Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File:                     05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier:          PgVYsL17XCJRpWoLr9ZvaIHv76IMAx8vEvh/QyIKD1o=
Subject key identifier:   63:E7:98:CA:88:9D:B1:EB:E1:10:6A:5B:7D:5F:69:F5:E2:25:97:3C
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer:       /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial:       019F90917CCC57CF1890CED4E61E287C673C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number:          14B7
Signing time:             Thu 23 Jul 2026 20:01:21 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:21 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:21 +0000
Files and hashes:         1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: uf0Xu1a4UtN6V1leTXCUcOMVCoFxsva8NaVFax4GbY8=)
                          2: gbxId3GOowlzCHPpf6Jyfef6KGQ.roa (hash: 4i/aGAudyyDfHz6MTEKI9eUEQHtSeNI1RbC1NE+R+ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:7c:cc:57:cf:18:90:ce:d4:e6:1e:28:7c:67:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
        Validity
            Not Before: Jul 23 20:01:21 2026 GMT
            Not After : Jul 24 20:01:21 2026 GMT
        Subject: CN=63e798ca889db1ebe1106a5b7d5f69f5e225973c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:b4:f8:47:c0:e2:77:b5:41:ca:c2:e8:32:
                    6a:b1:41:9d:79:20:37:74:7d:3c:91:d8:e2:e5:56:
                    78:cd:18:02:8b:7e:c0:44:0c:2e:4a:20:ed:f3:79:
                    41:b0:0d:a7:cc:0d:9c:c3:05:74:b7:1b:ff:e0:cf:
                    f8:af:3c:4f:92:d2:03:b1:9f:61:79:ab:f6:10:c1:
                    05:92:7a:e2:ee:7c:0b:5e:28:d7:dd:de:72:88:6d:
                    a5:27:10:a8:f6:64:65:ab:69:d3:8c:1f:11:f4:ab:
                    a4:a3:f0:65:e4:65:67:a8:9a:4b:af:e3:93:9c:41:
                    67:2b:ea:d9:ef:bf:21:4b:d9:da:ac:27:2f:35:5b:
                    60:e6:4b:f5:47:be:21:99:1d:fd:f2:38:bd:7b:d6:
                    82:b6:db:09:10:89:95:c5:7d:7e:2e:53:d0:26:d1:
                    88:8e:b6:60:23:b3:62:49:86:64:ed:b0:51:4d:64:
                    96:36:f5:3c:1f:4c:c7:e9:74:a6:48:3d:25:80:06:
                    de:3a:ab:cc:b8:6f:98:67:4a:fe:4a:08:53:31:c7:
                    b3:b3:09:58:a5:a1:ca:a7:01:77:05:a0:80:cb:31:
                    46:73:9e:c1:b7:f4:89:41:62:e3:ec:c7:3e:94:f7:
                    de:b2:3a:89:aa:e7:83:10:cf:ca:b2:ad:17:b1:fd:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E7:98:CA:88:9D:B1:EB:E1:10:6A:5B:7D:5F:69:F5:E2:25:97:3C
            X509v3 Authority Key Identifier:
                keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:e2:8d:7d:c8:c8:bd:7f:41:59:7d:37:8a:13:0b:92:bb:
         5c:9f:cc:43:76:a9:a4:50:aa:f8:f0:96:2f:36:26:c3:4c:ef:
         4c:a9:b1:37:74:ed:9e:17:ea:35:73:96:60:9b:4a:fb:f2:ec:
         7d:2c:f6:4c:fa:67:9d:69:5f:81:1e:1b:d3:7e:b2:f4:19:53:
         48:a6:39:72:5e:61:66:73:e0:d8:34:9c:a5:2a:25:91:00:57:
         8c:d0:76:f2:8b:9a:91:24:16:92:34:65:f0:d7:97:1e:cd:e9:
         67:db:a0:5a:ab:cb:b1:a2:75:b6:07:8f:c4:2c:ce:3e:43:c8:
         7f:a2:89:47:d8:b3:53:c7:41:47:9a:1d:db:93:0c:77:35:64:
         6f:61:85:04:40:fb:90:45:62:47:15:77:9b:85:99:fc:6e:10:
         3d:79:5a:10:88:38:59:71:a5:77:01:cf:6f:1c:2f:99:8d:9b:
         cb:fc:a6:8e:ae:05:6a:5a:74:0b:75:26:35:fa:32:4d:ab:78:
         ea:59:04:78:a4:10:34:4f:94:88:f9:80:7a:5b:61:ec:90:df:
         b7:67:62:80:c7:9a:28:d2:fb:76:56:28:d3:a0:3a:8d:29:b6:
         13:84:dd:d0:87:d9:6d:ad:c3:f4:bc:77:49:55:61:2f:6c:71:
         4a:6f:c0:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkXzMV88YkM7U5h4ofGc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTY5NmE3NjgwZTk1NTI5MWZlYWZhMWVmYmE5ZmJjZmYy
Zjg4OGIwHhcNMjYwNzIzMjAwMTIxWhcNMjYwNzI0MjAwMTIxWjAzMTEwLwYDVQQD
Eyg2M2U3OThjYTg4OWRiMWViZTExMDZhNWI3ZDVmNjlmNWUyMjU5NzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6m0+EfA4ne1QcrC6DJqsUGdeSA3
dH08kdji5VZ4zRgCi37ARAwuSiDt83lBsA2nzA2cwwV0txv/4M/4rzxPktIDsZ9h
eav2EMEFknri7nwLXijX3d5yiG2lJxCo9mRlq2nTjB8R9Kuko/Bl5GVnqJpLr+OT
nEFnK+rZ778hS9narCcvNVtg5kv1R74hmR398ji9e9aCttsJEImVxX1+LlPQJtGI
jrZgI7NiSYZk7bBRTWSWNvU8H0zH6XSmSD0lgAbeOqvMuG+YZ0r+SghTMcezswlY
paHKpwF3BaCAyzFGc57Bt/SJQWLj7Mc+lPfesjqJqueDEM/Ksq0Xsf1TTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPnmMqInbHr4RBqW31fafXiJZc8MB8GA1UdIwQY
MBaAFNOWlqdoDpVSkf6voe+6n7z/L4iLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUt
Y2M3YWQxNmQxYjBjLzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUtY2M3YWQxNmQxYjBj
LzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe//ijX3I
yL1/QVl9N4oTC5K7XJ/MQ3appFCq+PCWLzYmw0zvTKmxN3TtnhfqNXOWYJtK+/Ls
fSz2TPpnnWlfgR4b036y9BlTSKY5cl5hZnPg2DScpSolkQBXjNB28ouakSQWkjRl
8NeXHs3pZ9ugWqvLsaJ1tgePxCzOPkPIf6KJR9izU8dBR5od25MMdzVkb2GFBED7
kEViRxV3m4WZ/G4QPXlaEIg4WXGldwHPbxwvmY2by/ymjq4Falp0C3UmNfoyTat4
6lkEeKQQNE+UiPmAelth7JDft2digMeaKNL7dlYo06A6jSm2E4Td0IfZba3D9Lx3
SVVhL2xxSm/Aqw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:55 2026 by rpki-client