Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
File:                     s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json)
Hash identifier:          JvN+TILNLKc6irHh/+g7vZEL0s7sLscNFT3KzwovOi4=
Subject key identifier:   D2:5D:D6:46:11:E4:F6:41:88:31:38:DF:0C:34:37:24:E1:8B:C8:37
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Certificate issuer:       /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial:       019F8EC1359E46A6C90894F2FC25CB7EA12A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
Manifest number:          19D8
Signing time:             Thu 23 Jul 2026 11:34:14 +0000
Manifest this update:     Thu 23 Jul 2026 11:34:14 +0000
Manifest next update:     Fri 24 Jul 2026 11:34:14 +0000
Files and hashes:         1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=)
                          2: 2-9TE0hGien7uJimnUsiIL-slx4.roa (hash: ITBjj6tI+9B/OwJk2K8Dzw0Ey9IFfvrN1KI8kY4JXFU=)
                          3: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=)
                          4: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=)
                          5: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=)
                          6: KplJ3LduqB8fju8Cp8wVC5kYaEw.roa (hash: 1HTgbzS5o5VYiYxgpRXb60MFv/qXACweKzDFgHcjSQo=)
                          7: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=)
                          8: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=)
                          9: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=)
                          10: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=)
                          11: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=)
                          12: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=)
                          13: fgRbMqN9XRQOyHROi59mKV56wUg.roa (hash: Py8QfC6Me9kljX65ogBUdQo8JbMweZ02w9NGup3yJr4=)
                          14: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=)
                          15: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=)
                          16: qtDoqnaV9ZZGBUq4tRSN1Fvz-j0.roa (hash: GSE9R+oyIw7xMTL0Ep+U9AxHVf7kythML3j+Y7ovTM8=)
                          17: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: S9s7PVKLgTYZ2KfXsfPzU9fcnhDGW6KluxQTPdi0gps=)
                          18: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:c1:35:9e:46:a6:c9:08:94:f2:fc:25:cb:7e:a1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
        Validity
            Not Before: Jul 23 11:34:14 2026 GMT
            Not After : Jul 24 11:34:14 2026 GMT
        Subject: CN=d25dd64611e4f641883138df0c343724e18bc837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:29:19:b8:7b:4a:99:7d:5b:82:84:12:07:
                    b1:cd:07:df:91:ca:79:83:e9:e1:ed:9a:8b:23:e1:
                    a6:46:4a:8e:87:24:54:44:e8:2a:21:b1:33:9f:75:
                    ae:06:e4:e4:ed:be:60:cb:b1:0e:6a:4c:01:8f:44:
                    49:41:f8:34:cb:ae:ff:38:a1:19:9c:fb:4e:1e:89:
                    02:ac:9d:40:7c:9e:ff:60:75:0f:2f:39:b2:26:bc:
                    89:b6:0b:15:f6:4d:bc:0e:ef:8b:74:ce:90:22:18:
                    e2:d6:62:13:70:b8:78:c4:42:d9:8f:ef:fe:85:85:
                    81:6b:1a:30:9d:b2:72:6c:d2:41:eb:9d:e8:77:1c:
                    ce:77:73:25:96:d4:05:7e:a0:dc:a2:49:a4:e2:5a:
                    f0:00:bb:48:cd:38:54:a1:1c:0e:77:0d:fc:da:ec:
                    41:e8:6e:fc:75:72:9a:89:2d:1d:9c:f3:d4:08:19:
                    9e:4e:1b:35:ea:a1:2b:be:c0:d2:2e:4e:fc:38:ca:
                    98:58:76:97:f3:2c:31:0f:87:82:d5:76:e6:5a:da:
                    81:55:17:6b:55:3e:59:06:1b:a9:d8:c1:ad:fb:44:
                    43:55:36:69:01:6a:1e:d4:d0:d7:43:e3:c4:42:7a:
                    79:04:2c:d2:3a:4e:36:cc:d3:d8:b4:d2:1f:1b:03:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5D:D6:46:11:E4:F6:41:88:31:38:DF:0C:34:37:24:E1:8B:C8:37
            X509v3 Authority Key Identifier:
                keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:de:27:7e:ab:9e:ac:30:8c:e5:b4:3f:be:db:28:48:1c:74:
         53:0d:93:5a:1c:74:29:b1:c4:75:65:38:0c:c1:6d:f4:53:5e:
         27:40:f7:33:97:d8:ac:90:86:7c:cc:27:44:6a:b5:39:42:b7:
         e2:2e:e4:0b:90:c0:9a:ca:97:b3:71:35:3a:46:05:2a:0f:28:
         f6:70:8d:36:9a:44:d0:7a:e3:5c:40:f7:35:66:f0:f5:f8:1e:
         06:10:0c:a1:6d:14:d9:be:06:78:85:18:b6:86:2e:04:f0:87:
         83:3c:0d:a9:e5:ca:24:e0:ae:ed:d4:50:f2:85:0f:16:68:47:
         44:63:84:fe:7c:d7:1d:f8:26:84:b5:80:c0:e7:85:75:e9:20:
         4f:f7:0b:99:89:37:a2:64:b3:cf:cb:d6:68:41:b6:f9:c8:9e:
         5c:75:0f:f9:eb:0b:e6:f6:d3:b4:b8:a1:c5:38:fa:11:d8:3c:
         7b:60:3e:f1:b6:db:d9:25:e9:db:6f:58:70:59:99:49:51:ce:
         cb:c0:81:fb:c1:e6:80:e1:a9:22:ce:0e:4d:ab:9f:c3:b2:69:
         1b:00:3e:b0:7d:eb:e3:24:d8:80:d3:74:00:61:83:32:67:e3:
         19:94:a0:7a:50:23:4c:23:df:6f:c8:a5:c4:9b:08:2c:b1:57:
         e3:2f:d9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:37 2026 by rpki-client