Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
File:                     p0xnBuP769_xRqihTsKjKEqSumI.mft (raw, json)
Hash identifier:          Kb9NQGOzqP4N3kgjM7tX58HpsALA+cflOF4YieCnWz4=
Subject key identifier:   70:2B:24:E3:16:92:F7:2C:4B:71:B4:C5:66:6C:92:5C:38:E2:AE:BD
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Certificate issuer:       /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial:       019F9323E2F64AF77B074D2C425A48C05BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
Manifest number:          1932
Signing time:             Fri 24 Jul 2026 08:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:30 +0000
Files and hashes:         1: 4dIwW5at7FQWoB7Bcz_6uYRfLtw.roa (hash: mQop19T4ncECxQq+Z6Yf4kaQ7YiJVsFd1/CEXYQ60hs=)
                          2: Z9r0mo-cvy5UdKpZcBAx03n3nPo.roa (hash: Aqw8lxJKzRJWghSFPMzx3T1KZ7+I/RcC+00vjuoBl7w=)
                          3: apMckl_x5LcdR_beZIyAo4rk0Dk.roa (hash: I5Qds8uqRDqOxfiCNxdxJVvfewu9+/A3Y6nbRWgkwZ4=)
                          4: egNs0fvR0rvTeNy38L9Ly5HNBxw.roa (hash: n+9hTIbfmjtYB8IlfS0V4nQrh2GVHp+ZwL3oJyr2kwA=)
                          5: p0xnBuP769_xRqihTsKjKEqSumI.crl (hash: GsKjZgGTsLLbjzNDjTCPe7r1q8eacv3JLf8NxNqxTuI=)
                          6: tjw3CCsnBBLU1y3bKSuU8GAeu3o.roa (hash: 3Zet0K9hWLK6IRYOUnQC2wta7J6aQdy6xd+8jE8VWBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:e2:f6:4a:f7:7b:07:4d:2c:42:5a:48:c0:5b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
        Validity
            Not Before: Jul 24 08:00:30 2026 GMT
            Not After : Jul 25 08:00:30 2026 GMT
        Subject: CN=702b24e31692f72c4b71b4c5666c925c38e2aebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:23:4e:33:d5:01:e6:48:1c:b4:fd:a3:96:1e:
                    f2:93:c9:87:bb:32:7e:08:bb:a0:f9:f0:df:5a:d1:
                    5f:4e:e9:8f:91:98:f2:5d:c9:bf:97:a9:9a:d8:b5:
                    66:da:98:a9:b4:69:bc:ef:d2:3e:7b:16:ec:23:0b:
                    19:85:33:02:57:1f:2d:80:af:b0:44:eb:73:b2:56:
                    8d:c2:57:19:28:68:5d:a3:76:a1:22:c1:13:44:fc:
                    a5:ea:26:63:8b:03:62:a1:b5:ca:30:9d:f1:89:46:
                    7a:e1:59:de:41:18:4a:10:c3:ba:a1:be:39:52:5a:
                    14:93:12:cd:8c:e6:72:1e:ca:42:3e:50:fc:a8:b7:
                    84:d3:18:35:0f:cc:4b:13:e5:cb:6f:c8:27:96:03:
                    f2:75:8c:79:a8:f3:e9:ce:99:4c:7e:6a:96:a6:3b:
                    f5:2a:05:3c:9d:da:8c:7a:4b:d4:17:16:fc:a5:82:
                    41:fa:e2:e5:2f:b2:ac:9a:ae:ad:5e:6e:0d:87:c5:
                    e5:4e:0d:7d:e1:26:ed:1b:ae:f2:4f:7e:73:d8:92:
                    c4:aa:6f:95:a0:52:46:e9:b8:7c:e1:5d:c3:b8:d6:
                    20:7e:e6:45:40:ba:28:27:5f:04:9b:97:a4:4a:1e:
                    e2:6a:74:a2:a9:bc:d9:ef:96:36:2f:fa:3b:dc:19:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2B:24:E3:16:92:F7:2C:4B:71:B4:C5:66:6C:92:5C:38:E2:AE:BD
            X509v3 Authority Key Identifier:
                keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:91:e6:80:2e:72:22:b1:05:fd:53:76:6f:cc:11:dc:0b:7c:
         60:4f:b0:1d:3a:9a:b7:1e:dd:70:0f:66:4b:8c:fc:0a:7c:9f:
         f6:bf:fc:9d:39:21:4b:5a:f1:08:0f:f8:71:62:fd:9d:e7:b5:
         93:b2:3f:fb:e2:87:4b:6c:c3:70:52:18:5b:0c:0c:52:3a:ec:
         22:51:f1:07:7b:d4:a1:4e:a9:c4:64:ec:2d:0e:8d:88:fd:ee:
         d3:c3:2c:0e:65:13:70:7d:56:d6:96:bf:85:78:da:38:f6:ef:
         76:c9:49:c7:bc:3e:00:94:07:da:da:93:d0:01:6e:ef:3f:47:
         4d:e1:62:a5:30:14:5e:ee:ac:91:48:ab:df:8a:44:a9:23:c9:
         d2:2d:1e:27:66:f5:4e:9e:e0:36:fe:96:dc:f3:bf:c1:c9:ac:
         47:84:34:3d:85:50:a7:63:08:0c:80:b3:3a:51:f0:78:79:98:
         1b:52:1d:da:1c:43:80:bb:a2:1f:31:ab:ff:26:69:ce:bd:f9:
         f4:ae:45:fb:b0:6e:c6:cc:1c:d8:65:d9:1e:7c:d6:e4:ff:f5:
         8c:01:90:57:b8:80:5e:df:24:fc:37:97:37:d5:17:c9:6d:1e:
         31:b5:db:f9:66:ca:a9:0c:1a:bd:4c:c9:84:cc:12:60:96:33:
         93:f2:6f:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI+L2Svd7B00sQlpIwFvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NGM2NzA2ZTNmYmViZGZmMTQ2YThhMTRlYzJhMzI4NGE5
MmJhNjIwHhcNMjYwNzI0MDgwMDMwWhcNMjYwNzI1MDgwMDMwWjAzMTEwLwYDVQQD
Eyg3MDJiMjRlMzE2OTJmNzJjNGI3MWI0YzU2NjZjOTI1YzM4ZTJhZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCNOM9UB5kgctP2jlh7yk8mHuzJ+
CLug+fDfWtFfTumPkZjyXcm/l6ma2LVm2piptGm879I+exbsIwsZhTMCVx8tgK+w
ROtzslaNwlcZKGhdo3ahIsETRPyl6iZjiwNiobXKMJ3xiUZ64VneQRhKEMO6ob45
UloUkxLNjOZyHspCPlD8qLeE0xg1D8xLE+XLb8gnlgPydYx5qPPpzplMfmqWpjv1
KgU8ndqMekvUFxb8pYJB+uLlL7Ksmq6tXm4Nh8XlTg194SbtG67yT35z2JLEqm+V
oFJG6bh84V3DuNYgfuZFQLooJ18Em5ekSh7ianSiqbzZ75Y2L/o73BkdGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHArJOMWkvcsS3G0xWZsklw44q69MB8GA1UdIwQY
MBaAFKdMZwbj++vf8UaooU7CoyhKkrpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjIt
YWE3ODhhNDIwYWVjLzEvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjItYWE3ODhhNDIwYWVj
LzEvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJHmgC5y
IrEF/VN2b8wR3At8YE+wHTqatx7dcA9mS4z8Cnyf9r/8nTkhS1rxCA/4cWL9nee1
k7I/++KHS2zDcFIYWwwMUjrsIlHxB3vUoU6pxGTsLQ6NiP3u08MsDmUTcH1W1pa/
hXjaOPbvdslJx7w+AJQH2tqT0AFu7z9HTeFipTAUXu6skUir34pEqSPJ0i0eJ2b1
Tp7gNv6W3PO/wcmsR4Q0PYVQp2MIDICzOlHweHmYG1Id2hxDgLuiHzGr/yZpzr35
9K5F+7Buxswc2GXZHnzW5P/1jAGQV7iAXt8k/DeXN9UXyW0eMbXb+WbKqQwavUzJ
hMwSYJYzk/JvyQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:10 2026 by rpki-client