Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File:                     aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier:          i2q6NB8sdfaLMAZf34/f9d3Bh/tOsPbQzGLNLAojHcg=
Subject key identifier:   3E:AC:30:79:DB:2E:CF:A3:E7:1C:43:F4:80:FD:32:C0:49:19:CE:07
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer:       /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial:       019F8F7ED4191B58B60F288B6259A6B235CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number:          19CD
Signing time:             Thu 23 Jul 2026 15:01:21 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:21 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:21 +0000
Files and hashes:         1: HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa (hash: ygy820xgpaVNMBFtptvsRnnaNpcXzgsBO0L4W7uH2bw=)
                          2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: GW06pIpZQ46vvODnCt57vcKS2wokEk9GfD+x7GP2tHU=)
                          3: npOqAYvnANeWVx-N9kdesV15avg.roa (hash: drW0amYbYWP6y8FhNua3sy9aXQKsIxf1FhuvgPhf3tY=)
                          4: qgrlS83bNE9MYEyjpHkdusYjIJs.roa (hash: qVLwJn1cT6OqEeJhayLqN8KErzeBq7qBWaQJP1ttmcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:d4:19:1b:58:b6:0f:28:8b:62:59:a6:b2:35:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
        Validity
            Not Before: Jul 23 15:01:21 2026 GMT
            Not After : Jul 24 15:01:21 2026 GMT
        Subject: CN=3eac3079db2ecfa3e71c43f480fd32c04919ce07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:fd:52:e4:63:43:89:5d:e5:03:0a:02:ea:
                    2d:91:4c:1a:2e:0c:b9:9f:f5:41:50:62:dd:1a:42:
                    ab:d1:74:f9:89:2b:f0:14:83:51:43:69:67:8a:00:
                    76:74:e0:8e:4c:a2:05:6f:21:40:37:81:fd:e0:9c:
                    ea:3d:6e:ea:b1:49:15:80:dd:6f:0a:da:46:c1:2d:
                    db:97:cc:26:4f:1f:2d:b5:59:92:7c:be:aa:ab:c8:
                    4b:8d:9a:05:c2:64:01:cf:68:ae:08:e8:e7:1c:aa:
                    c2:70:d6:5e:05:62:e9:dc:55:a2:06:26:a2:4a:d8:
                    2d:c9:3a:57:25:84:31:3a:a2:ff:a9:b3:aa:33:d7:
                    d8:58:27:78:54:44:9d:8f:19:32:98:a8:72:55:e6:
                    f1:d1:fd:7b:a7:99:02:50:40:3f:2a:bd:bd:c1:bd:
                    67:05:17:6e:5a:0d:18:a1:d8:bd:d4:3d:b2:eb:27:
                    81:47:62:64:f8:d1:1e:45:8c:52:7b:c0:9a:ff:4b:
                    d7:d2:d1:a2:bd:be:df:bd:65:19:d2:b4:5a:90:ae:
                    68:94:a5:6a:04:3d:d3:11:81:8e:ae:2f:27:07:f9:
                    7f:19:3b:2e:d0:09:16:8a:35:f2:0b:1c:e0:6f:75:
                    c1:cb:9f:f5:c1:0b:df:36:eb:c7:2c:dc:5e:b9:65:
                    fd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AC:30:79:DB:2E:CF:A3:E7:1C:43:F4:80:FD:32:C0:49:19:CE:07
            X509v3 Authority Key Identifier:
                keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:76:d7:bb:cf:c1:32:5f:c8:d7:67:cb:2d:69:88:50:ca:e7:
         2a:98:c5:ec:78:e4:ae:1a:ad:a9:7c:47:32:da:ae:72:e5:7f:
         33:9f:cd:70:8a:66:8a:91:7a:4e:4e:79:08:0b:d8:cb:9f:ce:
         71:f6:6f:ef:f8:0e:e9:97:40:86:22:18:e6:09:8f:30:03:a0:
         eb:fc:c1:41:eb:5c:0c:17:dd:b1:8f:56:56:ae:77:71:65:2b:
         8e:1c:9c:e0:c9:a0:bf:63:5a:8a:b0:18:6f:e4:0e:b6:81:16:
         7f:34:f1:a0:a6:bf:3c:9a:61:c1:66:8e:74:66:5f:a3:4a:29:
         ca:db:63:3b:02:c5:6d:23:24:40:ff:a9:51:ec:38:ba:65:7a:
         c4:00:6b:bf:63:d9:f4:11:c3:c5:f7:56:e6:ad:f2:a4:7c:62:
         7a:84:6a:4c:d7:bd:ca:b8:43:57:87:7f:3e:ef:22:81:38:8c:
         38:2c:33:b1:70:be:98:58:06:c7:ed:31:bc:3b:97:63:97:a7:
         30:f8:04:a2:de:7d:1e:30:af:4c:6c:8f:9a:cd:e1:d4:b5:cc:
         c4:2c:f0:fd:88:a9:08:7d:19:b7:76:32:b2:29:4c:d8:6b:5f:
         47:cc:f1:51:de:23:1a:05:69:04:28:0e:35:27:51:c5:a7:d4:
         28:d6:80:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PftQZG1i2DyiLYlmmsjXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NTc5NzIyYzNhMGNiMGMzMzUxYzU5NWRmYTNkN2VhZDgx
ZjE2YmYwHhcNMjYwNzIzMTUwMTIxWhcNMjYwNzI0MTUwMTIxWjAzMTEwLwYDVQQD
EygzZWFjMzA3OWRiMmVjZmEzZTcxYzQzZjQ4MGZkMzJjMDQ5MTljZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgD9UuRjQ4ld5QMKAuotkUwaLgy5
n/VBUGLdGkKr0XT5iSvwFINRQ2lnigB2dOCOTKIFbyFAN4H94JzqPW7qsUkVgN1v
CtpGwS3bl8wmTx8ttVmSfL6qq8hLjZoFwmQBz2iuCOjnHKrCcNZeBWLp3FWiBiai
StgtyTpXJYQxOqL/qbOqM9fYWCd4VESdjxkymKhyVebx0f17p5kCUEA/Kr29wb1n
BRduWg0Yodi91D2y6yeBR2Jk+NEeRYxSe8Ca/0vX0tGivb7fvWUZ0rRakK5olKVq
BD3TEYGOri8nB/l/GTsu0AkWijXyCxzgb3XBy5/1wQvfNuvHLNxeuWX98wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6sMHnbLs+j5xxD9ID9MsBJGc4HMB8GA1UdIwQY
MBaAFGhXlyLDoMsMM1HFld+j1+rYHxa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mYTgzNmMtMWNkMy00YmE3LWI1OTgt
OWY1NTk3YjU2Yjc2LzEvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9mYTgzNmMtMWNkMy00YmE3LWI1OTgtOWY1NTk3YjU2Yjc2
LzEvYUZlWElzT2d5d3d6VWNXVjM2UFg2dGdmRnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnbXu8/B
Ml/I12fLLWmIUMrnKpjF7HjkrhqtqXxHMtqucuV/M5/NcIpmipF6Tk55CAvYy5/O
cfZv7/gO6ZdAhiIY5gmPMAOg6/zBQetcDBfdsY9WVq53cWUrjhyc4Mmgv2NairAY
b+QOtoEWfzTxoKa/PJphwWaOdGZfo0opyttjOwLFbSMkQP+pUew4umV6xABrv2PZ
9BHDxfdW5q3ypHxieoRqTNe9yrhDV4d/Pu8igTiMOCwzsXC+mFgGx+0xvDuXY5en
MPgEot59HjCvTGyPms3h1LXMxCzw/YipCH0Zt3YysilM2GtfR8zxUd4jGgVpBCgO
NSdRxafUKNaAPg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:00 2026 by rpki-client