Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File:                     M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier:          WRASyfuFk8UzgfRTox/LtpW1fdsEVadINyXSVqmlsCk=
Subject key identifier:   53:99:9E:26:EE:11:7F:23:40:A1:1A:F5:7B:B2:34:77:D5:B8:E7:95
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer:       /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial:       019F9512AEA86FC212E8B15E89BC29FE0F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 17:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:57 +0000
Files and hashes:         1: 3I4M3z7hk5Jaghl-IJJmyqtHR94.roa (hash: HXLoBLMS+Moi8PgCDzeYzip6BSpqWVV46UR0vIKYGy8=)
                          2: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: Rs36eeXaVyGmTUc3wDJS1Ozt8MBbRtA/i9cOtayVDnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:ae:a8:6f:c2:12:e8:b1:5e:89:bc:29:fe:0f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
        Validity
            Not Before: Jul 24 17:00:57 2026 GMT
            Not After : Jul 25 17:00:57 2026 GMT
        Subject: CN=53999e26ee117f2340a11af57bb23477d5b8e795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:48:3a:ea:e6:c6:8f:4c:2c:cc:97:5f:55:
                    c0:d1:ea:84:7b:34:85:79:9c:83:92:2c:cc:90:0f:
                    13:2a:9e:fa:ff:bc:52:a8:f4:4a:1d:c2:31:17:9f:
                    ed:9d:fe:3b:1a:cd:bf:12:94:6d:7f:b5:22:ac:e8:
                    be:b5:ce:24:4e:2e:79:f3:71:2e:c8:04:e7:a5:b2:
                    77:9f:d8:cc:3e:41:11:e6:8e:2c:da:78:ec:36:d2:
                    e7:d5:85:b9:ec:a2:2f:ae:c2:fe:7c:25:55:7e:d0:
                    cc:6e:11:5a:eb:81:f2:24:e5:95:1d:14:0e:f7:09:
                    d7:dd:3f:4e:34:3c:f7:c5:92:18:d7:06:88:07:3e:
                    80:55:0d:cc:ed:e2:70:5f:12:e0:1b:44:b1:1e:0c:
                    ae:14:64:f6:d4:ca:83:28:d8:c3:aa:c2:31:09:6b:
                    6c:5c:c9:52:f4:00:a5:84:6c:01:1b:de:48:63:94:
                    62:69:ca:17:45:27:e0:79:68:3c:8e:9d:b1:2a:11:
                    ea:47:e3:d9:ee:7c:ae:22:60:f5:53:09:6b:62:9a:
                    5f:73:65:ed:cf:32:40:80:0a:5c:10:05:27:4a:79:
                    6d:3a:6d:8f:7b:e5:52:7f:4a:16:0d:1f:d8:ee:4b:
                    21:40:4b:cc:ae:b9:6a:2e:bc:66:6c:6c:4f:db:83:
                    ea:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:99:9E:26:EE:11:7F:23:40:A1:1A:F5:7B:B2:34:77:D5:B8:E7:95
            X509v3 Authority Key Identifier:
                keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:91:23:d7:1c:05:72:2b:9b:07:1c:dc:13:70:fe:89:a0:7c:
         c5:37:5e:a3:b6:17:88:48:07:60:92:48:92:1e:2c:9e:ae:95:
         07:a3:2f:ef:76:81:3b:e2:60:9a:9a:31:4a:46:45:b6:1a:33:
         f6:73:60:85:dd:25:2d:8f:7f:85:4c:01:ca:10:c4:b7:b8:19:
         d5:20:30:81:73:be:8e:cc:03:03:13:8d:f8:31:ff:10:26:67:
         8a:86:98:a3:5a:0d:bc:7f:2e:05:77:2f:95:9d:6b:2d:8d:3c:
         09:b5:b5:0b:f5:c4:88:19:5a:6d:ae:f2:9b:72:e9:38:56:b6:
         9d:b3:3f:e3:0c:2e:55:0b:a9:69:04:bd:77:ac:17:d7:0e:f0:
         04:fb:55:6a:1c:cb:1d:70:1c:5f:c9:91:76:16:75:30:9e:ed:
         3c:9a:93:b8:06:5e:88:77:47:7e:5e:fc:3f:8a:81:48:a5:19:
         f0:be:45:d5:9b:18:4b:c8:0c:82:cc:23:97:40:65:71:8b:05:
         51:22:61:6f:7e:d9:7b:4b:4a:06:a1:d3:ca:9c:52:fc:d6:cf:
         ba:57:10:ef:2b:2f:82:86:a1:bd:23:d9:33:49:f7:c9:fd:45:
         8b:15:c2:0b:2b:f8:2b:2a:dc:1c:d9:98:26:96:30:9a:ac:ea:
         77:eb:78:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEq6ob8IS6LFeibwp/g8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZTg1NTBiY2M5ZmIzYjE0MDI2MGMyOWQ2OWY3ODk5Nzhk
Y2MwOWEwHhcNMjYwNzI0MTcwMDU3WhcNMjYwNzI1MTcwMDU3WjAzMTEwLwYDVQQD
Eyg1Mzk5OWUyNmVlMTE3ZjIzNDBhMTFhZjU3YmIyMzQ3N2Q1YjhlNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOBIOurmxo9MLMyXX1XA0eqEezSF
eZyDkizMkA8TKp76/7xSqPRKHcIxF5/tnf47Gs2/EpRtf7UirOi+tc4kTi5583Eu
yATnpbJ3n9jMPkER5o4s2njsNtLn1YW57KIvrsL+fCVVftDMbhFa64HyJOWVHRQO
9wnX3T9ONDz3xZIY1waIBz6AVQ3M7eJwXxLgG0SxHgyuFGT21MqDKNjDqsIxCWts
XMlS9AClhGwBG95IY5RiacoXRSfgeWg8jp2xKhHqR+PZ7nyuImD1UwlrYppfc2Xt
zzJAgApcEAUnSnltOm2Pe+VSf0oWDR/Y7kshQEvMrrlqLrxmbGxP24PqLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOZnibuEX8jQKEa9XuyNHfVuOeVMB8GA1UdIwQY
MBaAFDPoVQvMn7OxQCYMKdafeJl43MCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYt
YWQyNDk3ZjI4NGY1LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYtYWQyNDk3ZjI4NGY1
LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJEj1xwF
ciubBxzcE3D+iaB8xTdeo7YXiEgHYJJIkh4snq6VB6Mv73aBO+JgmpoxSkZFthoz
9nNghd0lLY9/hUwByhDEt7gZ1SAwgXO+jswDAxON+DH/ECZnioaYo1oNvH8uBXcv
lZ1rLY08CbW1C/XEiBlaba7ym3LpOFa2nbM/4wwuVQupaQS9d6wX1w7wBPtVahzL
HXAcX8mRdhZ1MJ7tPJqTuAZeiHdHfl78P4qBSKUZ8L5F1ZsYS8gMgswjl0BlcYsF
USJhb37Ze0tKBqHTypxS/NbPulcQ7ysvgoahvSPZM0n3yf1FixXCCyv4KyrcHNmY
JpYwmqzqd+t4Fg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:43:23 2026 by rpki-client