Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
File:                     Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft (raw, json)
Hash identifier:          ewLKso8Aqm3V/gWMaH8XfXhiZfE3YixlVulHYW4piyI=
Subject key identifier:   DA:7E:B9:06:72:1D:55:1F:73:98:CB:73:A1:28:9B:57:93:EB:26:46
Authority key identifier: 17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78
Certificate issuer:       /CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
Certificate serial:       019F916C4EAFA446CE19573753DDA762DE65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:22 +0000
Files and hashes:         1: 5xGTfTQ4NQ6rMqpH3tDID_way78.roa (hash: F8H1Pp6BX6Q7UzR7IW00zFxASJYxtUwFmEz2td8WBTs=)
                          2: BWH36-bel5gTA_6A5H2Vs5lFhpM.roa (hash: w2VVqzjO7mvV0ab7JuRfyw+tb/CiyS8XdVuLVmyQYFc=)
                          3: Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl (hash: AXuy2rkQG9KdLaVAiXkqkw5i38X0gmoqmdiU/HWrESw=)
                          4: TFrFCFoNGOrEr-0X10FQhSCvIIM.roa (hash: 7CgOjycwa7iUcHPLxP4Ia/ozXApop9buE9JwEyEF3YM=)
                          5: uDov7n4fgQ3mm1Y0HBFFD_S7QcQ.roa (hash: TVOgxQIfQpHq2V2Hd2KnY6QeGGGPCyJ5eRO9EBWn8xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:4e:af:a4:46:ce:19:57:37:53:dd:a7:62:de:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
        Validity
            Not Before: Jul 24 00:00:22 2026 GMT
            Not After : Jul 25 00:00:22 2026 GMT
        Subject: CN=da7eb906721d551f7398cb73a1289b5793eb2646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b2:7d:79:3d:b6:27:08:2d:da:16:f9:ec:33:
                    71:7c:fa:14:fa:f1:4b:6c:8e:22:84:58:d9:c6:6e:
                    c9:d4:36:43:4b:1a:53:f8:f8:4a:21:5d:6b:0a:b6:
                    bd:2e:97:1a:84:c0:55:fe:33:f4:41:3c:7e:3c:8e:
                    01:ac:cc:93:3f:79:70:a0:e6:77:4c:d1:e8:93:9e:
                    83:36:1b:cb:0c:fb:57:8a:5e:e6:f9:e0:52:84:ba:
                    c4:ac:e6:35:a7:09:ef:07:98:e3:eb:f3:0a:1d:54:
                    99:53:ef:f4:14:42:36:9f:45:09:90:6b:e2:ea:47:
                    47:0b:b4:64:8f:73:d4:b8:69:bd:c9:12:98:65:c1:
                    79:c6:66:93:e8:68:34:f5:db:7b:6f:d9:83:91:fb:
                    cb:7b:36:b8:e8:65:ba:d6:73:74:f4:7d:28:11:a8:
                    05:57:9f:20:f1:f5:97:a5:9a:a7:4a:4d:9f:8f:b9:
                    ff:40:0f:ec:95:48:2c:5b:f2:b1:57:0f:82:89:7b:
                    06:69:4c:66:3f:58:f9:1f:6c:70:03:77:a7:93:10:
                    a4:1c:99:cf:c9:dc:66:41:75:46:d5:ea:cd:ce:95:
                    23:6e:f9:da:6f:a4:69:4b:fd:17:d0:1f:a6:9e:df:
                    81:f8:9f:2f:e9:41:87:95:7a:b0:3b:7b:64:07:e3:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7E:B9:06:72:1D:55:1F:73:98:CB:73:A1:28:9B:57:93:EB:26:46
            X509v3 Authority Key Identifier:
                keyid:17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:80:4f:ba:dc:42:7c:be:77:00:d7:b3:31:97:39:9c:61:3e:
         c2:6b:3c:5a:45:97:e7:a2:d9:73:a2:13:c1:a1:f3:b9:a5:c1:
         1d:69:f4:3e:00:40:fa:4f:05:23:d4:02:44:c0:6b:68:dd:15:
         67:0b:50:83:d1:5a:a1:b1:ca:c2:00:ea:68:c6:06:7f:27:d2:
         1f:76:c5:44:4a:45:24:34:2d:e1:4b:a7:98:a1:b1:c8:b5:36:
         12:bc:86:70:c7:a7:bb:c9:8b:52:37:c5:10:bf:de:bb:a5:94:
         1e:63:05:4c:1c:f9:d0:34:1a:d2:51:ca:00:07:40:b0:40:42:
         30:72:7d:c2:ef:c2:a0:a7:83:39:38:4b:56:ce:e8:45:c1:e7:
         e7:d9:ee:f4:06:7b:55:69:22:ab:ba:bb:b8:c7:c5:bb:ab:81:
         2c:59:af:70:62:09:e8:63:66:81:27:3d:36:60:27:9b:ea:93:
         7d:52:6b:33:f1:ce:2a:69:4f:25:c9:ce:25:0d:d8:bd:65:be:
         ce:2b:b4:37:b9:6f:e7:02:69:78:e1:c3:e9:93:3e:0c:fa:28:
         cb:ef:7d:db:7a:69:6e:f1:d4:a2:4b:46:bf:e6:16:cf:a0:c3:
         19:d8:08:ce:f9:7f:48:ac:e1:29:7e:9d:d6:31:cc:0a:ab:b8:
         d0:8c:c6:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbE6vpEbOGVc3U92nYt5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MmRhOWE3YmJjOGUxNjM2OWI0MDZiZDI1NmUyYTMwMDJj
YmRkNzgwHhcNMjYwNzI0MDAwMDIyWhcNMjYwNzI1MDAwMDIyWjAzMTEwLwYDVQQD
EyhkYTdlYjkwNjcyMWQ1NTFmNzM5OGNiNzNhMTI4OWI1NzkzZWIyNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rJ9eT22Jwgt2hb57DNxfPoU+vFL
bI4ihFjZxm7J1DZDSxpT+PhKIV1rCra9LpcahMBV/jP0QTx+PI4BrMyTP3lwoOZ3
TNHok56DNhvLDPtXil7m+eBShLrErOY1pwnvB5jj6/MKHVSZU+/0FEI2n0UJkGvi
6kdHC7Rkj3PUuGm9yRKYZcF5xmaT6Gg09dt7b9mDkfvLeza46GW61nN09H0oEagF
V58g8fWXpZqnSk2fj7n/QA/slUgsW/KxVw+CiXsGaUxmP1j5H2xwA3enkxCkHJnP
ydxmQXVG1erNzpUjbvnab6RpS/0X0B+mnt+B+J8v6UGHlXqwO3tkB+NniwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNp+uQZyHVUfc5jLc6Eom1eT6yZGMB8GA1UdIwQY
MBaAFBctqae7yOFjabQGvSVuKjACy914MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnkycHA3dkk0V05wdEFhOUpXNHFNQUxMM1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMt
MjdmMmJjMTYyYTA3LzEvRnkycHA3dkk0V05wdEFhOUpXNHFNQUxMM1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMtMjdmMmJjMTYyYTA3
LzEvRnkycHA3dkk0V05wdEFhOUpXNHFNQUxMM1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoBPutxC
fL53ANezMZc5nGE+wms8WkWX56LZc6ITwaHzuaXBHWn0PgBA+k8FI9QCRMBraN0V
ZwtQg9FaobHKwgDqaMYGfyfSH3bFREpFJDQt4UunmKGxyLU2EryGcMenu8mLUjfF
EL/eu6WUHmMFTBz50DQa0lHKAAdAsEBCMHJ9wu/CoKeDOThLVs7oRcHn59nu9AZ7
VWkiq7q7uMfFu6uBLFmvcGIJ6GNmgSc9NmAnm+qTfVJrM/HOKmlPJcnOJQ3YvWW+
ziu0N7lv5wJpeOHD6ZM+DPooy+9923ppbvHUoktGv+YWz6DDGdgIzvl/SKzhKX6d
1jHMCqu40IzGaw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:24 2026 by rpki-client