Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File:                     27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier:          ywx78l+0Mx8Uuz9bRdz9qN8sUVsYDxhgMtj7THgWQ1o=
Subject key identifier:   24:26:D5:D1:55:8A:E6:FE:2B:D6:F2:33:EE:7F:62:5B:95:E8:99:03
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer:       /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial:       019F927EDFC1BF02D8F5204D7A654E710AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number:          144C
Signing time:             Fri 24 Jul 2026 05:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:16 +0000
Files and hashes:         1: 1-js5TVA1UkNXfyekBabOXD4itsk.roa (hash: YJD1GIjXCe4Si+mr4oD2BuzeRVKbRLslRw6eTMykWZk=)
                          2: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: kx+dC2gN5i/CnB7KbtnB61pkh0+7tIPuegNU8dE3IWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7e:df:c1:bf:02:d8:f5:20:4d:7a:65:4e:71:0a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
        Validity
            Not Before: Jul 24 05:00:16 2026 GMT
            Not After : Jul 25 05:00:16 2026 GMT
        Subject: CN=2426d5d1558ae6fe2bd6f233ee7f625b95e89903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:94:fc:71:02:28:e5:ea:ff:25:54:2b:9b:
                    83:e2:3a:4b:3c:c0:3c:b6:99:f5:b4:4c:66:48:eb:
                    c9:52:02:56:6f:04:12:ef:e1:39:73:31:85:97:66:
                    81:dc:aa:28:1e:fa:0b:50:05:4d:8d:9f:79:49:89:
                    0c:e3:13:ad:aa:5e:30:53:96:3e:c8:b9:45:f4:7f:
                    aa:46:d9:b5:c7:32:b9:77:ee:ef:26:be:3d:39:cb:
                    84:86:9b:10:5b:2f:90:3f:2b:c9:c4:d1:9e:b4:5e:
                    30:a2:45:2e:3b:3e:f8:11:c4:c7:ac:ab:f3:3a:bb:
                    06:cd:92:a0:82:68:9e:1f:f6:15:8e:10:7e:00:df:
                    fe:8a:44:cf:4c:80:9b:f4:ab:63:38:69:1f:df:12:
                    55:50:c5:28:2a:ae:de:ee:37:95:17:da:8b:e5:63:
                    14:2c:6f:09:b5:76:cb:26:1d:2c:51:f5:68:cc:d6:
                    5c:ce:8d:aa:cd:4c:75:53:72:13:45:19:0b:51:6e:
                    cd:10:ac:f1:bc:c6:28:46:f5:d5:93:2e:fa:98:a2:
                    5e:d5:02:88:7e:22:2f:73:1c:65:d6:73:cc:0a:79:
                    d1:4e:95:39:b2:11:75:04:b8:fc:a4:de:14:e1:82:
                    ca:bc:be:5f:a1:0d:08:a9:1d:5c:f2:8f:23:9c:ac:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:26:D5:D1:55:8A:E6:FE:2B:D6:F2:33:EE:7F:62:5B:95:E8:99:03
            X509v3 Authority Key Identifier:
                keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:78:f9:6b:8d:46:9e:85:c1:b9:03:35:0c:05:2f:a8:cb:9c:
         de:74:de:3c:c8:c5:6f:03:2c:70:c7:7d:65:f6:2d:5d:0f:9a:
         2a:e1:99:01:74:f2:10:8b:14:2e:05:f1:e1:a0:6b:1e:02:0c:
         3e:b0:db:84:a6:6f:36:68:d2:a3:2a:89:af:97:7f:de:ef:3d:
         12:19:0f:85:ed:d3:eb:10:f2:cd:fd:b9:d7:70:67:26:57:f2:
         db:35:86:e9:38:ce:ef:db:df:5b:8e:e4:d0:83:6b:59:d6:60:
         b7:59:97:9b:29:1f:d5:08:4c:2a:a5:dc:d9:89:05:46:a3:3a:
         fa:41:fa:fa:8c:43:4a:d7:8a:b2:87:7d:6d:66:6d:91:98:3c:
         be:cd:59:d2:2d:4f:94:05:c7:e1:42:bf:26:3f:41:ef:e7:d3:
         2c:28:ad:d3:d2:cf:27:8d:fd:11:b9:c1:4d:6e:48:08:a4:ac:
         93:70:16:59:13:c9:b4:b2:5b:e8:6b:d3:1b:d8:cb:77:2a:34:
         ec:0f:55:0d:c8:2b:57:29:7f:d9:80:79:04:78:5d:43:d1:5f:
         ba:8d:5f:16:ca:e1:1c:98:b1:38:b8:4a:9e:29:d4:71:58:85:
         40:f0:ee:4d:ec:aa:6a:82:a2:13:14:23:98:d5:65:40:79:8b:
         8a:04:8e:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sft/BvwLY9SBNemVOcQq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYjk4MDEwNTM2YzQwNmVhOGYzZDY2NTU5NGMyMjhkNzZl
YjEwZmQwHhcNMjYwNzI0MDUwMDE2WhcNMjYwNzI1MDUwMDE2WjAzMTEwLwYDVQQD
EygyNDI2ZDVkMTU1OGFlNmZlMmJkNmYyMzNlZTdmNjI1Yjk1ZTg5OTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN6U/HECKOXq/yVUK5uD4jpLPMA8
tpn1tExmSOvJUgJWbwQS7+E5czGFl2aB3KooHvoLUAVNjZ95SYkM4xOtql4wU5Y+
yLlF9H+qRtm1xzK5d+7vJr49OcuEhpsQWy+QPyvJxNGetF4wokUuOz74EcTHrKvz
OrsGzZKggmieH/YVjhB+AN/+ikTPTICb9KtjOGkf3xJVUMUoKq7e7jeVF9qL5WMU
LG8JtXbLJh0sUfVozNZczo2qzUx1U3ITRRkLUW7NEKzxvMYoRvXVky76mKJe1QKI
fiIvcxxl1nPMCnnRTpU5shF1BLj8pN4U4YLKvL5foQ0IqR1c8o8jnKwRfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQm1dFViub+K9byM+5/YluV6JkDMB8GA1UdIwQY
MBaAFNu5gBBTbEBuqPPWZVlMIo126xD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgt
NzIwODFiZDRjZDhkLzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jN2YzZDktYTUwMS00NmFmLWI5ZDgtNzIwODFiZDRjZDhk
LzEvMjdtQUVGTnNRRzZvODlabFdVd2lqWGJyRVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHj5a41G
noXBuQM1DAUvqMuc3nTePMjFbwMscMd9ZfYtXQ+aKuGZAXTyEIsULgXx4aBrHgIM
PrDbhKZvNmjSoyqJr5d/3u89EhkPhe3T6xDyzf2513BnJlfy2zWG6TjO79vfW47k
0INrWdZgt1mXmykf1QhMKqXc2YkFRqM6+kH6+oxDSteKsod9bWZtkZg8vs1Z0i1P
lAXH4UK/Jj9B7+fTLCit09LPJ439EbnBTW5ICKSsk3AWWRPJtLJb6GvTG9jLdyo0
7A9VDcgrVyl/2YB5BHhdQ9Ffuo1fFsrhHJixOLhKninUcViFQPDuTeyqaoKiExQj
mNVlQHmLigSO+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:22 2026 by rpki-client