Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
File:                     98Dr2f99xugfjDVIx8LozceWfW8.mft (raw, json)
Hash identifier:          Pew0WGxAsFF+iyTyzArvic/Mx+C9UoQzhJsqH24TPY0=
Subject key identifier:   1F:D6:7F:A0:C5:F8:CF:5F:62:F8:B2:AE:31:6E:CE:46:DD:25:5F:1E
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Certificate issuer:       /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial:       019F90FEE82D350C55B4A33A9D9E8C9181AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
Manifest number:          119C
Signing time:             Thu 23 Jul 2026 22:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:52 +0000
Files and hashes:         1: 98Dr2f99xugfjDVIx8LozceWfW8.crl (hash: lJu3EwD9brRXZipk0CPo7bo8EI4WooPQlnJGZSE0T2s=)
                          2: PhYlTTJSDAG5ZShmlzAGSwIOBLM.roa (hash: v304FWDl/pr5++u+nRKS1u+LXVotGD3ulsE5/EGGhSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:e8:2d:35:0c:55:b4:a3:3a:9d:9e:8c:91:81:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
        Validity
            Not Before: Jul 23 22:00:52 2026 GMT
            Not After : Jul 24 22:00:52 2026 GMT
        Subject: CN=1fd67fa0c5f8cf5f62f8b2ae316ece46dd255f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:c1:c4:12:26:ce:48:54:4e:db:91:48:e0:
                    f2:c3:0d:81:6c:b2:af:7f:69:9d:b7:5e:00:ab:65:
                    88:56:39:e7:0f:05:77:c0:66:c9:8f:b0:45:ce:13:
                    9a:34:96:c9:c0:85:7e:1d:42:d8:8b:dc:f5:bb:55:
                    90:6b:0c:49:f8:05:27:58:3b:62:ef:65:b0:fe:4f:
                    03:67:44:3b:d6:6b:3b:67:b8:98:d5:84:14:48:82:
                    8a:58:67:60:7b:1f:57:65:d4:a0:f3:c2:54:10:85:
                    85:1c:f1:82:cd:0d:d1:37:d5:61:ea:29:06:e4:c3:
                    7b:1b:b9:05:1d:03:d8:84:7f:7a:5b:bf:7e:e3:7b:
                    8e:4b:a0:29:39:a8:28:f6:c9:32:a1:0f:ca:81:63:
                    1f:4a:ff:e9:bb:db:de:db:e5:68:80:27:32:5e:93:
                    b4:e9:ea:88:cf:79:2c:01:a6:65:03:1d:80:02:27:
                    61:97:4c:34:e1:0d:93:95:f2:d5:0a:d6:4a:d7:78:
                    00:8d:65:c5:32:22:ab:5d:c8:f9:6a:ac:13:7a:b5:
                    94:a3:a1:d1:fe:67:2b:21:2e:41:b3:90:19:48:3e:
                    05:b5:6d:32:d1:56:47:26:cc:6e:2c:39:45:0c:01:
                    d3:5e:bc:20:23:b6:b9:2d:9c:e1:47:00:e2:b6:62:
                    18:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D6:7F:A0:C5:F8:CF:5F:62:F8:B2:AE:31:6E:CE:46:DD:25:5F:1E
            X509v3 Authority Key Identifier:
                keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8c:96:5a:8c:66:36:e6:7a:dd:2e:b7:a1:e8:4f:95:a6:82:
         52:6a:88:f4:52:61:a4:82:ec:c7:ca:07:81:1e:03:0a:d3:2f:
         3a:53:dc:26:a5:b0:64:d2:5c:4c:75:4d:92:91:69:62:c3:ea:
         8f:7b:db:13:0e:0c:f4:5f:d9:86:12:2b:d9:a5:c7:21:0b:58:
         f2:a5:af:70:ad:8a:64:7e:33:97:09:20:4f:91:b3:51:70:e6:
         f7:2b:c0:25:7a:76:97:3c:19:ed:42:e0:c3:53:9e:58:b3:34:
         63:14:6a:c6:f0:f8:f3:17:9b:01:0d:b8:f7:e5:9f:f7:0c:d1:
         ed:d6:90:33:b0:b3:99:0f:ae:ff:75:e9:76:12:21:a6:0e:18:
         03:9e:5d:dc:6d:37:79:a0:10:1c:0b:aa:b4:26:a5:58:53:c6:
         04:ce:43:f1:3c:68:95:1d:9d:3a:0f:1a:64:cd:49:75:b6:fc:
         f2:37:11:17:10:40:1f:c2:65:c6:f1:98:6c:96:ab:82:c3:7d:
         65:25:46:f3:7d:a3:b7:98:a3:58:25:55:dc:b9:c5:12:05:87:
         09:d3:b5:58:73:06:59:e6:39:f2:15:4d:a7:b6:93:18:fc:76:
         36:ea:5c:3d:b3:2b:5a:2e:be:c9:b0:7f:f0:64:0a:2d:6a:4e:
         38:cb:ea:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/ugtNQxVtKM6nZ6MkYGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YzBlYmQ5ZmY3ZGM2ZTgxZjhjMzU0OGM3YzJlOGNkYzc5
NjdkNmYwHhcNMjYwNzIzMjIwMDUyWhcNMjYwNzI0MjIwMDUyWjAzMTEwLwYDVQQD
EygxZmQ2N2ZhMGM1ZjhjZjVmNjJmOGIyYWUzMTZlY2U0NmRkMjU1ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgfBxBImzkhUTtuRSODyww2BbLKv
f2mdt14Aq2WIVjnnDwV3wGbJj7BFzhOaNJbJwIV+HULYi9z1u1WQawxJ+AUnWDti
72Ww/k8DZ0Q71ms7Z7iY1YQUSIKKWGdgex9XZdSg88JUEIWFHPGCzQ3RN9Vh6ikG
5MN7G7kFHQPYhH96W79+43uOS6ApOago9skyoQ/KgWMfSv/pu9ve2+VogCcyXpO0
6eqIz3ksAaZlAx2AAidhl0w04Q2TlfLVCtZK13gAjWXFMiKrXcj5aqwTerWUo6HR
/mcrIS5Bs5AZSD4FtW0y0VZHJsxuLDlFDAHTXrwgI7a5LZzhRwDitmIYSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/Wf6DF+M9fYviyrjFuzkbdJV8eMB8GA1UdIwQY
MBaAFPfA69n/fcboH4w1SMfC6M3Hln1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOThEcjJmOTl4dWdmakRWSXg4TG96Y2VXZlc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMzY4NGEtNDUyNS00NzZmLThjNDgt
NjlkNzFiZjJkMzUzLzEvOThEcjJmOTl4dWdmakRWSXg4TG96Y2VXZlc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMzY4NGEtNDUyNS00NzZmLThjNDgtNjlkNzFiZjJkMzUz
LzEvOThEcjJmOTl4dWdmakRWSXg4TG96Y2VXZlc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoyWWoxm
NuZ63S63oehPlaaCUmqI9FJhpILsx8oHgR4DCtMvOlPcJqWwZNJcTHVNkpFpYsPq
j3vbEw4M9F/ZhhIr2aXHIQtY8qWvcK2KZH4zlwkgT5GzUXDm9yvAJXp2lzwZ7ULg
w1OeWLM0YxRqxvD48xebAQ249+Wf9wzR7daQM7CzmQ+u/3XpdhIhpg4YA55d3G03
eaAQHAuqtCalWFPGBM5D8TxolR2dOg8aZM1Jdbb88jcRFxBAH8JlxvGYbJargsN9
ZSVG832jt5ijWCVV3LnFEgWHCdO1WHMGWeY58hVNp7aTGPx2NupcPbMrWi6+ybB/
8GQKLWpOOMvq/Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:44 2026 by rpki-client