Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File:                     B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier:          Yqrw4J6E6uu0I3geOUfpgKggaf5RI4s4X7/SxyNHloQ=
Subject key identifier:   25:7A:EB:5F:04:0B:ED:BB:F4:94:8D:C5:0F:53:E8:F4:45:8B:BE:3B
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer:       /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial:       019F91DA8A3B9DFEDAB3E9DE3779934976C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 02:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:46 +0000
Files and hashes:         1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: 3py0JjfqtKIR6Q167dMtxrFcoLelzBy5jLwO5Inr58A=)
                          2: VuZOG8s543NfcGdXf57yIIrySJ8.roa (hash: Z7XKmPS1GYE3f8Q+rg/H8yChwaPlHaJspMgwTyoFFv0=)
                          3: sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa (hash: zq0CNZddr6RR3XPpn+vNQeYgJJau/bg5D4OmfDaVY/s=)
                          4: tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa (hash: enVyFjAXmV6jKlcwgcqYoRWX2/X4d1HEfq19dhiH9Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:8a:3b:9d:fe:da:b3:e9:de:37:79:93:49:76:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
        Validity
            Not Before: Jul 24 02:00:46 2026 GMT
            Not After : Jul 25 02:00:46 2026 GMT
        Subject: CN=257aeb5f040bedbbf4948dc50f53e8f4458bbe3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:ff:0a:2e:ce:8b:14:75:b9:15:1f:21:b8:
                    76:ed:7f:ff:26:24:83:3b:e5:6a:47:42:16:48:86:
                    56:16:a0:6b:6d:5b:1f:f7:a5:94:53:3a:54:41:3b:
                    c1:86:44:6c:b9:33:3e:b2:c2:d2:32:6a:e3:a6:a5:
                    63:45:be:71:a0:81:24:66:c6:d8:ca:95:01:f0:69:
                    27:26:19:a7:c6:eb:a2:36:7f:1f:40:97:5d:4f:1e:
                    64:42:a4:9c:30:e1:a5:53:8b:a0:27:1a:4a:24:96:
                    b7:1f:d2:65:91:92:0f:97:67:b8:1d:45:2d:04:86:
                    30:c2:5a:08:1b:57:49:1f:1a:c1:5e:73:cb:9a:30:
                    1b:6b:7f:d6:52:a8:84:1f:1e:d2:c6:e1:fa:4a:1d:
                    68:d8:8c:0c:be:de:9b:9d:ab:40:93:5a:e8:cb:ea:
                    65:81:9f:87:26:d6:88:2a:14:bd:22:0e:9a:3a:ed:
                    ee:bd:b2:54:f9:ba:6a:1e:b7:51:79:9f:0d:09:78:
                    16:1f:d8:c6:20:f5:ea:eb:1d:71:91:93:5d:7e:03:
                    75:4a:47:84:eb:b4:4b:d1:0f:3d:d4:81:ca:c2:4d:
                    91:1e:f6:79:01:d0:8f:3d:ef:13:47:53:fe:e5:30:
                    68:8a:ee:57:15:63:0b:02:3e:6e:f0:f7:93:03:ec:
                    5c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7A:EB:5F:04:0B:ED:BB:F4:94:8D:C5:0F:53:E8:F4:45:8B:BE:3B
            X509v3 Authority Key Identifier:
                keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9b:13:44:33:8d:eb:28:e2:f2:53:e8:78:76:4f:1d:f2:22:
         d2:24:5a:ae:8b:18:2f:16:22:3f:31:ce:88:b3:16:51:46:a6:
         b6:7e:54:95:4a:ae:09:56:1a:b7:0b:bf:4c:a5:df:0f:00:17:
         f8:c1:ce:ce:88:fa:99:35:2c:49:7c:71:f8:2b:71:78:a4:b4:
         06:fe:cb:5f:75:a4:64:ad:9e:69:d5:67:02:f6:67:b9:ab:0f:
         5a:ee:26:f8:7f:e5:20:a6:2f:2c:f1:77:6f:46:f3:a0:6d:1c:
         fe:48:e6:9e:0f:31:0e:17:f4:2b:be:f0:87:ab:dc:0f:e0:91:
         b0:cb:45:21:dd:a1:ca:6a:f6:98:31:b6:fd:58:e4:bd:8f:97:
         c8:5c:65:39:66:ec:35:56:8d:a2:ac:bc:45:0b:74:75:9b:8d:
         28:41:8c:89:21:34:9f:a2:30:8a:e5:b5:e6:76:30:f2:a7:42:
         25:7c:9f:bd:04:08:14:ce:75:4f:c9:ad:86:71:55:61:77:4b:
         19:47:44:e7:a1:4a:8a:e8:d2:b6:a1:ce:d1:80:e6:d0:e1:26:
         0a:52:ee:8b:4f:33:28:b2:3f:c2:97:b4:61:59:53:f5:fb:a2:
         97:93:2e:a0:cb:41:27:b0:2e:53:d3:a9:6f:0e:4f:59:4a:d6:
         e2:f7:f0:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2oo7nf7as+neN3mTSXbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDc1MzM1Zjc3YmY0MjQwOTc2Mjc3YjFkZDBlMTliYjIz
YThlMWQwHhcNMjYwNzI0MDIwMDQ2WhcNMjYwNzI1MDIwMDQ2WjAzMTEwLwYDVQQD
EygyNTdhZWI1ZjA0MGJlZGJiZjQ5NDhkYzUwZjUzZThmNDQ1OGJiZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcX/Ci7OixR1uRUfIbh27X//JiSD
O+VqR0IWSIZWFqBrbVsf96WUUzpUQTvBhkRsuTM+ssLSMmrjpqVjRb5xoIEkZsbY
ypUB8GknJhmnxuuiNn8fQJddTx5kQqScMOGlU4ugJxpKJJa3H9JlkZIPl2e4HUUt
BIYwwloIG1dJHxrBXnPLmjAba3/WUqiEHx7SxuH6Sh1o2IwMvt6bnatAk1roy+pl
gZ+HJtaIKhS9Ig6aOu3uvbJU+bpqHrdReZ8NCXgWH9jGIPXq6x1xkZNdfgN1SkeE
67RL0Q891IHKwk2RHvZ5AdCPPe8TR1P+5TBoiu5XFWMLAj5u8PeTA+xc5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCV6618EC+279JSNxQ9T6PRFi747MB8GA1UdIwQY
MBaAFAfXUzX3e/QkCXYnex3Q4ZuyOo4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2Ut
YTQ1YmJjYjM0ZGU1LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2UtYTQ1YmJjYjM0ZGU1
LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZsTRDON
6yji8lPoeHZPHfIi0iRarosYLxYiPzHOiLMWUUamtn5UlUquCVYatwu/TKXfDwAX
+MHOzoj6mTUsSXxx+CtxeKS0Bv7LX3WkZK2eadVnAvZnuasPWu4m+H/lIKYvLPF3
b0bzoG0c/kjmng8xDhf0K77wh6vcD+CRsMtFId2hymr2mDG2/VjkvY+XyFxlOWbs
NVaNoqy8RQt0dZuNKEGMiSE0n6IwiuW15nYw8qdCJXyfvQQIFM51T8mthnFVYXdL
GUdE56FKiujStqHO0YDm0OEmClLui08zKLI/wpe0YVlT9fuil5MuoMtBJ7AuU9Op
bw5PWUrW4vfwtA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:35 2026 by rpki-client