Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File:                     xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier:          r5BjFqFyFxW2ciBBEnaYXnhqsguh68I1u48EVKszBKU=
Subject key identifier:   28:3D:7E:2D:BF:46:DD:B8:14:2B:9E:FE:B8:65:32:8F:CA:8D:D3:7D
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer:       /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial:       019F8F476C28E838DAAF1D686F85C6FFC89A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number:          19D8
Signing time:             Thu 23 Jul 2026 14:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:50 +0000
Files and hashes:         1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
                          2: DYkV04gki79D3asculnZRcHU37Q.roa (hash: qlIkHsV6HBqGkc4tTxIBB1jTZcTStbiHUpGcVOphuGk=)
                          3: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (hash: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=)
                          4: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
                          5: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: ZO8pXqQ4diDrom3rSUii9Qzku0sRNFPp0MtmhlqRKAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:6c:28:e8:38:da:af:1d:68:6f:85:c6:ff:c8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
        Validity
            Not Before: Jul 23 14:00:50 2026 GMT
            Not After : Jul 24 14:00:50 2026 GMT
        Subject: CN=283d7e2dbf46ddb8142b9efeb865328fca8dd37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:7e:d6:6f:44:05:ad:c7:e3:da:46:71:9c:
                    a9:fa:76:09:52:f1:f6:07:f6:83:24:b9:c5:1e:0c:
                    fc:27:b8:b2:91:20:e9:57:95:58:b2:74:b5:cd:6a:
                    c1:b5:4e:ac:d5:fa:51:72:7f:df:0c:8a:18:f8:dd:
                    16:75:a9:43:f1:24:c5:d3:37:80:2c:0b:0c:7f:25:
                    fe:c7:47:8a:db:25:7f:e1:a1:a8:e2:50:d2:0d:4c:
                    52:41:4f:1d:4b:f9:bd:09:16:32:20:65:26:fc:68:
                    78:b4:4c:b9:d6:b0:a0:e7:66:4d:8d:08:2e:46:0c:
                    c9:ce:d1:6e:2c:21:f9:18:85:c3:db:98:ab:7c:bc:
                    bd:f5:2c:28:a4:d8:b2:fb:81:99:cd:92:f4:6d:e2:
                    e3:37:ae:4f:4c:9e:12:d9:e8:28:e6:39:44:12:7b:
                    53:3e:df:34:36:45:a9:87:44:6c:e8:ba:32:a3:85:
                    1c:18:f7:99:a5:e1:d6:61:80:ad:80:8b:51:38:d6:
                    3e:3f:22:42:e0:60:7b:fc:63:37:40:e2:45:18:71:
                    43:06:dc:21:98:b3:09:6f:14:b0:5d:0e:8f:96:5e:
                    e9:b5:02:ef:0e:ea:f4:a3:78:20:0c:85:f6:d8:0c:
                    70:e4:73:ab:d3:c1:76:b4:14:40:f7:e6:fb:dd:57:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3D:7E:2D:BF:46:DD:B8:14:2B:9E:FE:B8:65:32:8F:CA:8D:D3:7D
            X509v3 Authority Key Identifier:
                keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c6:a9:5f:a1:1f:1b:48:d4:dd:71:eb:a7:55:15:7e:a1:d0:
         23:e1:3b:f4:ac:10:c0:63:a7:20:68:6f:94:f1:d8:ae:87:41:
         60:d7:2f:be:49:87:c8:8b:0a:d6:8c:88:c1:83:0d:85:b0:6d:
         0b:fa:54:40:b7:6e:7c:78:2e:c1:32:b5:33:a4:f0:aa:e3:09:
         e7:13:a3:b8:a4:be:d5:da:2d:83:6c:1a:16:24:a5:cc:19:d8:
         28:cd:89:1f:a5:d8:66:16:11:1f:11:f5:cf:06:1f:0e:f5:50:
         3c:23:80:37:53:b2:a7:db:04:5c:28:f1:dc:79:2b:0f:40:69:
         16:ec:88:53:f7:94:21:90:1a:30:73:3a:5e:8d:a6:83:2c:82:
         00:60:29:e3:c1:67:f7:58:c0:89:f8:77:62:d2:20:92:dc:c3:
         9b:14:99:c8:e6:46:aa:74:aa:32:5d:79:3e:fc:62:02:3e:b3:
         0e:18:2d:fc:e0:3d:99:d1:5e:ab:1c:f2:f9:00:8a:4b:7c:6d:
         30:12:bc:bc:9e:55:4f:4c:fe:90:cb:de:0b:bd:a2:9d:54:d6:
         95:b1:e6:08:1a:46:22:59:5c:7c:04:aa:05:f7:a6:5f:d6:ba:
         38:01:ed:50:ba:5e:fb:3f:aa:90:35:36:47:1e:58:9d:a5:31:
         cc:19:b5:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR2wo6Djarx1ob4XG/8iaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh
Y2VjNmUwHhcNMjYwNzIzMTQwMDUwWhcNMjYwNzI0MTQwMDUwWjAzMTEwLwYDVQQD
EygyODNkN2UyZGJmNDZkZGI4MTQyYjllZmViODY1MzI4ZmNhOGRkMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmZ+1m9EBa3H49pGcZyp+nYJUvH2
B/aDJLnFHgz8J7iykSDpV5VYsnS1zWrBtU6s1fpRcn/fDIoY+N0WdalD8STF0zeA
LAsMfyX+x0eK2yV/4aGo4lDSDUxSQU8dS/m9CRYyIGUm/Gh4tEy51rCg52ZNjQgu
RgzJztFuLCH5GIXD25irfLy99SwopNiy+4GZzZL0beLjN65PTJ4S2ego5jlEEntT
Pt80NkWph0Rs6Loyo4UcGPeZpeHWYYCtgItRONY+PyJC4GB7/GM3QOJFGHFDBtwh
mLMJbxSwXQ6Pll7ptQLvDur0o3ggDIX22Axw5HOr08F2tBRA9+b73VcF5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCg9fi2/Rt24FCue/rhlMo/KjdN9MB8GA1UdIwQY
MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt
YmEzNzUxMTQwNGMyLzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy
LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMapX6Ef
G0jU3XHrp1UVfqHQI+E79KwQwGOnIGhvlPHYrodBYNcvvkmHyIsK1oyIwYMNhbBt
C/pUQLdufHguwTK1M6TwquMJ5xOjuKS+1dotg2waFiSlzBnYKM2JH6XYZhYRHxH1
zwYfDvVQPCOAN1Oyp9sEXCjx3HkrD0BpFuyIU/eUIZAaMHM6Xo2mgyyCAGAp48Fn
91jAifh3YtIgktzDmxSZyOZGqnSqMl15PvxiAj6zDhgt/OA9mdFeqxzy+QCKS3xt
MBK8vJ5VT0z+kMveC72inVTWlbHmCBpGIllcfASqBfemX9a6OAHtULpe+z+qkDU2
Rx5YnaUxzBm1DA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:50 2026 by rpki-client