Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          JeMJaqCBVTqACsPes4ZWGirF+IpME0u6c4Dau3tc630=
Subject key identifier:   B2:6B:EF:27:F5:26:39:AB:8B:3B:EE:C5:39:EF:86:E9:85:2D:47:16
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       019F92ED30AE1E3C3A67DFCAA4A9A7EF81C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          19F3
Signing time:             Fri 24 Jul 2026 07:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:45 +0000
Files and hashes:         1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
                          2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
                          3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
                          4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: AeteiWW4gK1kHoL7DQmSpwi1c+2DP2DCrMEdcu080EI=)
                          5: I50Xdmc2vD7Yx16IjkscqSWGByc.roa (hash: RDUO+YNn3phd3/QIVNJIvwDgBTmufyoyrH3ITgLGClY=)
                          6: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
                          7: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
                          8: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
                          9: kTXJB6aBHgwhRXUGSGWP3zEgdOI.roa (hash: 4LVFe/ghy7IgD0Awfkn3rJQNGmSBoiii8ZMrwc7Y7FU=)
                          10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:30:ae:1e:3c:3a:67:df:ca:a4:a9:a7:ef:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: Jul 24 07:00:45 2026 GMT
            Not After : Jul 25 07:00:45 2026 GMT
        Subject: CN=b26bef27f52639ab8b3beec539ef86e9852d4716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:35:b9:75:07:f3:df:88:25:4f:9a:18:cb:
                    c2:f6:6a:9f:85:59:34:ab:a9:77:b1:32:39:e8:51:
                    76:3e:21:48:e5:d6:9b:a0:f9:6b:9c:4f:19:27:28:
                    dd:c2:68:87:37:f8:12:7b:e5:6e:f2:1e:63:b9:2c:
                    bf:fa:83:b0:77:35:16:6c:28:08:14:8a:25:c5:42:
                    df:39:08:d9:80:52:c9:99:0b:08:c2:a4:fc:e0:91:
                    cb:1f:7b:db:37:8b:92:68:6d:9b:93:bd:fc:2d:f5:
                    29:25:fd:65:e9:62:63:ed:f8:ec:5a:53:9b:0e:89:
                    d8:5b:07:b6:4b:64:1d:56:4c:ab:c7:cd:72:5a:ed:
                    77:a3:fe:48:41:00:be:88:0e:cb:19:9b:c3:9b:97:
                    c0:e7:63:b1:7c:8c:77:bf:7b:ff:a7:77:08:0f:a9:
                    75:34:8e:e8:2b:7a:8e:3e:f7:c0:47:31:47:81:65:
                    8c:33:63:4e:0a:03:00:8a:56:88:47:d8:f3:e4:a5:
                    18:86:aa:fd:1c:54:6f:bf:dc:3c:10:af:80:75:84:
                    db:54:cb:8f:aa:15:10:34:2b:e4:9e:97:e0:03:58:
                    e0:e6:86:06:c1:bf:e0:c0:81:72:d1:08:d4:09:ca:
                    f1:27:56:26:1b:15:6a:b3:f3:ab:b8:eb:d3:28:7e:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6B:EF:27:F5:26:39:AB:8B:3B:EE:C5:39:EF:86:E9:85:2D:47:16
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:83:04:d8:f2:d6:2b:ee:46:6d:d8:30:e5:79:63:d8:ec:1d:
         0e:61:5d:07:58:17:58:94:7e:55:98:ca:dc:66:51:e6:a4:a9:
         9e:1a:3b:ef:fc:7a:3c:22:47:5b:1e:fa:9a:16:d0:8d:7c:39:
         b6:4e:d5:4d:d7:70:14:43:cc:65:e7:ae:2f:2c:e4:55:80:2f:
         a2:1a:33:3e:c9:67:5a:e8:ce:4d:9c:51:67:42:1d:12:f7:7c:
         67:83:95:58:35:48:cc:5c:16:f4:b8:62:6e:76:16:85:1b:e5:
         4d:57:33:cf:42:ed:50:4c:fb:d6:e1:93:15:48:d7:ea:d9:6b:
         a7:ef:97:f4:9b:0f:9d:5f:6d:e7:4e:16:dc:d2:00:ca:08:e0:
         9a:2f:91:c1:c3:8d:40:10:5a:4e:41:8e:c0:72:19:48:7c:a2:
         a7:01:fb:68:6c:12:fd:dd:f7:16:d6:78:7c:6d:ee:84:02:ac:
         e9:70:40:22:bf:21:77:68:7a:4d:1b:a0:73:38:4a:6a:c0:12:
         48:a3:94:ac:ec:7b:a4:b9:a4:fd:f5:e3:2c:fe:82:70:76:fc:
         bb:47:19:75:1c:d5:b9:5f:b0:75:44:bf:45:35:98:bb:f3:83:
         57:64:02:89:31:58:f0:ef:34:09:c1:40:ba:f8:d8:3b:17:6c:
         47:42:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:05:14 2026 by rpki-client