Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
File:                     u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft (raw, json)
Hash identifier:          +omDjy3N7q2T1tVI1uiKayQfcvc7bRR0Zf+e/+OFGHU=
Subject key identifier:   8C:D0:F4:F0:E7:86:8B:EB:C0:17:68:6C:B1:E0:A0:92:AA:15:B0:C7
Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
Certificate issuer:       /CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Certificate serial:       019F9436ECD6D6D915E4D038E6EE43CD30F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
Manifest number:          19CE
Signing time:             Fri 24 Jul 2026 13:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:55 +0000
Files and hashes:         1: lBcSFM8OK1uzZB50zlLDxjTK2xU.roa (hash: 8pSOr2u3lgeMMUD0PcPdrmLPvUU4Aqiq7ol79EVGlVg=)
                          2: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl (hash: qhNLdgO4LCsDZOMOZJY/4d+el8Ljg1r+Xf1Vs9C7wMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:ec:d6:d6:d9:15:e4:d0:38:e6:ee:43:cd:30:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277
        Validity
            Not Before: Jul 24 13:00:55 2026 GMT
            Not After : Jul 25 13:00:55 2026 GMT
        Subject: CN=8cd0f4f0e7868bebc017686cb1e0a092aa15b0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:00:a7:da:4e:b2:b2:1b:81:f2:3a:4b:9b:
                    22:6b:65:0e:32:85:74:7d:0b:86:e6:1a:8a:53:d4:
                    71:c6:2f:44:bc:ac:8f:1a:ad:a5:6b:71:42:fa:6e:
                    04:28:b4:e9:4c:c6:18:5e:10:40:7a:5e:b2:27:05:
                    37:1f:38:96:17:01:be:6a:2a:fa:18:1b:eb:a6:8a:
                    0e:95:d6:80:39:44:12:c4:78:8b:1d:27:2d:bf:70:
                    7b:6c:0e:13:7c:38:a3:79:31:b3:8a:48:ee:3c:b4:
                    9f:4a:59:cd:13:e5:bd:71:84:1e:d8:1c:70:b3:af:
                    ef:3e:1b:03:01:94:83:a9:97:30:8c:b5:64:e3:41:
                    04:0e:8c:2b:4e:d5:1b:2a:c4:ce:b6:1d:54:c6:dd:
                    54:e0:bc:85:45:f9:66:8e:b0:ea:47:18:d4:b9:93:
                    f8:4d:c4:b8:11:0a:eb:ac:9c:27:4d:81:93:9d:ee:
                    0f:6e:2b:6e:bb:6e:85:43:25:6b:de:e1:07:fd:b0:
                    b7:4d:90:bb:7b:7a:36:52:d4:6a:19:d7:8c:1e:05:
                    1b:b6:ca:cc:b1:8d:06:88:6e:07:f0:b0:70:d2:05:
                    34:af:3c:f1:e4:06:5c:93:ae:c2:7a:43:12:6e:4a:
                    47:b4:d6:a7:6c:f3:0e:e3:6a:81:79:2c:ca:d1:93:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D0:F4:F0:E7:86:8B:EB:C0:17:68:6C:B1:E0:A0:92:AA:15:B0:C7
            X509v3 Authority Key Identifier:
                keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a8:da:83:c2:fa:12:cf:da:19:c5:be:03:32:68:dc:11:02:
         bc:cc:7f:f7:39:4d:e2:a2:48:49:01:c8:37:44:d9:8c:d8:2a:
         e9:ee:ab:bd:3a:c2:a4:60:6a:a5:a2:fb:f6:d6:ee:55:71:97:
         56:28:e4:2e:58:c2:26:de:dd:59:6d:08:de:e4:fb:fe:5d:c1:
         67:bb:16:78:5f:b8:e8:78:cb:42:f1:0c:06:44:79:1b:c5:1d:
         ac:97:19:5e:9d:67:92:08:0b:4b:cc:e8:d9:77:8d:e3:f5:95:
         2e:09:f5:cb:23:00:b0:ed:67:1f:89:e0:35:43:bd:86:05:4a:
         78:80:e0:0a:44:3f:30:0b:22:4a:01:79:9c:a4:0e:ed:8a:43:
         01:6f:f8:52:08:d0:e7:d6:2a:01:e0:6b:a5:1b:01:15:ed:93:
         c4:df:46:d9:9d:c4:bd:22:66:11:d8:05:2e:ee:38:96:40:61:
         29:4e:9e:83:b3:66:5a:a8:84:10:14:d3:a2:5d:52:90:1f:e7:
         56:12:60:f9:79:74:9a:35:9f:89:65:0a:73:36:ee:22:50:27:
         b9:27:c6:fd:1f:cf:20:b3:78:b6:74:f4:54:a8:dc:18:0f:a5:
         26:68:1f:2d:d9:18:38:c2:37:59:b3:d0:ac:bd:eb:99:62:9b:
         92:6e:d4:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNuzW1tkV5NA45u5DzTD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmJlZTRhOTY4ZGYwZmFjNDc1MWI0ZjQ5MDI3ZmEwOTVj
NjUyNzcwHhcNMjYwNzI0MTMwMDU1WhcNMjYwNzI1MTMwMDU1WjAzMTEwLwYDVQQD
Eyg4Y2QwZjRmMGU3ODY4YmViYzAxNzY4NmNiMWUwYTA5MmFhMTViMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKkAp9pOsrIbgfI6S5sia2UOMoV0
fQuG5hqKU9Rxxi9EvKyPGq2la3FC+m4EKLTpTMYYXhBAel6yJwU3HziWFwG+air6
GBvrpooOldaAOUQSxHiLHSctv3B7bA4TfDijeTGzikjuPLSfSlnNE+W9cYQe2Bxw
s6/vPhsDAZSDqZcwjLVk40EEDowrTtUbKsTOth1Uxt1U4LyFRflmjrDqRxjUuZP4
TcS4EQrrrJwnTYGTne4Pbituu26FQyVr3uEH/bC3TZC7e3o2UtRqGdeMHgUbtsrM
sY0GiG4H8LBw0gU0rzzx5AZck67CekMSbkpHtNanbPMO42qBeSzK0ZPq3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzQ9PDnhovrwBdobLHgoJKqFbDHMB8GA1UdIwQY
MBaAFLv77kqWjfD6xHUbT0kCf6CVxlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jZDA4MWUtODljMi00MzA5LTk0OTAt
MGE4OWM2OTk2ZmVmLzEvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jZDA4MWUtODljMi00MzA5LTk0OTAtMGE4OWM2OTk2ZmVm
LzEvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMajag8L6
Es/aGcW+AzJo3BECvMx/9zlN4qJISQHIN0TZjNgq6e6rvTrCpGBqpaL79tbuVXGX
VijkLljCJt7dWW0I3uT7/l3BZ7sWeF+46HjLQvEMBkR5G8UdrJcZXp1nkggLS8zo
2XeN4/WVLgn1yyMAsO1nH4ngNUO9hgVKeIDgCkQ/MAsiSgF5nKQO7YpDAW/4UgjQ
59YqAeBrpRsBFe2TxN9G2Z3EvSJmEdgFLu44lkBhKU6eg7NmWqiEEBTTol1SkB/n
VhJg+Xl0mjWfiWUKczbuIlAnuSfG/R/PILN4tnT0VKjcGA+lJmgfLdkYOMI3WbPQ
rL3rmWKbkm7Uwg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:13 2026 by rpki-client