Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
File:                     cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json)
Hash identifier:          pvBi+S+vMy88Jixa6w75imnYGD8pOa6mFtY0yxnVCeQ=
Subject key identifier:   7A:53:9A:CF:9F:19:B8:D7:21:2B:0B:38:43:9C:FF:66:02:16:5E:12
Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Certificate issuer:       /CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Certificate serial:       019F91356728AF69B3C66E099A299087119E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
Manifest number:          02E3
Signing time:             Thu 23 Jul 2026 23:00:23 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:23 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:23 +0000
Files and hashes:         1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: PwjVEguAKP8KiC10mTiH0J9FIdygwYU2IrWUwcAUUco=)
                          2: xEYU-K7wenXyYwuEUiZnmFrMZac.roa (hash: gWNLlP9RhlookRQsci7JBvafArIbz1TL4llsI2fvdA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:67:28:af:69:b3:c6:6e:09:9a:29:90:87:11:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
        Validity
            Not Before: Jul 23 23:00:23 2026 GMT
            Not After : Jul 24 23:00:23 2026 GMT
        Subject: CN=7a539acf9f19b8d7212b0b38439cff6602165e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:2d:6e:f1:8b:44:d8:c9:b1:83:f2:70:a3:
                    34:2e:46:7c:5a:31:d3:1b:bc:ab:f5:8c:27:f4:b3:
                    12:b3:9d:60:60:0b:79:55:f6:13:8f:19:56:3d:13:
                    65:ac:97:c7:15:25:fc:cb:c3:52:3a:5f:83:b4:21:
                    50:41:0e:64:44:8f:98:f7:c7:fb:7e:ef:90:b4:d5:
                    ac:aa:61:d1:11:ed:ae:1f:6a:ac:5c:27:ab:c4:a4:
                    14:f7:8d:e6:c3:19:9f:e7:c7:f4:68:d8:b3:6f:f0:
                    bb:ed:17:51:8b:9c:d7:29:7a:7d:4c:2d:13:fb:6b:
                    5e:e8:66:9f:d7:24:b1:cc:3a:5f:b1:c7:0c:23:10:
                    85:2f:5c:b3:4c:b1:32:58:4c:39:54:ad:c8:f1:e0:
                    1d:ce:a2:eb:12:0f:ad:29:6c:50:50:e0:b5:12:6d:
                    6b:2f:79:b8:c6:c0:03:ea:80:d9:c2:e8:7a:6b:75:
                    77:f5:e6:87:54:5f:bf:11:c9:ce:68:d3:f5:e1:a6:
                    3e:b7:70:08:00:6b:be:45:f3:36:2c:87:94:72:91:
                    e3:92:ab:29:ea:59:ed:fe:04:82:b9:54:e3:98:e7:
                    46:bf:ab:0d:e9:b9:45:ce:13:8a:0a:11:8d:8d:b6:
                    3b:5e:e4:76:69:39:fd:2a:06:b9:50:45:17:d2:91:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:53:9A:CF:9F:19:B8:D7:21:2B:0B:38:43:9C:FF:66:02:16:5E:12
            X509v3 Authority Key Identifier:
                keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:82:dd:27:4f:02:a0:97:2a:e5:2f:d6:81:33:ea:a9:54:6a:
         a4:a5:84:5b:ae:4c:d8:2c:3a:3a:00:a6:a4:c2:0b:66:ad:dd:
         fc:b7:6e:5d:bb:c3:e1:66:62:34:d8:98:38:93:20:94:c5:64:
         0b:11:5e:e5:5e:3e:bb:94:25:dc:85:d0:d0:1f:90:69:1d:8c:
         b2:a5:7c:2b:06:05:50:e6:ae:fc:50:27:04:9d:db:5d:6c:d8:
         db:f5:4f:26:bd:b3:5f:b1:18:f4:b2:9f:6e:76:11:ca:96:20:
         32:92:bd:12:34:84:61:3c:bf:7c:b5:97:4b:15:13:73:5c:79:
         82:cc:12:6a:4f:51:c6:90:aa:83:21:cd:c9:50:3a:b2:62:c5:
         4a:20:03:31:db:91:3d:1c:1b:17:da:92:34:79:e1:79:a7:c9:
         56:b5:75:74:ca:05:5e:c1:8c:55:3f:05:a6:0d:ed:09:30:46:
         a7:7c:b3:22:5d:cc:62:2b:a3:0c:c8:4a:ef:f8:77:1d:7a:b6:
         dd:c9:8b:27:74:16:2f:6d:0b:9a:2f:3f:3e:8c:1a:47:52:ca:
         dc:1b:e4:3d:e1:59:f3:e7:09:ba:5d:fa:c7:f8:bd:68:1f:3a:
         f5:a3:a7:61:3a:73:fc:a9:51:16:22:16:03:8b:ec:ec:7f:e6:
         eb:a1:e5:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNWcor2mzxm4JmimQhxGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMGM2MzIzY2Y3MzA5MzBhMDNiMGU0NDYwN2Y2ZmVkZjUy
N2E4YzQwHhcNMjYwNzIzMjMwMDIzWhcNMjYwNzI0MjMwMDIzWjAzMTEwLwYDVQQD
Eyg3YTUzOWFjZjlmMTliOGQ3MjEyYjBiMzg0MzljZmY2NjAyMTY1ZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc8tbvGLRNjJsYPycKM0LkZ8WjHT
G7yr9Ywn9LMSs51gYAt5VfYTjxlWPRNlrJfHFSX8y8NSOl+DtCFQQQ5kRI+Y98f7
fu+QtNWsqmHREe2uH2qsXCerxKQU943mwxmf58f0aNizb/C77RdRi5zXKXp9TC0T
+2te6Gaf1ySxzDpfsccMIxCFL1yzTLEyWEw5VK3I8eAdzqLrEg+tKWxQUOC1Em1r
L3m4xsAD6oDZwuh6a3V39eaHVF+/EcnOaNP14aY+t3AIAGu+RfM2LIeUcpHjkqsp
6lnt/gSCuVTjmOdGv6sN6blFzhOKChGNjbY7XuR2aTn9Kga5UEUX0pGf6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpTms+fGbjXISsLOEOc/2YCFl4SMB8GA1UdIwQY
MBaAFHIMYyPPcwkwoDsORGB/b+31J6jEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQt
NDI4MWUzOGE5YmYyLzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hNmRhZTgtZDk4ZS00YWEwLWI0YWQtNDI4MWUzOGE5YmYy
LzEvY2d4akk4OXpDVENnT3c1RVlIOXY3ZlVucU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaILdJ08C
oJcq5S/WgTPqqVRqpKWEW65M2Cw6OgCmpMILZq3d/LduXbvD4WZiNNiYOJMglMVk
CxFe5V4+u5Ql3IXQ0B+QaR2MsqV8KwYFUOau/FAnBJ3bXWzY2/VPJr2zX7EY9LKf
bnYRypYgMpK9EjSEYTy/fLWXSxUTc1x5gswSak9RxpCqgyHNyVA6smLFSiADMduR
PRwbF9qSNHnheafJVrV1dMoFXsGMVT8Fpg3tCTBGp3yzIl3MYiujDMhK7/h3HXq2
3cmLJ3QWL20Lmi8/PowaR1LK3BvkPeFZ8+cJul36x/i9aB869aOnYTpz/KlRFiIW
A4vs7H/m66Hl6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:48 2026 by rpki-client