Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
File:                     1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json)
Hash identifier:          AIxvz7dPCTy9UfODX4T0nfP6SBwjjviHUHiwQ2ndPSc=
Subject key identifier:   23:98:F0:33:35:AB:62:12:AC:D1:F0:7C:45:83:7D:01:24:79:0C:8D
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       019F90C83196FE74480A7222135F18454C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
Manifest number:          19D0
Signing time:             Thu 23 Jul 2026 21:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:06 +0000
Files and hashes:         1: 1-_yOHxDowuUEcsMT-tBSHJNawJY.roa (hash: OkEE2PY+HxH7AS4Wef2NDEm88il1r3tB4z1trxdzMcY=)
                          2: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: MowRIEI3O9BniQ4uOVpLuzXgQzWCcVejZkan/rX+pAU=)
                          3: 1vy2Zod5icTuhsQoU0EnDjOvBUw.roa (hash: lJYkGyyhIavQAOFGfkLnoEQo2R64Z5o6AfYNpKGslCE=)
                          4: 3J_CxMgmJXuVSnvK_SwiuKDZQUc.roa (hash: e33I6eVGoqxWrHvmScm9q4ErMPJHZ8jH0FBrEufjZp8=)
                          5: 6sT_2wW3QFQmWTC2CM0vH6Hbq7E.roa (hash: TDLoh7DszsOvKZFOmyvLjh7bfnLG215xsT9A8ZTykgo=)
                          6: 8gJt_vKgY7RalSb-2BGe533Itg8.roa (hash: SlU8QzhG9LmIVc3LENP/NU0v6qpC64nU8O2T4x7X/MA=)
                          7: ASvKzZxweZT7xHuni0eKcHpcjqU.roa (hash: 4YMxscW7TktQGLKn19P50CYxgYAoxEYLDNh2Yo+uAZs=)
                          8: BXsYcbjTxRZ5Rq9pCsvx7EKXBXE.roa (hash: fDsxTkNxo0dsPCuB6RQRrUNQrvhghUZtv/5lAhqvN8s=)
                          9: FgdvpoQS9eNGBCF7vb9OQ805L4w.roa (hash: qPGoYa/8WfjiLv4BgmlM7xbw8t368ZlcAuc0Wqq0xog=)
                          10: Gsh7wu04p9ODvC2NV_A1Roh2Qd8.roa (hash: kD9fJwgoxSXQISK6GThZF24PkPBOrX99sD40C0cTkOU=)
                          11: IxwIjHVYTFyVPPJeuiO1JpcCvzM.roa (hash: uGsI2smQZDACq5TGrMadh8kVvnRLPaTcj/HGRS+HaPA=)
                          12: LXOlrFf8_l83rpmn17vhLFJbiZM.roa (hash: sNb9fSP4DWs/c7lN80M3XZoZwHMjGq02DY0II5j0Qyw=)
                          13: OfWV2U6d2G66IUWsrNxQqrV7mss.roa (hash: gASQVd+Sh51sow2h+7M1wSuBugvFozeRnIy6awd7pEU=)
                          14: SAtVAePJhWqo0wutfiUY2R4nPhI.roa (hash: 0H4+3p93lCzGpK1JwDK4bkQfPmCv/xN0G8ejzBatka4=)
                          15: UhjMuilgxrHuJbG_v5PNxnq08SY.roa (hash: Xd2IZu005wTJgMzbjP6ZPuNUygMnfEV45FJoAZWWctE=)
                          16: _RlUaty7XFL7Cg1Bd_uBGGhGjOQ.roa (hash: qwy34usdJCqXP9Il0XAoY9RGd5uIHfbG7rpjrxu69io=)
                          17: hHFL6YvmkxeC88wNUSyE--wEbwg.roa (hash: oRWVW/Ew2m5MAblBqbb+qw5rCChK2C1xyIO8/seBpWQ=)
                          18: jX6P-bHofIqjGsTJnOwPDX7xdQE.roa (hash: a9lEvQ6DaP+YBlQpn96SMBqrqZvPXdiisAwCLDojp1s=)
                          19: kIwcjzINW8dxv0n9475H5UAlv-o.roa (hash: z7kthu14PX9eFygYlQs12XpkisLRPxXCnKfsTXiY9WE=)
                          20: qKKybqkrLx3Ya1--kbP2_lmbPEk.roa (hash: uTZzIjPiBF1BZfJxXa4Io6x8P1a8OROcC2WIKx0Gejk=)
                          21: svBR3bGWVaZYfi0KyiWyrD9Uw4k.roa (hash: mBYHUbx1m9DpD1cLPkr3K0AOJjiELWaZ7tIIWQo2etY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:31:96:fe:74:48:0a:72:22:13:5f:18:45:4c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: Jul 23 21:01:06 2026 GMT
            Not After : Jul 24 21:01:06 2026 GMT
        Subject: CN=2398f03335ab6212acd1f07c45837d0124790c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e9:26:bb:60:4a:59:3c:b9:f1:65:e7:96:4b:
                    6d:a3:b4:9d:08:13:34:50:2d:78:18:96:dd:b4:00:
                    fa:2d:67:2d:c0:af:e6:b4:73:2a:7d:b4:50:2e:fd:
                    41:19:d2:ae:b6:f6:16:dd:1b:6c:a2:2c:e8:5c:ca:
                    fe:58:6e:fe:c3:93:a9:53:fe:47:a2:b0:3d:f6:8a:
                    55:aa:b0:7d:cc:18:ba:78:13:6e:18:e1:bd:e8:e6:
                    23:90:64:0d:d2:f3:9b:e4:9a:08:7a:c7:9b:80:e1:
                    e4:44:7d:8b:4f:93:84:15:c2:b2:44:b2:4e:06:b5:
                    4a:d0:e5:df:bf:61:1d:14:3d:2a:c0:49:c5:fa:69:
                    bb:48:39:6e:d6:15:79:28:8b:b1:8b:30:24:6d:22:
                    16:9d:c6:d0:13:3e:5a:8b:61:aa:08:df:10:d6:98:
                    fc:69:0b:05:7f:13:1e:81:aa:7e:96:8f:df:20:f7:
                    6e:dd:69:82:ca:ad:07:80:ad:b5:0a:ae:24:eb:59:
                    95:4b:d5:17:3c:19:df:96:f1:47:9b:64:4f:bb:99:
                    28:61:ac:60:f7:a1:b5:e9:4e:e8:57:4d:59:34:6f:
                    b0:56:81:79:b1:43:17:ca:3d:74:c3:d1:42:8a:f0:
                    7d:ef:cd:bb:91:d2:ae:d9:07:2c:6b:f8:8a:f1:bf:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:98:F0:33:35:AB:62:12:AC:D1:F0:7C:45:83:7D:01:24:79:0C:8D
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:72:13:1f:87:6b:55:69:ed:77:39:36:6e:27:30:80:57:
         ab:4f:57:55:09:5b:43:d9:c8:4a:96:a6:63:78:8f:4e:50:b8:
         dd:4e:f1:f2:de:23:d7:2a:f8:f9:5b:22:bf:2f:8d:0f:40:59:
         82:74:e8:3b:6f:fd:58:8d:25:dd:ec:b0:8f:90:dd:63:62:37:
         0d:27:9c:39:18:c7:bf:a2:d7:97:bf:2e:b7:a0:30:4a:3e:90:
         82:c9:b5:36:e8:26:e0:ad:bc:b6:ca:2f:a4:72:ac:db:73:83:
         87:88:61:3a:6e:d6:f4:d3:91:75:42:67:91:b4:be:43:20:85:
         b1:b5:22:45:e5:e4:83:0e:d0:ec:19:e9:c6:5a:7e:f0:d5:44:
         f6:3f:19:34:90:af:14:15:b6:51:f6:f6:0e:97:05:89:43:74:
         53:a5:42:64:5f:1c:d4:f3:06:cf:bf:4a:39:d2:2f:e1:56:6c:
         d4:51:8d:1f:45:be:71:9b:a6:00:b9:81:43:55:5f:a4:d2:f9:
         74:f9:0a:91:ac:42:e6:98:31:72:62:83:6f:c2:a9:d9:02:5b:
         99:98:c6:0e:57:aa:31:30:8f:2b:d6:a2:c5:69:59:53:87:9b:
         df:59:21:c5:a5:f7:b0:94:43:2a:82:45:2b:bd:d5:e2:19:9f:
         05:3a:85:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:57 2026 by rpki-client