Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File:                     2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier:          6B7ovOsmyQmz61deALo52gUWphPKG8B3QkTSDV2u97E=
Subject key identifier:   7D:75:89:0E:6E:9E:02:43:2C:77:B7:40:1C:01:D3:D4:E8:11:91:42
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer:       /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial:       019F9135D867FEB2377C2A1F7BE0D34E777E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number:          185E
Signing time:             Thu 23 Jul 2026 23:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:52 +0000
Files and hashes:         1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: aVJ00bcXWNXU/0FhfKVyolTROzuSM0X8FnnFCUBVNak=)
                          2: BHIfo0SUvriKZsyFCXiSME1_wPg.roa (hash: yw3xzgJDYvAe05HAZHE3RD577H1UTSvrT/Xm9tpbxKg=)
                          3: NEY5wfu3YaOf5Irv9ZAeXPNHZK8.roa (hash: k4M73AdKqWqWSQkTMso46G2VUYiguHQrtP/UOxmaNHc=)
                          4: f_5vf3q7C7ELxTwv6wBQUewDWgw.roa (hash: O4+DioXtLDVmGcPO2WyW0jSnAleYxRmF3dcn2FLUeDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:d8:67:fe:b2:37:7c:2a:1f:7b:e0:d3:4e:77:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
        Validity
            Not Before: Jul 23 23:00:52 2026 GMT
            Not After : Jul 24 23:00:52 2026 GMT
        Subject: CN=7d75890e6e9e02432c77b7401c01d3d4e8119142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:6c:16:0d:2b:da:a5:8a:dd:1d:84:cc:b1:
                    08:85:26:32:fb:c9:a3:61:96:c2:f8:8b:2a:a5:e0:
                    74:6f:19:b3:2a:9f:39:ec:df:24:8d:59:47:69:c9:
                    fc:0e:65:97:78:5b:45:b2:7c:04:52:5d:d9:73:05:
                    e6:1f:9d:82:44:75:28:f2:37:7c:c7:23:24:79:0b:
                    44:63:cc:cd:0b:63:5b:12:34:e9:5b:39:97:1d:17:
                    18:39:47:2e:a0:49:c1:31:d8:3c:7c:1b:36:f3:26:
                    1f:35:ff:bd:51:80:13:e8:d7:86:bd:e8:f7:34:a0:
                    1f:81:d2:39:a6:c1:9c:1f:76:e4:10:4b:8c:8b:8d:
                    19:2a:27:a3:2e:ac:f8:87:11:42:cb:77:6f:53:5d:
                    13:5f:86:47:07:85:ad:e2:5d:6a:b8:c9:a7:9a:ee:
                    22:c0:80:eb:45:23:36:8c:c0:10:4f:d1:1b:c1:50:
                    4d:bd:37:77:2a:ea:77:cd:4f:6f:21:4f:b5:2a:5e:
                    3d:5d:0a:a1:a8:bf:84:0a:30:2b:90:f5:35:bf:0a:
                    6e:c2:93:39:19:94:d4:a2:33:f9:48:7d:95:91:f8:
                    32:9c:89:6a:c4:a0:f0:ee:19:b2:97:5c:af:94:80:
                    5b:44:4a:5d:f2:51:26:92:ce:5f:b4:11:d6:5c:2d:
                    fd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:75:89:0E:6E:9E:02:43:2C:77:B7:40:1C:01:D3:D4:E8:11:91:42
            X509v3 Authority Key Identifier:
                keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3c:5d:e5:68:9d:34:1e:73:98:02:c8:42:3a:24:34:a4:a0:
         5c:12:de:b7:d1:8c:ca:d2:11:d0:4e:de:82:6a:91:f1:50:65:
         74:d0:b2:60:26:d2:5d:db:10:dd:92:fc:c1:f3:eb:d6:19:f4:
         68:94:06:11:a5:99:ec:a3:03:88:08:bb:d9:ac:b9:a1:41:20:
         d4:45:10:41:d8:3f:fd:3b:99:dd:16:3c:67:f9:63:96:73:af:
         a7:a8:2f:70:de:23:f3:d1:e9:2c:f7:cd:8f:34:af:66:c3:5f:
         f2:5e:82:10:0f:6c:60:7e:32:e8:37:2f:53:9b:18:8a:7d:e9:
         a8:7e:fc:f4:56:e8:51:cb:59:d0:2d:d0:35:ff:a7:61:25:c5:
         99:0a:d0:fb:8f:20:ea:06:85:f8:94:05:0e:e1:72:17:19:fb:
         9d:c4:08:f4:e0:0a:69:d3:32:10:30:ef:57:d9:92:c3:19:36:
         fe:69:73:ef:e3:77:2f:55:b8:8c:35:91:db:8e:90:6f:69:4b:
         25:04:40:37:30:9a:32:1f:5d:41:4c:1a:4c:fc:bd:90:b9:6e:
         3f:28:5f:e1:28:f9:91:22:45:6d:1b:e0:93:89:5d:aa:18:8d:
         4e:44:c6:4b:a1:37:56:7b:12:5a:94:29:a9:ac:fd:6e:17:85:
         97:1b:3a:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNdhn/rI3fCofe+DTTnd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmNiNjQzZTZhMjFlMmZiNmUyMWNkMDY1M2FiMDk1ZTll
YmVmMTMwHhcNMjYwNzIzMjMwMDUyWhcNMjYwNzI0MjMwMDUyWjAzMTEwLwYDVQQD
Eyg3ZDc1ODkwZTZlOWUwMjQzMmM3N2I3NDAxYzAxZDNkNGU4MTE5MTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtltsFg0r2qWK3R2EzLEIhSYy+8mj
YZbC+IsqpeB0bxmzKp857N8kjVlHacn8DmWXeFtFsnwEUl3ZcwXmH52CRHUo8jd8
xyMkeQtEY8zNC2NbEjTpWzmXHRcYOUcuoEnBMdg8fBs28yYfNf+9UYAT6NeGvej3
NKAfgdI5psGcH3bkEEuMi40ZKiejLqz4hxFCy3dvU10TX4ZHB4Wt4l1quMmnmu4i
wIDrRSM2jMAQT9EbwVBNvTd3Kup3zU9vIU+1Kl49XQqhqL+ECjArkPU1vwpuwpM5
GZTUojP5SH2VkfgynIlqxKDw7hmyl1yvlIBbREpd8lEmks5ftBHWXC39wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH11iQ5ungJDLHe3QBwB09ToEZFCMB8GA1UdIwQY
MBaAFNr8tkPmoh4vtuIc0GU6sJXp6+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2Ut
ZGUyZGUxNWY5MGVkLzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2UtZGUyZGUxNWY5MGVk
LzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujxd5Wid
NB5zmALIQjokNKSgXBLet9GMytIR0E7egmqR8VBldNCyYCbSXdsQ3ZL8wfPr1hn0
aJQGEaWZ7KMDiAi72ay5oUEg1EUQQdg//TuZ3RY8Z/ljlnOvp6gvcN4j89HpLPfN
jzSvZsNf8l6CEA9sYH4y6DcvU5sYin3pqH789FboUctZ0C3QNf+nYSXFmQrQ+48g
6gaF+JQFDuFyFxn7ncQI9OAKadMyEDDvV9mSwxk2/mlz7+N3L1W4jDWR246Qb2lL
JQRANzCaMh9dQUwaTPy9kLluPyhf4Sj5kSJFbRvgk4ldqhiNTkTGS6E3VnsSWpQp
qaz9bheFlxs6MQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:29 2026 by rpki-client