Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
File:                     xEBsnAYTL85A7cBG4GmuNFK6aOM.mft (raw, json)
Hash identifier:          3c3xWC1nBiY/XqZ+bU3Mabr9VYqDd0pBTZJ8aEf4iBc=
Subject key identifier:   94:FC:44:B3:25:EE:ED:A9:B4:0F:83:A3:90:D8:9B:03:D0:A6:6C:F0
Authority key identifier: C4:40:6C:9C:06:13:2F:CE:40:ED:C0:46:E0:69:AE:34:52:BA:68:E3
Certificate issuer:       /CN=c4406c9c06132fce40edc046e069ae3452ba68e3
Certificate serial:       019F94A46B038D425BA0DA73E53DA8509A18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
Manifest number:          018B
Signing time:             Fri 24 Jul 2026 15:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:30 +0000
Files and hashes:         1: b_C6-vRVgU9-ZGu5iPetXhBiGd0.roa (hash: 2gUqRWsgOMEHr5aKvlRadKgrnBBP2u9PjUCeJ2rack0=)
                          2: xEBsnAYTL85A7cBG4GmuNFK6aOM.crl (hash: lrAvipwA2wwLmKC5s/A2BNSBBCclKavRh+47VBY7Fxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:6b:03:8d:42:5b:a0:da:73:e5:3d:a8:50:9a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4406c9c06132fce40edc046e069ae3452ba68e3
        Validity
            Not Before: Jul 24 15:00:30 2026 GMT
            Not After : Jul 25 15:00:30 2026 GMT
        Subject: CN=94fc44b325eeeda9b40f83a390d89b03d0a66cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:9a:8d:30:79:1a:47:f1:31:bd:ba:38:e2:
                    e3:95:ec:a7:ed:bb:2f:e5:67:88:46:32:3c:83:a0:
                    a9:02:9f:7a:e5:12:14:d5:b0:de:55:ff:7e:5f:67:
                    58:d1:25:7a:b4:1a:4b:8b:0a:8b:6a:c9:8f:e7:79:
                    24:6e:5e:b4:4f:d1:e4:dc:de:24:7f:68:c9:7a:2f:
                    15:14:85:e5:7c:1e:4b:d9:19:63:f1:76:a4:cf:b0:
                    f3:37:12:b5:b2:e7:e8:3b:1c:97:3c:45:33:09:50:
                    cc:0f:e3:8a:36:6a:3d:d3:4e:45:ff:1c:9a:d0:ce:
                    a3:53:6e:cf:ca:27:39:f2:9d:f9:f5:39:7b:3a:01:
                    9f:56:01:b1:93:06:43:d4:bc:33:aa:d0:67:32:02:
                    ca:a6:d8:db:c0:b4:07:4a:9c:a3:74:c0:ea:a6:80:
                    bd:90:46:6e:7f:d2:e3:bc:28:05:35:f9:81:a6:93:
                    39:d1:2f:39:5a:16:15:9f:ed:78:87:1f:05:c8:7d:
                    30:92:34:49:5d:3c:c0:64:68:67:d5:94:c9:53:2c:
                    9a:6a:78:51:e1:22:fb:63:2b:1b:14:73:a7:a0:f1:
                    87:fe:f6:fd:8e:3c:a4:79:ce:e0:84:01:a2:5e:73:
                    4d:49:30:d6:ec:1b:bb:6a:d4:05:18:df:6f:e5:79:
                    25:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FC:44:B3:25:EE:ED:A9:B4:0F:83:A3:90:D8:9B:03:D0:A6:6C:F0
            X509v3 Authority Key Identifier:
                keyid:C4:40:6C:9C:06:13:2F:CE:40:ED:C0:46:E0:69:AE:34:52:BA:68:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEBsnAYTL85A7cBG4GmuNFK6aOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7eecd9-a4c4-41aa-a6ec-42ac69e5e8dc/1/xEBsnAYTL85A7cBG4GmuNFK6aOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:98:42:0d:0d:12:58:34:70:e4:b2:92:3f:1b:26:63:7c:47:
         8a:18:4a:11:9e:5d:98:35:c1:e3:03:76:4a:bb:0c:d6:68:52:
         8d:c9:51:7a:3a:cb:20:43:45:7f:66:7a:09:47:0b:99:bb:ee:
         14:78:0a:69:67:2d:52:a0:38:c4:8c:b6:d5:b8:eb:fc:3a:16:
         da:54:ec:39:e1:f3:f7:91:bd:d8:09:7c:f7:fc:ba:68:8d:90:
         dd:46:ba:39:42:1a:bd:b6:5f:8d:47:1b:36:3f:1e:98:7f:64:
         b4:97:99:09:9b:7d:8a:78:77:c7:ab:8e:e4:a1:4f:1e:c3:df:
         79:15:09:2d:5d:97:92:7a:56:63:78:6f:41:0e:c9:43:4d:b4:
         f3:80:51:7a:88:d3:58:60:f1:b1:0e:2a:28:9c:55:7a:c5:e1:
         56:69:25:57:9f:03:66:a6:c0:6b:56:be:bb:d5:6b:01:6e:5c:
         d3:f9:fa:81:3e:b9:58:c3:59:5c:61:07:91:88:1e:6a:77:b1:
         ad:e8:43:70:c5:8c:3a:8d:60:8b:4b:a6:b4:c1:b0:16:88:52:
         88:be:82:9d:a9:f4:32:e9:24:f8:2e:bd:4b:7d:ce:af:1a:cb:
         cf:61:8f:f4:ff:0c:e6:71:79:10:3c:8e:19:2d:74:c8:2b:b5:
         b3:3d:29:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpGsDjUJboNpz5T2oUJoYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDA2YzljMDYxMzJmY2U0MGVkYzA0NmUwNjlhZTM0NTJi
YTY4ZTMwHhcNMjYwNzI0MTUwMDMwWhcNMjYwNzI1MTUwMDMwWjAzMTEwLwYDVQQD
Eyg5NGZjNDRiMzI1ZWVlZGE5YjQwZjgzYTM5MGQ4OWIwM2QwYTY2Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3eajTB5GkfxMb26OOLjleyn7bsv
5WeIRjI8g6CpAp965RIU1bDeVf9+X2dY0SV6tBpLiwqLasmP53kkbl60T9Hk3N4k
f2jJei8VFIXlfB5L2Rlj8Xakz7DzNxK1sufoOxyXPEUzCVDMD+OKNmo9005F/xya
0M6jU27Pyic58p359Tl7OgGfVgGxkwZD1LwzqtBnMgLKptjbwLQHSpyjdMDqpoC9
kEZuf9LjvCgFNfmBppM50S85WhYVn+14hx8FyH0wkjRJXTzAZGhn1ZTJUyyaanhR
4SL7YysbFHOnoPGH/vb9jjykec7ghAGiXnNNSTDW7Bu7atQFGN9v5XklTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJT8RLMl7u2ptA+Do5DYmwPQpmzwMB8GA1UdIwQY
MBaAFMRAbJwGEy/OQO3ARuBprjRSumjjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVCc25BWVRMODVBN2NCRzRHbXVORks2YU9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83ZWVjZDktYTRjNC00MWFhLWE2ZWMt
NDJhYzY5ZTVlOGRjLzEveEVCc25BWVRMODVBN2NCRzRHbXVORks2YU9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83ZWVjZDktYTRjNC00MWFhLWE2ZWMtNDJhYzY5ZTVlOGRj
LzEveEVCc25BWVRMODVBN2NCRzRHbXVORks2YU9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5hCDQ0S
WDRw5LKSPxsmY3xHihhKEZ5dmDXB4wN2SrsM1mhSjclRejrLIENFf2Z6CUcLmbvu
FHgKaWctUqA4xIy21bjr/DoW2lTsOeHz95G92Al89/y6aI2Q3Ua6OUIavbZfjUcb
Nj8emH9ktJeZCZt9inh3x6uO5KFPHsPfeRUJLV2XknpWY3hvQQ7JQ02084BReojT
WGDxsQ4qKJxVesXhVmklV58DZqbAa1a+u9VrAW5c0/n6gT65WMNZXGEHkYgeanex
rehDcMWMOo1gi0umtMGwFohSiL6Cnan0Mukk+C69S33OrxrLz2GP9P8M5nF5EDyO
GS10yCu1sz0pMg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:14 2026 by rpki-client