Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File:                     b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier:          Yxa348r/pkwbEIfSwaH0YMe4puOpNINA+ngOxeriWoQ=
Subject key identifier:   BA:AD:9C:02:71:4C:E5:76:DB:72:C4:6D:BE:62:04:17:9E:64:16:E6
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer:       /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial:       019F94A46D171AB93B6CB8403E8B59BD5175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number:          10AA
Signing time:             Fri 24 Jul 2026 15:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:31 +0000
Files and hashes:         1: aXJznUL0xUln13cBfkJIhsiborQ.roa (hash: jlyCOLcXpbHCPjdfEeooCCZpqWJT8+78wdU1bfNr7vE=)
                          2: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: jXBZ/E3Jh6pmZwDi6gwUh6pkdDjPHhxB1UosseE9HDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:6d:17:1a:b9:3b:6c:b8:40:3e:8b:59:bd:51:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
        Validity
            Not Before: Jul 24 15:00:31 2026 GMT
            Not After : Jul 25 15:00:31 2026 GMT
        Subject: CN=baad9c02714ce576db72c46dbe6204179e6416e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:29:04:3b:b9:8c:85:4b:d1:77:3b:a6:c9:
                    b2:6d:0f:90:8a:9b:d4:68:ef:70:af:3a:c8:6b:8c:
                    14:af:d8:a6:b9:f9:61:de:65:bf:41:a5:d0:22:ef:
                    de:16:30:24:9e:73:82:27:1d:4b:88:ad:e9:90:28:
                    a7:4d:6c:3a:09:04:85:4c:20:96:69:fd:8c:62:d9:
                    a1:17:d4:ec:d8:10:63:1d:6c:20:c5:8d:e3:cb:89:
                    99:4e:10:ea:00:1b:2b:d6:88:7b:d8:01:09:81:97:
                    62:41:39:ad:26:03:e6:c7:72:53:da:28:94:15:38:
                    58:b9:42:56:b7:1c:cb:ec:35:4f:28:66:f7:36:5c:
                    c6:a6:49:0d:81:c3:b4:27:05:ee:71:2b:92:23:b2:
                    d4:76:83:2f:0a:32:76:7d:4f:56:3b:02:1f:72:a6:
                    35:ae:99:f0:dd:b1:f8:b9:7c:1e:dc:2c:14:79:e2:
                    b6:5c:f1:ea:9c:06:d7:4c:d0:71:62:c8:b3:5e:db:
                    c2:a9:f8:8c:27:aa:54:41:dc:22:f4:01:3f:cf:25:
                    ea:cd:24:7e:43:60:51:2f:e5:d3:ee:d5:2a:46:ad:
                    41:76:ee:07:84:bf:3c:be:2b:2b:96:a7:8f:86:7e:
                    a7:e0:1b:db:ba:9e:30:93:ac:49:c8:4c:7a:90:f9:
                    e2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AD:9C:02:71:4C:E5:76:DB:72:C4:6D:BE:62:04:17:9E:64:16:E6
            X509v3 Authority Key Identifier:
                keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:82:17:37:ef:1d:4f:40:15:ad:20:ad:76:15:ab:ed:87:48:
         94:a8:e3:15:a2:ee:99:03:22:9c:dc:e4:d9:f8:53:68:b8:81:
         ad:9d:c3:32:87:ae:d8:4c:4e:d7:10:97:79:d2:e9:b9:23:7b:
         a2:42:e4:94:00:51:f3:8a:f0:97:4d:57:2d:35:d7:ac:1c:6f:
         cf:bc:36:a7:e3:0f:da:af:69:41:97:17:c5:93:8d:e0:f4:1c:
         9e:ab:7f:20:35:e4:f7:a9:b7:d9:dd:98:08:82:2f:6c:da:66:
         91:13:d8:66:2e:56:14:cc:c0:08:e5:34:62:e3:7c:9d:f9:e1:
         eb:bd:05:f8:e4:be:c9:58:14:0e:9c:47:ae:a9:d9:9d:2e:38:
         fd:c0:43:f7:77:2f:68:af:55:ab:90:28:0e:c7:8a:35:1a:d2:
         ec:ff:f7:a4:3a:11:e6:06:9e:40:b0:80:2a:6a:4d:75:b9:5e:
         d5:61:23:ab:88:70:5a:cf:ca:12:03:c2:39:ea:65:b7:fe:f3:
         db:10:7c:85:17:da:bc:ba:a7:43:45:47:24:4b:83:4e:b6:16:
         36:c0:1c:af:1e:e3:8f:7d:d5:2d:e0:95:1b:1b:07:08:9d:de:
         fb:fe:cc:cf:04:1c:5e:01:91:f0:7b:2b:1a:3b:eb:6d:a3:f7:
         69:4e:1d:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpG0XGrk7bLhAPotZvVF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNTc5MmFiOGI3NTlhYTc3MzAzOGQ5MjA3N2E5OWJjZjhk
ODFhYTAwHhcNMjYwNzI0MTUwMDMxWhcNMjYwNzI1MTUwMDMxWjAzMTEwLwYDVQQD
EyhiYWFkOWMwMjcxNGNlNTc2ZGI3MmM0NmRiZTYyMDQxNzllNjQxNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXApBDu5jIVL0Xc7psmybQ+QipvU
aO9wrzrIa4wUr9imuflh3mW/QaXQIu/eFjAknnOCJx1LiK3pkCinTWw6CQSFTCCW
af2MYtmhF9Ts2BBjHWwgxY3jy4mZThDqABsr1oh72AEJgZdiQTmtJgPmx3JT2iiU
FThYuUJWtxzL7DVPKGb3NlzGpkkNgcO0JwXucSuSI7LUdoMvCjJ2fU9WOwIfcqY1
rpnw3bH4uXwe3CwUeeK2XPHqnAbXTNBxYsizXtvCqfiMJ6pUQdwi9AE/zyXqzSR+
Q2BRL+XT7tUqRq1Bdu4HhL88visrlqePhn6n4Bvbup4wk6xJyEx6kPniCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqtnAJxTOV223LEbb5iBBeeZBbmMB8GA1UdIwQY
MBaAFG9XkquLdZqncwONkgd6mbz42BqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMt
NWQxYjFlY2I5OWJmLzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83Zjk5NzgtMWZlNC00Yjk5LTgxNDMtNWQxYjFlY2I5OWJm
LzEvYjFlU3E0dDFtcWR6QTQyU0IzcVp2UGpZR3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4IXN+8d
T0AVrSCtdhWr7YdIlKjjFaLumQMinNzk2fhTaLiBrZ3DMoeu2ExO1xCXedLpuSN7
okLklABR84rwl01XLTXXrBxvz7w2p+MP2q9pQZcXxZON4PQcnqt/IDXk96m32d2Y
CIIvbNpmkRPYZi5WFMzACOU0YuN8nfnh670F+OS+yVgUDpxHrqnZnS44/cBD93cv
aK9Vq5AoDseKNRrS7P/3pDoR5gaeQLCAKmpNdble1WEjq4hwWs/KEgPCOeplt/7z
2xB8hRfavLqnQ0VHJEuDTrYWNsAcrx7jj33VLeCVGxsHCJ3e+/7MzwQcXgGR8Hsr
GjvrbaP3aU4dfQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:37 2026 by rpki-client