Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier:          a4NAPv6VFW0WAo9AtrO5yBmnUipDzbMx33V3E6SNevc=
Subject key identifier:   83:8D:05:C6:21:AC:46:BD:4C:43:9A:B8:67:1A:06:2A:E8:D7:E1:2A
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       019F8EA2C7E677F3E89C1EB1E7594B159643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 11:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:00 +0000
Files and hashes:         1: 1tq3O762pd4piMgBW1bA4-OkYdE.roa (hash: 5SImQwh0Wwz5tGyZ+mkSamCxnSlJbvkXrVz7wNpOrGA=)
                          2: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: A3VOBRki1apDJZi8NpmY+rZniDFuYROeeRjv2K9ZURc=)
                          3: Qkt4P-3ZvRUFITOdiTeOKgCxrkw.roa (hash: 3rqF0FN3C+u7VPFtuecMJP1cP04f2T4s71febW5rYck=)
                          4: T7Qloq1sVKmUvN2otUd3yqvPvi0.roa (hash: Z426zyvv0yt+vgk/xSAFr9Ff02ANySvAKoQ2RQiwE0A=)
                          5: kARVIlDBzF4gPohT6gRNl9dMH18.asa (hash: 7z/wKyEmpLOrAKMSn18/fQVblHqra7yUenbRNRt2qQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:c7:e6:77:f3:e8:9c:1e:b1:e7:59:4b:15:96:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: Jul 23 11:01:00 2026 GMT
            Not After : Jul 24 11:01:00 2026 GMT
        Subject: CN=838d05c621ac46bd4c439ab8671a062ae8d7e12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d9:c0:3c:a0:a1:dc:e3:03:76:7d:5e:c9:2d:
                    ba:35:9f:0a:1d:2c:3b:89:d0:9c:dd:f9:73:7d:c6:
                    cb:0c:28:a4:2b:57:b7:ae:6e:93:aa:b8:7d:97:83:
                    1a:a0:59:89:d0:7d:3a:d9:39:5d:1c:b2:e7:e6:0e:
                    ab:35:4a:89:fd:bd:e6:cd:95:1b:37:8d:0a:f4:02:
                    ed:79:2b:4e:8e:06:81:00:4e:32:7d:d6:b3:13:18:
                    33:e2:fb:8f:e9:c3:8e:e3:f8:18:09:50:be:e2:bc:
                    e4:ea:ad:d6:63:2f:f4:1f:81:e8:27:1e:75:d2:1e:
                    a0:c1:b3:29:2a:61:6f:cd:e9:6f:95:5b:12:e2:89:
                    77:8c:31:2e:c3:10:71:65:7d:54:ff:3d:7d:61:cb:
                    4d:99:2b:aa:ed:f1:90:17:46:9d:10:2e:bb:24:36:
                    8b:78:4b:b5:c9:7c:38:50:ba:2b:90:f4:6d:6e:69:
                    fe:b8:b4:e3:ec:34:0f:0b:61:85:8f:08:74:cd:b2:
                    8b:87:63:a0:b0:65:33:dd:a2:4f:9b:3d:1f:05:d3:
                    5a:8b:a5:31:16:2a:4e:ba:0d:58:f9:c0:0f:5d:a8:
                    4a:4b:ea:49:c0:f9:97:0c:02:d9:28:d1:f1:48:55:
                    12:e4:f6:d7:dc:9b:13:96:48:8a:32:38:4f:b1:da:
                    c7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8D:05:C6:21:AC:46:BD:4C:43:9A:B8:67:1A:06:2A:E8:D7:E1:2A
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:fe:f9:97:f8:0b:d8:7e:0b:c0:be:7b:03:4e:81:c2:b1:be:
         a0:d6:79:20:5b:36:c0:b2:96:78:04:8d:32:ef:c4:32:00:69:
         7e:a9:ef:12:70:de:92:9d:af:e3:95:9f:66:fe:79:ce:23:fb:
         5d:bb:06:49:c8:50:8d:8b:a9:91:8a:5d:8d:fe:7f:cc:75:bb:
         c4:64:d9:90:f1:6a:0a:08:1d:6a:81:6b:6d:5c:4b:aa:a9:d0:
         32:c5:dc:30:c5:12:bf:c0:d8:d8:65:b0:95:01:5f:1c:3f:ed:
         f4:b1:26:a3:a4:d2:a0:59:15:68:cd:8a:11:fd:65:11:a1:8d:
         c6:15:1c:25:af:65:5e:76:7f:4d:71:53:28:aa:90:2d:72:17:
         58:97:ff:7e:f1:14:dc:07:eb:63:33:ab:8d:de:ba:e6:d2:91:
         dc:49:57:8e:51:52:9a:65:35:4a:2a:f6:0f:24:33:5b:a2:dd:
         4f:7d:c3:e7:82:d7:41:b4:9a:b5:d0:1d:33:43:59:f4:a5:26:
         93:6c:df:dd:db:1a:b9:2f:b0:5f:f1:86:6a:8d:2b:5f:c8:d4:
         93:4f:cc:37:1a:3f:99:18:9a:c0:67:35:77:30:b2:bd:af:5c:
         8a:39:50:bd:56:1c:ca:7f:53:6f:0d:3b:d0:0d:15:1a:4f:b0:
         2e:58:4c:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oosfmd/PonB6x51lLFZZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Y2Y5ZDhkNTUyY2RjN2Q4YzBkYzZmNjQ5YjMwMWYyMzUx
NDA5ZWUwHhcNMjYwNzIzMTEwMTAwWhcNMjYwNzI0MTEwMTAwWjAzMTEwLwYDVQQD
Eyg4MzhkMDVjNjIxYWM0NmJkNGM0MzlhYjg2NzFhMDYyYWU4ZDdlMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NnAPKCh3OMDdn1eyS26NZ8KHSw7
idCc3flzfcbLDCikK1e3rm6Tqrh9l4MaoFmJ0H062TldHLLn5g6rNUqJ/b3mzZUb
N40K9ALteStOjgaBAE4yfdazExgz4vuP6cOO4/gYCVC+4rzk6q3WYy/0H4HoJx51
0h6gwbMpKmFvzelvlVsS4ol3jDEuwxBxZX1U/z19YctNmSuq7fGQF0adEC67JDaL
eEu1yXw4ULorkPRtbmn+uLTj7DQPC2GFjwh0zbKLh2OgsGUz3aJPmz0fBdNai6Ux
FipOug1Y+cAPXahKS+pJwPmXDALZKNHxSFUS5PbX3JsTlkiKMjhPsdrHowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIONBcYhrEa9TEOauGcaBiro1+EqMB8GA1UdIwQY
MBaAFCXPnY1VLNx9jA3G9kmzAfI1FAnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQt
YTEwNjkwYTc0NGU0LzEvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQtYTEwNjkwYTc0NGU0
LzEvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwv75l/gL
2H4LwL57A06BwrG+oNZ5IFs2wLKWeASNMu/EMgBpfqnvEnDekp2v45WfZv55ziP7
XbsGSchQjYupkYpdjf5/zHW7xGTZkPFqCggdaoFrbVxLqqnQMsXcMMUSv8DY2GWw
lQFfHD/t9LEmo6TSoFkVaM2KEf1lEaGNxhUcJa9lXnZ/TXFTKKqQLXIXWJf/fvEU
3AfrYzOrjd665tKR3ElXjlFSmmU1Sir2DyQzW6LdT33D54LXQbSatdAdM0NZ9KUm
k2zf3dsauS+wX/GGao0rX8jUk0/MNxo/mRiawGc1dzCyva9cijlQvVYcyn9Tbw07
0A0VGk+wLlhMVA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:57 2026 by rpki-client