Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
File:                     iCdfXxLHVuoJSy-iztIXc9aa6JY.mft (raw, json)
Hash identifier:          1T/85jCPAg3txuIej4wmMr3Rbj4V+GeXVrqCnTbmMFQ=
Subject key identifier:   19:15:27:E1:47:A3:D5:5D:10:57:B3:55:F4:A1:45:11:A1:C2:64:7A
Authority key identifier: 88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
Certificate issuer:       /CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Certificate serial:       019F85D7255B50BD3D68DDEDC516D498AB93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
Manifest number:          3A
Signing time:             Tue 21 Jul 2026 18:01:37 +0000
Manifest this update:     Tue 21 Jul 2026 18:01:37 +0000
Manifest next update:     Wed 22 Jul 2026 18:01:37 +0000
Files and hashes:         1: B1z4xoRxZ4h1nuQU7fiGHIusmcs.roa (hash: AH8e1SFxP7mwVEgpLVC0rJF7pyGIB69p63iAMsbetvc=)
                          2: CUsD8lt5-lXh9LkZsJ6cPOX6hsc.roa (hash: vpk8KShRqahOvvvQQ5KHNcIKAntGCFPSkwmHDUnFRTk=)
                          3: iCdfXxLHVuoJSy-iztIXc9aa6JY.crl (hash: VwoOPAPVsOVNVR1aJgqSuuwM4ilBd7sVgDqJKxoauFk=)
                          4: wRv9fBJmvre20xMdwIU9laC5e10.roa (hash: PtCj3wS6CUonUfFeQe3p1omlsL2UMohFubS3Dus/vvU=)
                          5: zSxXam422uceBcDgVTQwKML7HzQ.roa (hash: GpllbBF29LkUDq+WEWLkHp5EqGZXeUURJtYTQzOT19Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d7:25:5b:50:bd:3d:68:dd:ed:c5:16:d4:98:ab:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88275f5f12c756ea094b2fa2ced21773d69ae896
        Validity
            Not Before: Jul 21 18:01:37 2026 GMT
            Not After : Jul 22 18:01:37 2026 GMT
        Subject: CN=191527e147a3d55d1057b355f4a14511a1c2647a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3e:fb:1f:50:4b:85:86:ee:23:bb:28:24:61:
                    93:78:72:61:14:f7:07:15:ad:bd:54:eb:e4:8f:4e:
                    cb:ba:c1:53:58:fc:87:69:eb:8b:9c:90:3e:56:9c:
                    c8:8e:f1:b0:bb:5f:cc:a9:14:7c:b6:c5:f4:e7:39:
                    d7:0d:dd:89:83:17:6c:3a:54:9e:d8:fa:dd:65:a4:
                    8d:1e:57:35:0c:f0:0d:d3:39:bd:04:8b:bc:21:40:
                    72:88:88:de:ff:e1:13:97:dd:52:76:f5:37:6c:1d:
                    11:2e:ed:82:56:64:df:d5:66:bb:39:bb:26:11:c7:
                    52:62:e2:18:2c:74:f9:b8:de:c9:fb:f4:05:1c:4a:
                    1e:37:00:f5:bb:b0:15:89:c4:43:d3:74:cc:61:f7:
                    26:d8:0f:ab:77:70:ef:fb:04:14:81:fc:2d:ad:d6:
                    99:ae:ea:c4:89:84:48:e3:ed:1e:d0:b6:24:03:f8:
                    ba:47:82:11:7e:bb:71:9d:3d:0e:f6:8d:51:03:a5:
                    78:ed:b8:31:0a:b0:1b:96:62:77:45:7a:05:3f:d5:
                    f6:4f:96:90:ff:b5:73:31:21:c3:ae:36:a3:e7:af:
                    26:7a:8e:16:a5:29:e5:a7:ee:88:dc:e1:f1:01:ee:
                    6a:55:b9:3b:8a:6b:a8:75:2d:19:01:d2:eb:4e:23:
                    7d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:15:27:E1:47:A3:D5:5D:10:57:B3:55:F4:A1:45:11:A1:C2:64:7A
            X509v3 Authority Key Identifier:
                keyid:88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:fc:1c:97:83:9e:fe:d6:25:db:34:de:a1:6e:02:a7:5a:f8:
         8f:98:05:0f:be:d2:ac:eb:51:87:aa:e0:ee:79:81:21:04:8b:
         0e:ce:a4:1f:44:cf:83:97:fb:e6:ff:12:9a:35:be:96:f1:82:
         6c:70:1f:f7:68:52:0d:58:1c:71:d5:79:98:00:9f:a8:d0:c0:
         05:d4:0a:e5:6c:00:13:ed:f1:45:af:31:bb:a5:11:d4:75:f7:
         0a:50:6e:a6:b0:a6:65:bc:ad:99:d0:62:79:4d:42:68:d5:88:
         ad:48:b4:da:b5:df:ed:2f:85:ef:00:6e:e6:98:a6:eb:21:a5:
         c9:38:a7:dc:f4:13:4a:af:9d:7f:d8:7e:43:62:42:8b:e4:2a:
         16:ac:17:14:10:78:fb:5d:69:42:b5:8c:4a:f0:ce:cf:90:88:
         68:ad:f6:0b:c1:d2:5b:17:2c:91:9d:8e:02:6e:ba:8d:6a:55:
         05:a0:ad:1d:6f:40:b9:a6:8d:1b:d5:79:36:f3:c4:82:76:01:
         d1:4d:43:b9:54:f2:8c:6d:85:49:e8:01:af:e8:cb:cd:99:01:
         fd:51:af:aa:8b:c5:9d:22:b8:88:a4:49:2b:16:ea:0c:78:78:
         27:a1:e7:9e:f5:61:b7:2e:2d:a3:67:c5:d9:76:a5:db:20:46:
         f7:6a:7e:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1yVbUL09aN3txRbUmKuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Mjc1ZjVmMTJjNzU2ZWEwOTRiMmZhMmNlZDIxNzczZDY5
YWU4OTYwHhcNMjYwNzIxMTgwMTM3WhcNMjYwNzIyMTgwMTM3WjAzMTEwLwYDVQQD
EygxOTE1MjdlMTQ3YTNkNTVkMTA1N2IzNTVmNGExNDUxMWExYzI2NDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD77H1BLhYbuI7soJGGTeHJhFPcH
Fa29VOvkj07LusFTWPyHaeuLnJA+VpzIjvGwu1/MqRR8tsX05znXDd2JgxdsOlSe
2PrdZaSNHlc1DPAN0zm9BIu8IUByiIje/+ETl91SdvU3bB0RLu2CVmTf1Wa7Obsm
EcdSYuIYLHT5uN7J+/QFHEoeNwD1u7AVicRD03TMYfcm2A+rd3Dv+wQUgfwtrdaZ
rurEiYRI4+0e0LYkA/i6R4IRfrtxnT0O9o1RA6V47bgxCrAblmJ3RXoFP9X2T5aQ
/7VzMSHDrjaj568meo4WpSnlp+6I3OHxAe5qVbk7imuodS0ZAdLrTiN9SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkVJ+FHo9VdEFezVfShRRGhwmR6MB8GA1UdIwQY
MBaAFIgnX18Sx1bqCUsvos7SF3PWmuiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUNkZlh4TEhWdW9KU3ktaXp0SVhjOWFhNkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDkt
Nzc1ZjVmNzRkNTgxLzEvaUNkZlh4TEhWdW9KU3ktaXp0SVhjOWFhNkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDktNzc1ZjVmNzRkNTgx
LzEvaUNkZlh4TEhWdW9KU3ktaXp0SVhjOWFhNkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvwcl4Oe
/tYl2zTeoW4Cp1r4j5gFD77SrOtRh6rg7nmBIQSLDs6kH0TPg5f75v8SmjW+lvGC
bHAf92hSDVgccdV5mACfqNDABdQK5WwAE+3xRa8xu6UR1HX3ClBuprCmZbytmdBi
eU1CaNWIrUi02rXf7S+F7wBu5pim6yGlyTin3PQTSq+df9h+Q2JCi+QqFqwXFBB4
+11pQrWMSvDOz5CIaK32C8HSWxcskZ2OAm66jWpVBaCtHW9AuaaNG9V5NvPEgnYB
0U1DuVTyjG2FSegBr+jLzZkB/VGvqovFnSK4iKRJKxbqDHh4J6HnnvVhty4to2fF
2Xal2yBG92p+5g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:20:25 2026 by rpki-client