
Certificate serial:       019F916D9D1A7F7D81DBBDB14287CAD0B9F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:01:47 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:47 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:47 +0000
Files and hashes:         1: A3vyQNFZmIIiVEvn821V3LPNqkc.roa (hash: 0mBujLmZOmOPTcByzEM0WftntYdLFr6SGaantjpe9Ko=)
                          2: RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl (hash: w0XvQ1zLgMLLS66pxFx6c73rE+b7/nhqT0WdeF1pH9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 00:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:9d:1a:7f:7d:81:db:bd:b1:42:87:ca:d0:b9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
        Validity
            Not Before: Jul 24 00:01:47 2026 GMT
            Not After : Jul 25 00:01:47 2026 GMT
        Subject: CN=c6d7fdab6774d6db01e39fe2f46926c11d7fc307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:56:3a:dc:f5:fe:7c:82:0f:00:ea:73:61:
                    ec:a4:9a:bc:06:07:22:e1:ce:bb:66:a7:37:a5:ea:
                    8c:8f:a5:ef:e4:5c:90:22:17:98:2b:59:d6:f1:5c:
                    45:9e:49:4f:93:aa:09:f8:dd:2c:0c:54:44:99:2d:
                    5c:04:63:1c:5a:dd:f6:8a:07:33:ef:c9:a6:9b:07:
                    3d:f9:6a:ac:d8:80:42:a2:0d:c2:a2:d2:d6:1d:d8:
                    21:2a:24:0b:33:13:d3:c6:57:73:82:4e:1a:af:53:
                    c7:7e:ee:97:cd:bc:23:bd:37:b7:ba:f3:20:b6:3c:
                    1f:e8:a4:58:b0:bc:ce:b4:63:e0:18:e1:8c:eb:d9:
                    6c:2d:f5:83:82:7b:b5:70:59:a7:9c:e1:42:17:24:
                    6c:83:d3:06:77:71:4d:0b:aa:a2:a3:66:c1:c7:fe:
                    5c:1b:48:09:a6:07:05:ba:4e:da:d2:24:dc:9b:51:
                    85:ec:b8:23:bf:49:44:09:ff:8d:d4:8e:38:53:69:
                    43:d4:4a:0a:f4:f3:44:81:6e:fb:fa:91:3f:fb:7a:
                    d5:c8:ad:8e:36:6b:db:c2:9a:7c:04:ab:bc:a9:bc:
                    c6:74:f2:bd:6f:a3:04:82:47:0a:a8:0e:19:1a:97:
                    f1:26:06:c2:7e:3f:65:77:aa:30:91:16:dd:35:71:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D7:FD:AB:67:74:D6:DB:01:E3:9F:E2:F4:69:26:C1:1D:7F:C3:07
            X509v3 Authority Key Identifier:
                keyid:46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7f:6d:1b:2b:fa:c4:d5:81:09:98:b5:41:15:2f:66:c1:02:
         7d:db:ec:48:5a:7e:87:09:28:93:0e:8e:74:fa:22:21:d0:1b:
         c0:74:09:6c:1e:49:b3:0d:89:f5:aa:76:36:71:73:18:b9:f6:
         ad:b6:07:47:ba:4c:92:3d:6f:45:ec:be:df:d6:75:de:74:97:
         9e:d4:6e:de:9c:70:e3:86:07:ca:2b:41:49:d1:41:73:3a:b2:
         3d:70:a6:96:cd:c7:c1:d6:f4:e6:e3:80:56:c2:56:ed:a5:20:
         8d:09:9d:67:00:b7:b7:45:ca:c2:44:43:3d:54:3b:f3:e8:80:
         61:8b:3b:aa:b1:92:01:a1:32:83:ee:50:34:22:a9:37:e9:db:
         fc:32:79:3d:a4:03:cc:c7:73:7c:fd:d0:1d:11:ce:48:cb:9e:
         26:3d:47:76:01:5d:5e:6c:52:fa:80:ec:f3:cc:10:18:a4:4e:
         c7:77:6b:6e:0b:41:52:cf:26:b9:ad:11:3c:7d:18:d5:fc:57:
         49:b9:f0:e2:72:6f:0e:64:30:60:79:af:76:53:cf:b4:54:c6:
         98:70:eb:d9:6d:09:3f:3f:66:65:e2:85:76:54:a1:09:0c:6d:
         01:9f:21:aa:ad:a2:7a:4e:b2:98:bb:49:b8:8e:eb:83:55:88:
         8d:5a:cc:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbZ0af32B272xQofK0LnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDQzZGE2YWRlNWYyZDIzMzNkZWQ1MmY1ODMxZmJlZDQ4
Y2ZkNDcwHhcNMjYwNzI0MDAwMTQ3WhcNMjYwNzI1MDAwMTQ3WjAzMTEwLwYDVQQD
EyhjNmQ3ZmRhYjY3NzRkNmRiMDFlMzlmZTJmNDY5MjZjMTFkN2ZjMzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQRWOtz1/nyCDwDqc2HspJq8Bgci
4c67Zqc3peqMj6Xv5FyQIheYK1nW8VxFnklPk6oJ+N0sDFREmS1cBGMcWt32igcz
78mmmwc9+Wqs2IBCog3CotLWHdghKiQLMxPTxldzgk4ar1PHfu6XzbwjvTe3uvMg
tjwf6KRYsLzOtGPgGOGM69lsLfWDgnu1cFmnnOFCFyRsg9MGd3FNC6qio2bBx/5c
G0gJpgcFuk7a0iTcm1GF7Lgjv0lECf+N1I44U2lD1EoK9PNEgW77+pE/+3rVyK2O
Nmvbwpp8BKu8qbzGdPK9b6MEgkcKqA4ZGpfxJgbCfj9ld6owkRbdNXG2zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbX/atndNbbAeOf4vRpJsEdf8MHMB8GA1UdIwQY
MBaAFEbUPaat5fLSMz3tUvWDH77UjP1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRROXBxM2w4dEl6UGUxUzlZTWZ2dFNNX1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMt
NmFiMDU1NjhhZGUyLzEvUnRROXBxM2w4dEl6UGUxUzlZTWZ2dFNNX1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMtNmFiMDU1NjhhZGUy
LzEvUnRROXBxM2w4dEl6UGUxUzlZTWZ2dFNNX1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkH9tGyv6
xNWBCZi1QRUvZsECfdvsSFp+hwkokw6OdPoiIdAbwHQJbB5Jsw2J9ap2NnFzGLn2
rbYHR7pMkj1vRey+39Z13nSXntRu3pxw44YHyitBSdFBczqyPXCmls3Hwdb05uOA
VsJW7aUgjQmdZwC3t0XKwkRDPVQ78+iAYYs7qrGSAaEyg+5QNCKpN+nb/DJ5PaQD
zMdzfP3QHRHOSMueJj1HdgFdXmxS+oDs88wQGKROx3drbgtBUs8mua0RPH0Y1fxX
Sbnw4nJvDmQwYHmvdlPPtFTGmHDr2W0JPz9mZeKFdlShCQxtAZ8hqq2iek6ymLtJ
uI7rg1WIjVrM0g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:46 2026 by rpki-client