Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File:                     CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier:          shvo3/8AgSgP4Y/2V27cwACqmOHAgkYu51S9ZjslQl4=
Subject key identifier:   BD:D0:36:03:9F:79:A9:33:97:32:AA:0A:EE:D1:2C:9E:05:A1:62:4F
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer:       /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial:       019F92489C772878E2A2C6A9FDC641939AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number:          18F5
Signing time:             Fri 24 Jul 2026 04:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:59 +0000
Files and hashes:         1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: ArbnQ0sUTgrCmYSEClzaGqxuZx+7fdZ12hCcufJWR+E=)
                          2: TdxQhWG2wtulK5Vb9nCA77o4y_I.roa (hash: DQ1/x26NNKj14C8KsFmS1PfWzVr7cd7MQfy8SdkpOYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:9c:77:28:78:e2:a2:c6:a9:fd:c6:41:93:9a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
        Validity
            Not Before: Jul 24 04:00:59 2026 GMT
            Not After : Jul 25 04:00:59 2026 GMT
        Subject: CN=bdd036039f79a9339732aa0aeed12c9e05a1624f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:ea:8d:1c:0a:f7:2c:65:34:9f:93:64:75:
                    87:7d:7a:3b:10:1f:dc:b4:36:42:04:23:2d:4f:63:
                    55:2d:6e:0d:b3:a0:25:0e:da:1e:1e:c0:7c:90:7e:
                    21:80:ef:d6:84:73:fa:fd:62:14:cf:b0:32:87:4f:
                    ae:3a:16:06:24:e5:f4:58:98:35:e3:76:e2:23:e7:
                    6a:fd:e6:de:49:17:d7:6e:dd:b4:0b:33:f5:da:77:
                    db:61:fc:ef:5e:ea:b8:ac:c7:da:e4:9f:f1:af:e7:
                    33:5e:59:16:35:36:ac:5e:98:72:4c:b1:82:c6:90:
                    a5:0c:21:81:ae:03:01:83:d5:c0:19:91:f2:59:76:
                    90:f1:7c:dd:3b:fa:d4:04:58:2b:74:99:79:89:47:
                    17:9d:d7:49:7f:e1:85:7d:19:39:62:42:ed:bb:f9:
                    53:67:e0:ac:41:48:19:77:6c:b6:39:63:d7:ac:91:
                    7f:39:b8:0c:64:81:fa:e6:2e:dd:dd:eb:0d:12:ed:
                    51:83:51:d2:de:f5:ed:3d:6d:28:b8:50:f8:ed:70:
                    37:3c:26:52:b2:c7:51:1d:8a:a1:49:53:df:c1:3b:
                    c6:4e:8e:80:cf:9b:b9:99:a4:ee:a7:b0:44:d4:ad:
                    74:e5:b1:2e:4c:f4:cd:55:f3:c8:e0:49:47:0b:1a:
                    00:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D0:36:03:9F:79:A9:33:97:32:AA:0A:EE:D1:2C:9E:05:A1:62:4F
            X509v3 Authority Key Identifier:
                keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c6:9f:17:3a:0e:82:92:3c:51:ec:16:2f:a7:f1:4b:d3:5b:
         fa:39:c1:21:d9:26:14:ae:2d:a1:28:6f:73:a0:5e:06:d0:d5:
         0b:34:8b:17:9d:f8:fb:9c:bb:28:3a:a5:09:89:57:ad:49:61:
         5a:bd:8d:eb:e5:35:e2:5d:f6:c0:d2:46:26:e4:4d:0f:3c:70:
         e6:e0:3e:e0:80:6b:14:9c:7a:f6:ab:98:e6:ec:f6:9b:07:4d:
         c5:00:3c:48:02:ff:e0:18:d6:b5:42:5d:b0:80:fb:f9:81:ed:
         48:e8:cd:3a:bb:c9:3a:32:d7:b7:2d:e1:08:1c:9c:66:04:aa:
         d8:fb:c2:37:2b:44:7b:77:31:07:d5:7d:79:e8:7a:01:bd:33:
         b8:c6:9b:bb:cf:75:4d:d2:ad:ab:a4:ff:54:93:1a:18:32:2a:
         9c:7b:af:eb:3b:27:a4:47:1e:1b:12:19:9b:97:ce:88:63:4a:
         07:14:d1:4e:96:ea:24:7a:96:79:94:58:2c:0c:45:a3:37:78:
         6e:57:f3:ef:fe:8b:20:10:2b:2b:03:53:09:f8:f7:30:3f:25:
         15:e8:b0:7e:40:68:e5:8e:ce:55:1e:e4:03:24:f3:e6:d5:14:
         9a:11:15:ba:36:b4:30:5b:fe:01:ec:97:d9:7d:90:e4:76:7c:
         e2:71:16:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSJx3KHjiosap/cZBk5riMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YzU1MjQ5ODg4MTg3NjU1NmYxNmUzMjNmMWNhMzY5YjI1
ZWRiMGMwHhcNMjYwNzI0MDQwMDU5WhcNMjYwNzI1MDQwMDU5WjAzMTEwLwYDVQQD
EyhiZGQwMzYwMzlmNzlhOTMzOTczMmFhMGFlZWQxMmM5ZTA1YTE2MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U3qjRwK9yxlNJ+TZHWHfXo7EB/c
tDZCBCMtT2NVLW4Ns6AlDtoeHsB8kH4hgO/WhHP6/WIUz7Ayh0+uOhYGJOX0WJg1
43biI+dq/ebeSRfXbt20CzP12nfbYfzvXuq4rMfa5J/xr+czXlkWNTasXphyTLGC
xpClDCGBrgMBg9XAGZHyWXaQ8XzdO/rUBFgrdJl5iUcXnddJf+GFfRk5YkLtu/lT
Z+CsQUgZd2y2OWPXrJF/ObgMZIH65i7d3esNEu1Rg1HS3vXtPW0ouFD47XA3PCZS
ssdRHYqhSVPfwTvGTo6Az5u5maTup7BE1K105bEuTPTNVfPI4ElHCxoAOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3QNgOfeakzlzKqCu7RLJ4FoWJPMB8GA1UdIwQY
MBaAFAnFUkmIgYdlVvFuMj8co2myXtsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgt
MTFmMzY1YTczNTJjLzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgtMTFmMzY1YTczNTJj
LzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcafFzoO
gpI8UewWL6fxS9Nb+jnBIdkmFK4toShvc6BeBtDVCzSLF534+5y7KDqlCYlXrUlh
Wr2N6+U14l32wNJGJuRNDzxw5uA+4IBrFJx69quY5uz2mwdNxQA8SAL/4BjWtUJd
sID7+YHtSOjNOrvJOjLXty3hCBycZgSq2PvCNytEe3cxB9V9eeh6Ab0zuMabu891
TdKtq6T/VJMaGDIqnHuv6zsnpEceGxIZm5fOiGNKBxTRTpbqJHqWeZRYLAxFozd4
blfz7/6LIBArKwNTCfj3MD8lFeiwfkBo5Y7OVR7kAyTz5tUUmhEVuja0MFv+AeyX
2X2Q5HZ84nEW6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:35:03 2026 by rpki-client