Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
File:                     _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json)
Hash identifier:          1FgY8Jrp4PXp1XCZG4/AVTxztwDqRQFRqvcVbjCeujA=
Subject key identifier:   13:BE:B6:C0:26:CD:89:1F:23:E3:EF:B1:54:05:BF:FA:0A:F1:2E:56
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Certificate issuer:       /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial:       019F8EA2D0C2131A8EEB8BE3EE96791E1D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
Manifest number:          198E
Signing time:             Thu 23 Jul 2026 11:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:02 +0000
Files and hashes:         1: 0Co-4aPRt1mKhrjgNM3WUZdgXoI.asa (hash: OeNQYBhoPfaKZ8nvkbEq0E8aoRp5VdVHMz/gxZSMaaM=)
                          2: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=)
                          3: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=)
                          4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=)
                          5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=)
                          6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=)
                          7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=)
                          8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=)
                          9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=)
                          10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: RqJ3NPVE/kgBf0gGWgALbMRK2eQ+3ItTlTV33v2pFIg=)
                          11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=)
                          12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:d0:c2:13:1a:8e:eb:8b:e3:ee:96:79:1e:1d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
        Validity
            Not Before: Jul 23 11:01:02 2026 GMT
            Not After : Jul 24 11:01:02 2026 GMT
        Subject: CN=13beb6c026cd891f23e3efb15405bffa0af12e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:33:e5:bb:83:95:53:0e:d6:fd:58:14:db:
                    e7:31:28:f9:28:1d:c8:ee:c2:40:97:cb:41:75:04:
                    2a:75:79:05:52:fd:67:43:29:a2:18:1e:18:3f:69:
                    22:ed:6e:5d:12:26:bf:95:60:8a:a1:d6:1b:6e:99:
                    2a:b4:f0:54:92:52:49:2e:9e:23:55:d2:49:0b:3b:
                    ee:e7:c4:5a:58:ed:0d:7f:42:ad:2c:f2:59:84:6b:
                    18:63:c2:20:7b:df:07:4f:26:ef:85:75:87:b9:75:
                    94:ce:c2:c9:0d:3a:92:22:ef:13:e0:d5:51:16:b4:
                    8d:59:87:53:7d:6c:8f:41:0a:89:0c:cc:40:a2:7b:
                    27:84:0d:37:2b:2a:6c:f6:81:e9:22:f2:ed:a4:94:
                    e0:06:57:51:81:1a:c6:48:e9:1d:9d:db:da:80:39:
                    1d:5c:ac:09:12:bf:73:d4:22:00:1c:eb:89:bb:35:
                    02:0c:b4:6e:eb:ef:10:ed:ad:5a:16:02:6d:18:7d:
                    b8:ee:df:ac:38:67:43:c8:cb:ac:bc:bf:b9:0d:fa:
                    dc:0d:5a:0e:ca:ae:d4:af:14:9d:6e:bb:a6:85:34:
                    1c:8b:a5:a6:9f:a6:2a:55:18:3a:4e:c3:7b:bf:eb:
                    88:d6:56:e7:40:5e:b8:3c:37:2b:f1:f2:54:8a:3a:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BE:B6:C0:26:CD:89:1F:23:E3:EF:B1:54:05:BF:FA:0A:F1:2E:56
            X509v3 Authority Key Identifier:
                keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:31:83:97:de:1d:8c:b5:49:fb:9d:a5:db:ff:fe:da:06:e8:
         88:c1:17:e5:23:e1:68:cb:b4:3e:58:42:23:ae:20:10:4d:b3:
         57:06:cc:69:93:7f:a4:02:3b:d0:26:0a:47:45:d1:04:5e:04:
         0f:09:a4:83:ce:bf:ff:f9:af:67:3f:a5:16:8a:82:4e:f4:ca:
         26:87:26:28:61:9e:13:be:19:16:78:a6:ff:52:65:6d:59:98:
         5a:f8:bc:14:20:0d:dd:cf:a1:b8:bc:a6:9f:4c:bd:dd:61:f7:
         55:dd:fe:2c:3e:fc:06:45:69:4f:c0:4f:ff:e4:b7:01:a5:fb:
         ad:64:04:6c:74:86:40:ef:57:77:e5:95:dd:7a:75:62:38:26:
         76:12:cf:2a:48:99:ca:4e:c8:99:36:56:56:b3:db:53:76:3d:
         89:c6:36:c5:c3:0b:84:fa:b8:89:8a:af:74:57:5f:9b:47:99:
         ed:c7:26:8b:50:47:a8:92:a7:b2:8b:b2:cb:81:2a:9c:7f:82:
         57:7d:be:9e:06:b5:d1:27:3f:85:7b:51:48:d0:fa:fe:1b:75:
         3d:0d:87:cf:62:6a:95:51:06:7f:75:b5:10:1a:4d:ee:ac:b3:
         e6:a2:3c:a2:63:6d:20:79:b9:77:08:2f:84:30:ae:2e:42:bc:
         32:6f:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:13 2026 by rpki-client