Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File:                     fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier:          wCMQtvQa06P5TCfX/jUYACkI4ANYSH8ousBPlcc7JJk=
Subject key identifier:   1D:F1:04:F9:27:21:64:DD:6F:9E:CA:62:5D:55:0D:68:C4:E3:AB:02
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer:       /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial:       019F912C1A57E0FFE4A21E363EDC587B8648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 22:50:14 +0000
Manifest this update:     Thu 23 Jul 2026 22:50:14 +0000
Manifest next update:     Fri 24 Jul 2026 22:50:14 +0000
Files and hashes:         1: 9zx-jGX3RbLlRInzB3WpUMej34c.roa (hash: 8a+25rbKXY3XSXyYkMEL2laj6pvmya/GUv2Ei14rA+I=)
                          2: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: 4V04gBDM23fQDWxYHk9fqG8e6S5WE9bWZ8+oJ7ynXio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:2c:1a:57:e0:ff:e4:a2:1e:36:3e:dc:58:7b:86:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
        Validity
            Not Before: Jul 23 22:50:14 2026 GMT
            Not After : Jul 24 22:50:14 2026 GMT
        Subject: CN=1df104f9272164dd6f9eca625d550d68c4e3ab02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:3d:e4:76:8f:0e:73:67:59:86:66:b0:de:
                    d0:ce:95:b1:1c:d5:0e:24:8d:1f:2f:c4:23:7c:54:
                    17:b2:c5:e1:df:50:4e:ae:07:a4:6a:27:54:61:c3:
                    cd:14:78:2c:16:62:f1:77:f7:2f:fd:41:f3:bb:cf:
                    7e:93:74:6f:34:42:e9:03:56:17:7f:7e:6c:00:06:
                    8c:ba:19:a1:1f:f8:e7:47:b7:51:2c:ee:0c:17:7d:
                    3c:93:a6:9c:85:c1:46:30:4a:e4:96:75:df:cb:35:
                    91:af:f9:80:68:36:2c:3c:6a:1c:2e:9c:8f:24:9f:
                    f5:85:ef:d9:69:67:1f:ba:70:ef:d0:06:95:fc:58:
                    1e:08:39:db:22:aa:dd:67:65:fc:d7:ad:fc:55:a8:
                    4e:12:43:26:a1:fa:d8:f4:65:4a:e1:cf:ca:17:10:
                    9a:54:7e:b2:eb:af:27:e3:86:14:92:3e:ab:3c:8a:
                    c2:cb:8b:8b:02:cc:4f:d4:ec:02:e3:82:6a:75:ca:
                    bf:a2:27:d0:0d:0c:1b:ec:a6:61:2e:e9:86:68:51:
                    1f:b8:63:79:7a:e5:65:9e:b5:25:5a:0f:99:2a:98:
                    3c:c4:00:33:04:d8:9b:1d:9e:1e:bc:6b:99:9d:32:
                    83:bf:58:48:8c:f4:5c:55:8d:04:0d:6b:28:99:ff:
                    b4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F1:04:F9:27:21:64:DD:6F:9E:CA:62:5D:55:0D:68:C4:E3:AB:02
            X509v3 Authority Key Identifier:
                keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:74:56:0f:eb:a0:68:1a:68:ce:f9:bb:83:77:46:1b:74:
         65:55:c3:d3:fa:12:a7:11:b1:ec:a9:5a:81:51:5b:b3:89:38:
         37:11:0a:f8:ca:ee:ad:b6:59:81:0a:ac:bf:fb:71:05:84:53:
         86:17:6e:7b:f7:87:5f:dd:40:3c:1b:a7:8f:93:7e:11:2d:e9:
         46:2b:ea:b3:a8:f4:eb:54:55:c5:24:6a:50:79:bf:74:15:3b:
         56:54:56:1f:3e:13:4a:46:53:ce:86:6e:d0:b3:07:16:76:06:
         ff:da:8f:da:30:f8:7a:c0:05:e3:87:31:52:e4:e0:a7:85:48:
         2a:93:1c:aa:6f:a1:64:88:a7:9f:52:41:b1:a4:5f:91:ba:a1:
         6a:14:e3:b1:a1:d3:f2:41:86:b9:20:cf:a7:a8:62:36:90:f1:
         17:19:aa:a8:51:a7:87:a3:d7:1b:53:82:69:82:8f:a8:9f:7b:
         d8:a8:e5:4e:3a:af:a6:ef:b6:c8:35:91:f9:2b:65:c2:79:ec:
         d5:39:65:bf:2a:e8:51:7c:0b:1a:8a:f6:bb:7d:82:ce:d6:64:
         3f:49:cb:8a:03:fd:c8:1c:1a:5f:db:41:ed:9c:ea:10:63:4c:
         af:92:df:32:30:06:ee:f3:b5:f2:5f:9f:10:e2:8e:39:1a:af:
         62:c9:9c:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RLBpX4P/koh42PtxYe4ZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZjk3NzgyZDZmMjAyYTcwMTgzNjcxYWE2MzBjNzNhYmEz
MzMwN2UwHhcNMjYwNzIzMjI1MDE0WhcNMjYwNzI0MjI1MDE0WjAzMTEwLwYDVQQD
EygxZGYxMDRmOTI3MjE2NGRkNmY5ZWNhNjI1ZDU1MGQ2OGM0ZTNhYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg495HaPDnNnWYZmsN7QzpWxHNUO
JI0fL8QjfFQXssXh31BOrgekaidUYcPNFHgsFmLxd/cv/UHzu89+k3RvNELpA1YX
f35sAAaMuhmhH/jnR7dRLO4MF308k6achcFGMErklnXfyzWRr/mAaDYsPGocLpyP
JJ/1he/ZaWcfunDv0AaV/FgeCDnbIqrdZ2X81638VahOEkMmofrY9GVK4c/KFxCa
VH6y668n44YUkj6rPIrCy4uLAsxP1OwC44Jqdcq/oifQDQwb7KZhLumGaFEfuGN5
euVlnrUlWg+ZKpg8xAAzBNibHZ4evGuZnTKDv1hIjPRcVY0EDWsomf+08QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3xBPknIWTdb57KYl1VDWjE46sCMB8GA1UdIwQY
MBaAFHz5d4LW8gKnAYNnGqYwxzq6MzB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmIt
MzFhMTdiM2Q5NjRiLzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmItMzFhMTdiM2Q5NjRi
LzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTl0Vg/r
oGgaaM75u4N3Rht0ZVXD0/oSpxGx7KlagVFbs4k4NxEK+MrurbZZgQqsv/txBYRT
hhdue/eHX91APBunj5N+ES3pRivqs6j061RVxSRqUHm/dBU7VlRWHz4TSkZTzoZu
0LMHFnYG/9qP2jD4esAF44cxUuTgp4VIKpMcqm+hZIinn1JBsaRfkbqhahTjsaHT
8kGGuSDPp6hiNpDxFxmqqFGnh6PXG1OCaYKPqJ972KjlTjqvpu+2yDWR+Stlwnns
1TllvyroUXwLGor2u32CztZkP0nLigP9yBwaX9tB7ZzqEGNMr5LfMjAG7vO18l+f
EOKOORqvYsmcAQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:30 2026 by rpki-client