Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
File:                     d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft (raw, json)
Hash identifier:          32pz4kWNlgSpccKV73MnMsXvVAEGtTPNcpPNRwiv0po=
Subject key identifier:   B4:23:9B:BE:9B:E5:EA:30:52:3A:28:C9:23:B1:CA:D2:ED:B4:ED:F2
Authority key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Certificate issuer:       /CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Certificate serial:       019F8F7DE255DC0AF32EC90071AA7A7BF9DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:19 +0000
Files and hashes:         1: 31s38qTNO6yt_t2cWViMVU8rzT8.roa (hash: hHBR9FRB8VGB5NgdUu2OjlV3tCFxVK0wgLqKuADUEY4=)
                          2: VXztzk4Ee02YToFvK1hXq4z0ngg.roa (hash: TG73c3Jp5R3Lk7QQ+JsM9RhJbp3eNPxZOiVn6niYjI4=)
                          3: XPBmD8Gtnws4nIHrF49jMceOosg.roa (hash: O2+V+IZD88cCJbaxnDGHuAzNsGo6UPNKZgTbgUxV0l0=)
                          4: cwbV0vWcQ5Wj6E31oIeSxEVrBuY.roa (hash: /Is553alSS62yiVoav4+HU2iTt1j95KP3P9CAryXxjU=)
                          5: d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl (hash: JKLM6W985PVYCKA8ExSbG0jok39IueCTSOgX0E4CZGk=)
                          6: xJPTTp5K8VAilWrMTnS2jp6tHnk.roa (hash: KMPOdyDiNO1wmzY0MhqQ4kgJJIERiU41QBcjjv60rmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:e2:55:dc:0a:f3:2e:c9:00:71:aa:7a:7b:f9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
        Validity
            Not Before: Jul 23 15:00:19 2026 GMT
            Not After : Jul 24 15:00:19 2026 GMT
        Subject: CN=b4239bbe9be5ea30523a28c923b1cad2edb4edf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:0a:7b:7e:69:d9:76:a8:85:7c:89:58:97:
                    e5:c4:61:aa:3d:04:00:dd:83:e8:c0:8b:1b:9b:e6:
                    de:78:c2:84:56:21:a7:ba:9a:37:2b:be:9e:32:9f:
                    92:29:90:e2:44:6d:12:0e:80:ce:48:83:73:e2:46:
                    fd:ab:1a:54:f5:c7:14:d5:6b:7e:ed:f2:5e:a8:ae:
                    e1:d6:8f:30:b7:91:4e:1d:e9:23:ec:6e:a1:92:9c:
                    38:86:4a:42:bf:61:e3:d5:b9:c6:b7:08:4c:02:02:
                    a8:ce:14:a2:a8:b0:fc:fd:f7:03:0f:41:bf:71:de:
                    ec:bb:06:e1:c9:10:f8:ea:0a:ba:83:01:82:86:97:
                    bd:a7:6b:bf:98:51:6d:a6:12:cf:29:ca:63:5c:72:
                    a7:35:1e:b0:11:18:0d:79:6c:4b:f8:cb:01:45:51:
                    6e:17:55:c5:ed:9a:4c:ee:fa:41:d5:a3:23:4e:b6:
                    3d:b8:5b:f8:1e:da:8c:83:89:a7:b6:3c:85:98:ff:
                    02:82:7e:eb:7e:0a:0c:6f:a9:cf:c8:b0:94:20:f8:
                    c4:a7:d3:d7:41:8f:25:53:8c:1f:e1:70:f4:d1:10:
                    19:cf:12:21:f6:3f:f9:49:66:b7:cc:31:24:14:16:
                    a9:48:53:ee:04:e7:1d:07:07:4a:6b:f1:83:53:fb:
                    20:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:23:9B:BE:9B:E5:EA:30:52:3A:28:C9:23:B1:CA:D2:ED:B4:ED:F2
            X509v3 Authority Key Identifier:
                keyid:77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4c:ea:25:23:4e:b8:bd:a3:5f:cb:78:d6:33:b3:ef:d9:36:
         13:30:d5:a7:9c:6b:91:e2:59:c6:b6:59:75:6c:fb:a3:66:00:
         74:2c:f8:9d:c3:a0:7b:81:42:94:8b:9b:06:ab:d2:a0:a2:fe:
         b7:8c:78:0a:8a:12:be:30:c3:eb:e1:67:d0:18:e8:c4:29:09:
         c7:18:13:83:b5:19:23:86:61:50:3a:a5:51:50:1d:64:12:b2:
         71:9f:4f:5b:5d:4a:e1:81:ea:c5:46:68:f7:6f:c0:cc:da:56:
         42:b3:2b:3f:41:f5:46:0f:c7:81:98:2d:39:2d:cf:06:54:fb:
         79:a9:68:f5:1d:c2:1b:28:2e:e4:8d:82:43:d3:80:58:90:9e:
         c2:df:7d:32:57:66:2b:be:bf:8d:b4:f2:33:9f:af:4a:6b:0f:
         8a:ff:d8:32:11:79:b8:b8:6c:ee:6c:13:f9:0b:af:36:c1:bc:
         52:fc:0d:61:63:2f:1f:4c:e9:24:b7:e7:c0:0c:15:03:ad:bb:
         ce:07:9c:e1:b4:5b:dc:63:ae:db:54:0e:3a:de:3f:88:88:6b:
         be:63:7c:fb:a0:4b:8a:fb:a3:a4:ef:07:15:6b:df:d4:a3:f0:
         f3:7e:cd:40:ee:25:cb:95:e3:17:62:8b:0d:90:e6:ee:6e:3c:
         57:fa:e5:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfeJV3ArzLskAcap6e/ncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzgwMDU0ZTEzMzBjYTcxYjQ5MDBkNjE1YzJjZjJjM2Nl
NmNmMDQwHhcNMjYwNzIzMTUwMDE5WhcNMjYwNzI0MTUwMDE5WjAzMTEwLwYDVQQD
EyhiNDIzOWJiZTliZTVlYTMwNTIzYTI4YzkyM2IxY2FkMmVkYjRlZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdcKe35p2XaohXyJWJflxGGqPQQA
3YPowIsbm+beeMKEViGnupo3K76eMp+SKZDiRG0SDoDOSINz4kb9qxpU9ccU1Wt+
7fJeqK7h1o8wt5FOHekj7G6hkpw4hkpCv2Hj1bnGtwhMAgKozhSiqLD8/fcDD0G/
cd7suwbhyRD46gq6gwGChpe9p2u/mFFtphLPKcpjXHKnNR6wERgNeWxL+MsBRVFu
F1XF7ZpM7vpB1aMjTrY9uFv4HtqMg4mntjyFmP8Cgn7rfgoMb6nPyLCUIPjEp9PX
QY8lU4wf4XD00RAZzxIh9j/5SWa3zDEkFBapSFPuBOcdBwdKa/GDU/sgfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQjm76b5eowUjooySOxytLttO3yMB8GA1UdIwQY
MBaAFHfIAFThMwynG0kA1hXCzyw85s8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhnQVZPRXpES2NiU1FEV0ZjTFBMRHptendRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzct
ZTUyMjlhZDUyMTRlLzEvZDhnQVZPRXpES2NiU1FEV0ZjTFBMRHptendRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzctZTUyMjlhZDUyMTRl
LzEvZDhnQVZPRXpES2NiU1FEV0ZjTFBMRHptendRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkzqJSNO
uL2jX8t41jOz79k2EzDVp5xrkeJZxrZZdWz7o2YAdCz4ncOge4FClIubBqvSoKL+
t4x4CooSvjDD6+Fn0BjoxCkJxxgTg7UZI4ZhUDqlUVAdZBKycZ9PW11K4YHqxUZo
92/AzNpWQrMrP0H1Rg/HgZgtOS3PBlT7ealo9R3CGygu5I2CQ9OAWJCewt99Mldm
K76/jbTyM5+vSmsPiv/YMhF5uLhs7mwT+QuvNsG8UvwNYWMvH0zpJLfnwAwVA627
zgec4bRb3GOu21QOOt4/iIhrvmN8+6BLivujpO8HFWvf1KPw837NQO4ly5XjF2KL
DZDm7m48V/rl9Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:17 2026 by rpki-client