Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File:                     r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier:          i0dEPSaP3wRIUtFwnEdSaBeh0vH43fzw44vWJHVLDME=
Subject key identifier:   DC:91:27:48:D0:B8:AC:64:E5:C8:76:9F:A4:A9:E3:0C:24:63:6A:23
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer:       /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial:       019F916DB807FEA526D64EF4D21693BA39FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number:          0DEF
Signing time:             Fri 24 Jul 2026 00:01:54 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:54 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:54 +0000
Files and hashes:         1: CmIJnjwGRsNcmhAutOTs4YMD2fE.roa (hash: Jua19yCeg1t/mfvLvJYnD0rI4VExJ2vBY7mPBdrmdaI=)
                          2: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (hash: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=)
                          3: aPz9jYSsAHsZtg1cdjuxCtxCBzk.roa (hash: N0uPovVPRwzq0UQVV7PxhoVVAuzDhOF3XOBQjYFpbpI=)
                          4: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: vZLk7jqfYlOfYpv4lvRwe1y2gtj5/3NX4hgN5cUW7Cs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 00:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:b8:07:fe:a5:26:d6:4e:f4:d2:16:93:ba:39:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
        Validity
            Not Before: Jul 24 00:01:54 2026 GMT
            Not After : Jul 25 00:01:54 2026 GMT
        Subject: CN=dc912748d0b8ac64e5c8769fa4a9e30c24636a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:39:3c:a3:0d:4e:66:3b:ba:92:c6:02:d6:
                    df:27:b5:8f:fe:22:97:58:33:5a:ec:4f:ce:33:da:
                    6b:1e:41:09:92:64:c6:31:27:4c:b0:4b:6d:3d:88:
                    cf:15:98:d8:00:97:46:21:5b:a7:da:80:fc:4e:f0:
                    5a:39:04:62:cb:aa:79:f5:d1:34:7e:58:d1:fb:ef:
                    a2:ed:79:95:bc:ca:0a:94:9b:3a:94:44:18:ba:00:
                    64:92:ea:d8:72:d9:45:b8:42:ff:e5:1e:ff:1f:79:
                    17:b8:b9:19:fa:74:28:e3:fc:c9:da:01:38:47:34:
                    17:35:b5:8a:58:21:ae:4f:16:8c:b1:0c:a2:3d:2d:
                    b7:e8:81:cf:34:ec:bd:78:ab:bb:cb:02:48:9f:79:
                    7a:99:d5:d4:39:df:7a:6d:05:a5:e9:91:f8:ec:43:
                    85:ef:18:af:12:49:1f:c4:3e:e3:7e:5f:f6:a8:0b:
                    95:08:0d:c5:7f:8b:c7:81:c4:42:19:e2:b9:09:f0:
                    27:ad:01:9b:7d:16:22:af:20:c7:05:08:95:8c:0d:
                    ea:8c:31:0c:c6:1e:63:f9:fc:b8:b2:41:6e:86:1f:
                    83:6a:46:ea:e8:f8:f5:db:8a:8b:82:58:28:e7:7f:
                    4a:f4:bf:64:22:c9:2e:4f:44:38:f4:d2:f5:c1:57:
                    28:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:27:48:D0:B8:AC:64:E5:C8:76:9F:A4:A9:E3:0C:24:63:6A:23
            X509v3 Authority Key Identifier:
                keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:84:2f:5a:f0:c5:b4:98:7d:89:bf:6c:31:5b:fe:06:5a:40:
         22:51:8a:1e:d5:f4:2b:d5:06:d6:a4:91:5e:48:10:a9:60:46:
         b4:42:0c:4c:9e:b8:eb:93:64:50:19:8b:1a:e2:6d:25:2a:55:
         30:eb:c8:ef:60:dc:37:d4:0b:03:86:8c:ad:71:e8:04:74:ed:
         36:99:d3:00:ed:f8:c5:a7:01:80:02:65:68:02:f0:24:05:5f:
         f1:dd:a2:17:f9:08:87:01:02:1e:c0:16:dd:8f:13:fa:ba:06:
         f7:44:89:27:e0:d3:5e:b5:d0:9c:90:33:de:e2:4a:72:b0:76:
         16:3e:16:57:be:f7:d7:08:20:e9:7f:3f:f0:2e:f0:4f:de:b3:
         8d:c9:df:fb:65:12:e3:33:11:a0:0e:a3:74:44:3f:8a:43:19:
         60:b4:c4:81:fe:18:04:2a:f8:4e:31:89:3a:57:4f:b0:64:d8:
         d5:a8:f0:ef:90:a0:ed:c8:44:75:13:73:64:b3:ff:c2:d8:e3:
         88:e6:89:5b:1d:fc:db:9a:ba:b1:c4:8c:50:d3:46:b1:80:7c:
         5a:4a:b6:5e:b7:dc:05:8e:2a:a2:bf:a5:db:3a:a3:74:42:70:
         56:a4:55:ac:a1:61:b9:69:1a:96:31:c6:e3:ff:a7:d9:23:12:
         f2:a0:14:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbbgH/qUm1k700haTujn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYjRlMDRhMGVkMzQ0MTEyYzE4NTNjYWIwOWY1MmUxY2Q5
YWJhZjIwHhcNMjYwNzI0MDAwMTU0WhcNMjYwNzI1MDAwMTU0WjAzMTEwLwYDVQQD
EyhkYzkxMjc0OGQwYjhhYzY0ZTVjODc2OWZhNGE5ZTMwYzI0NjM2YTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPg5PKMNTmY7upLGAtbfJ7WP/iKX
WDNa7E/OM9prHkEJkmTGMSdMsEttPYjPFZjYAJdGIVun2oD8TvBaOQRiy6p59dE0
fljR+++i7XmVvMoKlJs6lEQYugBkkurYctlFuEL/5R7/H3kXuLkZ+nQo4/zJ2gE4
RzQXNbWKWCGuTxaMsQyiPS236IHPNOy9eKu7ywJIn3l6mdXUOd96bQWl6ZH47EOF
7xivEkkfxD7jfl/2qAuVCA3Ff4vHgcRCGeK5CfAnrQGbfRYiryDHBQiVjA3qjDEM
xh5j+fy4skFuhh+Dakbq6Pj124qLglgo539K9L9kIskuT0Q49NL1wVco1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyRJ0jQuKxk5ch2n6Sp4wwkY2ojMB8GA1UdIwQY
MBaAFK+04EoO00QRLBhTyrCfUuHNmrryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xOWYyZTYtMWJmMy00ZjdhLTg4MTct
ODA5NWYzMjk3MTc5LzEvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xOWYyZTYtMWJmMy00ZjdhLTg4MTctODA5NWYzMjk3MTc5
LzEvcjdUZ1NnN1RSQkVzR0ZQS3NKOVM0YzJhdXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYQvWvDF
tJh9ib9sMVv+BlpAIlGKHtX0K9UG1qSRXkgQqWBGtEIMTJ6465NkUBmLGuJtJSpV
MOvI72DcN9QLA4aMrXHoBHTtNpnTAO34xacBgAJlaALwJAVf8d2iF/kIhwECHsAW
3Y8T+roG90SJJ+DTXrXQnJAz3uJKcrB2Fj4WV7731wgg6X8/8C7wT96zjcnf+2US
4zMRoA6jdEQ/ikMZYLTEgf4YBCr4TjGJOldPsGTY1ajw75Cg7chEdRNzZLP/wtjj
iOaJWx3825q6scSMUNNGsYB8Wkq2XrfcBY4qor+l2zqjdEJwVqRVrKFhuWkaljHG
4/+n2SMS8qAUtA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:34:18 2026 by rpki-client