Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
File:                     2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json)
Hash identifier:          +V6HIl7Uxv3Va/a1XOsyp2OAFJRnQM9KUQwYHikqa/8=
Subject key identifier:   B8:92:C6:53:20:01:A3:33:49:5A:E7:49:C1:0E:3C:08:7F:35:C6:EF
Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Certificate issuer:       /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Certificate serial:       019F9091616EA804D1F146D45E839804DDBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
Manifest number:          0621
Signing time:             Thu 23 Jul 2026 20:01:14 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:14 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:14 +0000
Files and hashes:         1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: Gag624ZKSIujfV5JIFdymO/Xt6NbfQrUuWi74PEZ1Vo=)
                          2: UZ8q061lhr49y8UQ7iXkyIxsq6A.roa (hash: 80cHA2mR1v8ITCV1mpXv6NqG4jtnNEE6uxd13vN06FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:61:6e:a8:04:d1:f1:46:d4:5e:83:98:04:dd:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
        Validity
            Not Before: Jul 23 20:01:14 2026 GMT
            Not After : Jul 24 20:01:14 2026 GMT
        Subject: CN=b892c6532001a333495ae749c10e3c087f35c6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:ec:69:fa:ba:53:71:33:5d:e4:38:bb:00:
                    96:76:36:69:51:47:bb:b7:8d:e5:08:a3:59:b2:2d:
                    e0:b8:f6:b4:3c:17:63:30:9c:a6:7b:bd:10:e3:7c:
                    6c:8e:18:06:f8:35:ff:70:a4:67:41:bf:c0:8c:9c:
                    64:7d:83:4c:29:76:18:06:06:16:4c:b2:30:a2:1f:
                    3b:13:be:5e:48:ca:16:39:42:a4:25:79:cb:8e:cf:
                    41:d5:2e:87:9d:3c:2a:e5:4b:f6:4e:d5:4f:19:11:
                    db:ab:31:ec:01:c1:65:3a:de:3e:9f:1a:9b:74:e9:
                    54:53:4d:6c:7c:18:11:86:17:70:09:d0:43:57:2c:
                    c7:0b:6a:a9:94:f7:75:e0:de:24:22:0b:c2:61:e8:
                    d8:dd:1b:6d:2c:f5:8e:87:eb:9a:dc:4a:cb:0e:50:
                    7e:21:3d:d9:1f:77:c3:54:49:9a:e9:10:10:68:55:
                    52:0e:91:07:a0:89:c4:9c:e1:34:f0:98:1a:1b:e6:
                    3d:3a:dc:19:95:18:e2:24:57:1c:10:7c:f0:9d:a9:
                    ac:69:2a:18:b3:5d:44:5f:ac:f7:8e:79:ec:ca:9a:
                    4b:bb:8b:dc:db:75:7c:bc:81:b9:d7:aa:c2:64:aa:
                    8a:8a:de:27:16:fb:51:d6:56:fa:0b:6c:65:6f:21:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:92:C6:53:20:01:A3:33:49:5A:E7:49:C1:0E:3C:08:7F:35:C6:EF
            X509v3 Authority Key Identifier:
                keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:04:d6:48:aa:99:f5:ff:15:e7:06:27:53:16:1c:40:6d:dc:
         38:eb:85:51:94:c0:a0:e3:92:b1:ec:ad:ff:29:6f:2f:29:1b:
         42:9d:03:0c:45:81:8f:af:30:5c:b6:08:22:fd:b5:c7:39:bc:
         e2:1c:65:75:8d:f6:73:e8:d3:5c:ae:41:a9:fc:68:99:3c:54:
         07:09:df:44:a3:dc:6b:a9:c1:f9:8e:a6:69:d9:22:54:22:b5:
         07:98:e8:cc:58:f2:db:09:29:31:d2:b3:b4:f8:da:be:15:ce:
         02:04:54:a4:68:06:91:44:37:d5:a1:7b:19:23:0d:ae:88:53:
         9e:f7:dc:a2:80:24:ca:29:ce:b8:41:c4:fe:61:6f:0a:7d:52:
         86:f2:cb:66:d2:ac:c8:5c:7d:4c:4a:1a:be:88:8f:4b:a2:27:
         cb:93:9a:c6:46:94:94:bb:96:25:9b:b2:12:34:48:ad:ef:fd:
         ab:2b:26:d4:2a:22:93:2e:b7:ad:a3:5c:6c:15:05:e5:ea:27:
         9b:3e:5b:3f:b6:a5:c8:e8:29:4f:b7:6b:bd:9f:8f:ac:65:f6:
         df:eb:91:d6:e7:76:99:52:0f:9d:84:f7:02:48:f2:d8:50:3b:
         52:ce:80:42:ae:2e:e8:72:0a:7f:30:1d:b2:f0:33:45:7c:8e:
         e4:71:fc:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkWFuqATR8UbUXoOYBN2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWUyZGU1NGRhMjhjNzNmMTliM2UwNGVmOTU3NGU5OTA1
N2YxYTIwHhcNMjYwNzIzMjAwMTE0WhcNMjYwNzI0MjAwMTE0WjAzMTEwLwYDVQQD
EyhiODkyYzY1MzIwMDFhMzMzNDk1YWU3NDljMTBlM2MwODdmMzVjNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKLsafq6U3EzXeQ4uwCWdjZpUUe7
t43lCKNZsi3guPa0PBdjMJyme70Q43xsjhgG+DX/cKRnQb/AjJxkfYNMKXYYBgYW
TLIwoh87E75eSMoWOUKkJXnLjs9B1S6HnTwq5Uv2TtVPGRHbqzHsAcFlOt4+nxqb
dOlUU01sfBgRhhdwCdBDVyzHC2qplPd14N4kIgvCYejY3RttLPWOh+ua3ErLDlB+
IT3ZH3fDVEma6RAQaFVSDpEHoInEnOE08JgaG+Y9OtwZlRjiJFccEHzwnamsaSoY
s11EX6z3jnnsyppLu4vc23V8vIG516rCZKqKit4nFvtR1lb6C2xlbyFjawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiSxlMgAaMzSVrnScEOPAh/NcbvMB8GA1UdIwQY
MBaAFNquLeVNooxz8Zs+BO+VdOmQV/GiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMt
NjAwOGU2MGNkMzBiLzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMtNjAwOGU2MGNkMzBi
LzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdATWSKqZ
9f8V5wYnUxYcQG3cOOuFUZTAoOOSseyt/ylvLykbQp0DDEWBj68wXLYIIv21xzm8
4hxldY32c+jTXK5BqfxomTxUBwnfRKPca6nB+Y6madkiVCK1B5jozFjy2wkpMdKz
tPjavhXOAgRUpGgGkUQ31aF7GSMNrohTnvfcooAkyinOuEHE/mFvCn1ShvLLZtKs
yFx9TEoavoiPS6Iny5OaxkaUlLuWJZuyEjRIre/9qysm1Coiky63raNcbBUF5eon
mz5bP7alyOgpT7drvZ+PrGX23+uR1ud2mVIPnYT3Akjy2FA7Us6AQq4u6HIKfzAd
svAzRXyO5HH8oA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:06 2026 by rpki-client