Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File:                     4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier:          MX7n/c00PMgZEyIJ3cxVoEvquNa+wkm0iPTdNV1pZ/I=
Subject key identifier:   B1:9F:ED:C4:8B:1D:D1:6B:BC:7B:81:E0:09:86:26:2B:19:6B:02:C1
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       019F90FF070CFE06113DDCED10500E6B2F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number:          19F5
Signing time:             Thu 23 Jul 2026 22:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:00 +0000
Files and hashes:         1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
                          2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
                          3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: dGVEHb2UrRKGxaWbu/QoxZJQL3bDUbd9nfxWfcDePz8=)
                          4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
                          5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
                          6: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (hash: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE=)
                          7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
                          8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
                          9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
                          10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
                          11: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
                          12: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
                          13: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
                          14: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
                          15: kI6qZM_ZaitHrWvGolHhHlDVsrQ.roa (hash: Q3M/OMYn5lm9sKUydcSkDpIKl2s8dMnBBJUvs2+PkIA=)
                          16: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
                          17: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
                          18: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (hash: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA=)
                          19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
                          20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
                          21: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:07:0c:fe:06:11:3d:dc:ed:10:50:0e:6b:2f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Jul 23 22:01:00 2026 GMT
            Not After : Jul 24 22:01:00 2026 GMT
        Subject: CN=b19fedc48b1dd16bbc7b81e00986262b196b02c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:03:82:c4:93:fd:a5:3c:9d:9e:41:b3:de:
                    ca:fd:d8:97:3e:ca:9b:50:1a:ea:02:44:36:60:c4:
                    bf:46:de:26:6b:86:75:a6:03:93:c1:18:72:08:85:
                    fa:e9:d4:6d:8f:eb:db:fb:39:c1:f5:b0:78:c7:57:
                    49:21:42:7f:d4:9b:e4:7d:2b:a3:9c:0d:06:e5:11:
                    e8:7a:86:b4:07:9f:9d:2b:34:f6:3f:bd:cb:ea:40:
                    78:e1:ba:f7:3c:06:d6:b3:96:f6:b2:e6:00:74:23:
                    cc:e0:6b:95:9c:7b:38:5a:26:d9:bd:d1:10:c8:48:
                    5a:55:9d:a4:0e:37:03:9f:50:81:95:12:fe:43:a0:
                    18:d6:d1:85:67:1a:e9:de:b2:f2:71:20:91:85:f6:
                    ca:19:17:0f:3e:89:38:56:26:e9:bd:02:be:35:77:
                    4a:b7:76:a9:77:cc:40:67:d7:3c:d4:7b:ed:f1:59:
                    ad:21:d5:6a:e0:7e:f9:d8:79:79:24:45:59:a5:0c:
                    fa:c9:8d:19:e7:37:d3:02:90:05:6c:1d:be:19:42:
                    91:3a:b8:c7:92:0e:b3:f3:95:81:04:42:49:96:bc:
                    26:6e:00:f7:85:56:bf:55:c4:04:be:c6:64:1c:c9:
                    d9:e5:09:00:36:80:6b:83:52:09:89:8c:33:ed:06:
                    62:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9F:ED:C4:8B:1D:D1:6B:BC:7B:81:E0:09:86:26:2B:19:6B:02:C1
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:51:34:32:b2:f3:06:39:36:0c:22:5e:cf:12:92:a3:7c:84:
         69:07:b7:6b:7b:7f:2a:0f:1e:ec:3c:3e:39:2b:cc:5a:c0:48:
         35:05:97:ba:6d:c8:6b:39:42:a2:a7:32:9b:52:d3:35:95:4e:
         4c:36:14:63:3f:6c:50:7b:3b:98:9f:ae:41:1a:60:a2:71:e5:
         49:d6:2c:1e:ac:ed:85:0c:55:de:fb:8d:e9:20:8d:20:2d:f6:
         04:b7:81:0a:a2:9c:c8:42:a3:7f:3d:3d:8e:7c:12:90:61:92:
         77:a7:83:8e:ba:0b:5b:7b:de:e3:09:04:df:f6:e1:73:7f:dc:
         f3:23:eb:9b:af:6b:b5:91:07:84:be:8a:df:2f:3a:24:cc:d1:
         b3:50:a3:1e:4f:6e:e2:5c:0f:31:55:bf:a7:25:30:a6:89:9f:
         a8:5e:4a:97:b1:44:36:0e:dd:7b:2f:a3:2b:0c:ee:81:73:5b:
         d9:7c:bb:97:49:17:cd:3e:d2:56:fc:a6:fe:bd:d6:dd:66:94:
         5b:48:39:81:a3:15:a7:d7:e1:87:45:33:c0:d9:76:a9:2b:2c:
         94:0c:d6:f7:7d:0a:9b:30:20:32:e3:2b:50:e1:db:4f:c9:68:
         a5:90:5d:36:d2:c9:52:59:a3:3d:12:80:1d:23:f9:e3:dd:93:
         f0:60:f5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:25 2026 by rpki-client