Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File:                     yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier:          9Fa55OMvau8/Y+xXGezlfLjZ8g7fPl9zjQkq7fcOzGU=
Subject key identifier:   1A:64:A5:9F:8F:ED:81:13:6E:DE:36:1F:C9:85:53:F2:C8:D1:B0:83
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       019F9135894298B1C571A46E1D8F4F40C3FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number:          19ED
Signing time:             Thu 23 Jul 2026 23:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:32 +0000
Files and hashes:         1: FBCGTG64vLpl2gDVPvanQJATgB8.roa (hash: axM4/0Pr+RIyWyZE+LhS3ebRSN92aTrPRUXzdJeL/U0=)
                          2: Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa (hash: fXnPA1IUb+WwCmX8j2rz10mUAQFbNKLaEL207SLATEk=)
                          3: Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa (hash: E/KI5295u2flUvuXh7zmO0XDhUT77Ekqi6kGos1unAA=)
                          4: cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa (hash: 9KAJy5B5/gYF9JmztZmHa3vCIGRv+J2QDYi/xV8zpFc=)
                          5: w9cLMtPbCYYrwoKERp06IPmC2bE.roa (hash: ey9n1gs4fwmE4LkooDwQ9cZLvMTfaqnyxO7TGDUAj68=)
                          6: wywpQzax_4ZtKoz9uAZxDjtcPmw.roa (hash: Q0w8drpmsGxodbGwxBVJJ2K2KkXwUZiHuoYb5PWlT/8=)
                          7: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: BF3B8KEiaXvtB2xx9WT0GrQfggG0dXkELHVkuew5beY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:89:42:98:b1:c5:71:a4:6e:1d:8f:4f:40:c3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Jul 23 23:00:32 2026 GMT
            Not After : Jul 24 23:00:32 2026 GMT
        Subject: CN=1a64a59f8fed81136ede361fc98553f2c8d1b083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:96:58:ae:ea:e4:ce:82:02:ac:2e:cf:b0:e5:
                    79:13:69:3a:c7:7f:ba:64:7a:85:e1:a5:51:bf:43:
                    d9:5f:ae:58:10:cd:69:f5:e3:f5:01:72:6a:89:f3:
                    91:b1:a7:89:26:ec:8d:9b:f0:6b:ce:d4:76:9d:d8:
                    29:3d:2e:2d:23:d6:e3:11:61:9a:7b:1c:82:a3:3a:
                    20:20:82:61:8e:17:9e:df:15:dc:d9:cf:e6:b9:6a:
                    2f:a5:54:95:10:cc:e7:74:5f:e6:72:6c:c7:c1:7a:
                    3a:2f:bb:23:e5:da:de:c9:e5:09:72:2c:86:00:84:
                    a0:91:22:ff:d3:f8:64:f2:7a:21:fd:86:40:bc:8c:
                    03:9a:ad:90:77:ca:1a:d8:76:3a:89:50:51:bd:36:
                    87:6c:1c:3c:17:9f:72:e1:8f:84:fd:17:8c:01:2b:
                    f5:ab:a2:23:4c:15:86:2c:f1:80:df:3b:a0:79:ca:
                    42:77:d9:04:9f:b6:72:93:87:4c:70:f4:37:16:a4:
                    1c:f6:56:04:ef:eb:d7:ac:70:19:02:71:dc:f7:0d:
                    94:de:cd:23:ab:34:75:a4:e6:b7:65:26:c0:6d:b9:
                    aa:99:b7:66:9b:1f:a9:5a:cd:ce:91:5c:ce:cd:3f:
                    df:d9:88:7d:53:ef:37:71:f0:6b:7e:4a:d6:2a:66:
                    e7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:64:A5:9F:8F:ED:81:13:6E:DE:36:1F:C9:85:53:F2:C8:D1:B0:83
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:63:5a:11:63:d4:20:26:cc:ba:14:b0:a4:de:17:b7:50:4f:
         20:b0:61:15:3f:42:46:5a:a2:cf:c2:e8:9c:14:e2:46:6a:22:
         74:5d:cf:47:18:ea:78:34:1c:66:47:0d:96:c3:b6:e9:a6:9d:
         30:18:32:ea:75:14:e8:d4:28:44:30:ec:d6:64:da:d5:10:ba:
         4f:a1:d4:44:41:2c:1e:2e:58:f0:26:12:69:88:ba:e0:c7:c1:
         51:8b:55:79:36:8b:c2:01:43:83:5f:c5:86:a5:d4:2a:9a:d6:
         33:d5:0e:c3:6c:23:1d:ad:78:fe:91:83:0d:d0:b5:ec:04:b5:
         ff:ca:f0:8e:30:82:ab:c0:31:23:bf:c3:2b:d0:5e:c6:0e:08:
         61:91:98:66:16:f3:89:f0:35:6f:0c:24:b7:1c:c5:96:08:af:
         67:29:6c:91:cd:a8:07:4f:af:96:29:44:51:97:78:8e:9b:87:
         fa:6b:fa:e9:ec:da:20:44:99:92:02:8b:b9:81:e9:59:92:d8:
         8a:65:4b:ae:d7:51:91:db:d8:3a:b2:3e:49:0b:e4:9a:2c:ca:
         7c:f9:ea:ab:c0:c4:20:c1:75:6f:01:74:9b:af:87:96:6e:2f:
         60:f5:23:1d:d0:0d:66:a3:80:fe:32:0c:b7:d6:21:3e:2d:9f:
         04:7b:89:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNYlCmLHFcaRuHY9PQMP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm
MzcxYWIwHhcNMjYwNzIzMjMwMDMyWhcNMjYwNzI0MjMwMDMyWjAzMTEwLwYDVQQD
EygxYTY0YTU5ZjhmZWQ4MTEzNmVkZTM2MWZjOTg1NTNmMmM4ZDFiMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pZYrurkzoICrC7PsOV5E2k6x3+6
ZHqF4aVRv0PZX65YEM1p9eP1AXJqifORsaeJJuyNm/BrztR2ndgpPS4tI9bjEWGa
exyCozogIIJhjhee3xXc2c/muWovpVSVEMzndF/mcmzHwXo6L7sj5dreyeUJciyG
AISgkSL/0/hk8noh/YZAvIwDmq2Qd8oa2HY6iVBRvTaHbBw8F59y4Y+E/ReMASv1
q6IjTBWGLPGA3zugecpCd9kEn7Zyk4dMcPQ3FqQc9lYE7+vXrHAZAnHc9w2U3s0j
qzR1pOa3ZSbAbbmqmbdmmx+pWs3OkVzOzT/f2Yh9U+83cfBrfkrWKmbnwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpkpZ+P7YETbt42H8mFU/LI0bCDMB8GA1UdIwQY
MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt
YjkyMTFlMWZjMWFjLzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj
LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWNaEWPU
ICbMuhSwpN4Xt1BPILBhFT9CRlqiz8LonBTiRmoidF3PRxjqeDQcZkcNlsO26aad
MBgy6nUU6NQoRDDs1mTa1RC6T6HUREEsHi5Y8CYSaYi64MfBUYtVeTaLwgFDg1/F
hqXUKprWM9UOw2wjHa14/pGDDdC17AS1/8rwjjCCq8AxI7/DK9Bexg4IYZGYZhbz
ifA1bwwktxzFlgivZylskc2oB0+vlilEUZd4jpuH+mv66ezaIESZkgKLuYHpWZLY
imVLrtdRkdvYOrI+SQvkmizKfPnqq8DEIMF1bwF0m6+Hlm4vYPUjHdANZqOA/jIM
t9YhPi2fBHuJfg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:31 2026 by rpki-client