Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File:                     fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier:          20qDJTwic6cw2OKtZwZiBC5bs6CG8RpdWHFm0Rj5Az0=
Subject key identifier:   54:46:A1:57:C0:7D:75:39:9E:45:E1:20:F6:87:DF:19:9C:CC:75:25
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer:       /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial:       019FA1F2873301A5184BED758F2DCA2ADB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number:          0560
Signing time:             Mon 27 Jul 2026 05:00:53 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:53 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:53 +0000
Files and hashes:         1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
                          2: a7dc7sTXBG9g6baqXZ5n-zFcW2U.roa (hash: NAb+NkDlWJd04gSzwtykl0+s9KlRgbw76dF4Fu82HXg=)
                          3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: 0vVjRgxNts36H+rHUFOAke9TXyNxf8j95m5XgELeVfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:87:33:01:a5:18:4b:ed:75:8f:2d:ca:2a:db:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
        Validity
            Not Before: Jul 27 05:00:53 2026 GMT
            Not After : Jul 28 05:00:53 2026 GMT
        Subject: CN=5446a157c07d75399e45e120f687df199ccc7525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:60:bf:10:fc:27:2a:18:31:43:a4:0b:21:
                    36:ee:ea:d1:3a:f4:79:33:18:e7:7e:ac:75:41:5f:
                    b3:d2:da:22:8d:9c:cc:0b:00:8e:72:31:96:b4:cb:
                    af:0f:54:37:c8:cd:46:f9:77:56:45:08:ce:29:97:
                    6c:88:86:71:b0:12:4c:6f:df:ab:34:16:55:16:6e:
                    23:c0:f9:6a:e5:6c:13:8c:0f:21:57:ff:72:8e:73:
                    ac:4e:13:7a:08:43:26:cf:bd:36:2c:e4:6d:53:66:
                    d8:f6:1d:60:a7:f7:be:41:21:b5:6b:90:32:1f:a4:
                    70:52:ba:ac:a7:85:93:ad:35:70:c4:78:c3:27:e8:
                    07:5a:0f:0f:a1:b1:cc:94:a7:58:c4:98:a8:a2:74:
                    c0:a5:37:53:1c:e3:79:5d:6f:02:cb:5b:28:a1:5c:
                    3d:82:6e:41:b0:24:86:77:a0:9a:83:eb:a7:c1:32:
                    50:4f:be:08:7c:cc:68:4c:10:0e:8f:54:7d:65:9b:
                    fb:d5:68:33:a0:98:8c:59:46:f4:e3:58:cb:bf:76:
                    ed:49:31:c9:80:d4:f4:c8:f9:cf:22:b5:59:a1:5c:
                    77:dc:2a:be:1c:6f:50:bc:48:b6:58:10:a1:10:a8:
                    06:86:47:fe:e0:78:f3:26:8e:f6:26:f1:df:76:bf:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:46:A1:57:C0:7D:75:39:9E:45:E1:20:F6:87:DF:19:9C:CC:75:25
            X509v3 Authority Key Identifier:
                keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a0:64:8e:9d:07:97:0c:98:7d:d7:08:e3:3f:60:e6:26:a6:
         3c:7a:93:5b:d0:f6:14:58:e7:79:d3:bd:9d:c1:df:ed:75:a7:
         ab:aa:4d:ae:28:3a:67:74:7d:33:3d:6a:20:83:da:5d:7f:15:
         e8:d3:d0:62:2d:cd:eb:2b:e7:e5:49:60:f1:25:60:35:15:0b:
         02:2e:6e:cc:0b:72:21:44:bf:fa:bd:bb:79:80:ae:60:07:0f:
         f8:ce:01:2a:be:0f:59:1b:dd:ad:4e:bd:7d:dd:34:fe:95:ff:
         f8:5d:9a:54:54:94:62:5b:c2:e7:4b:5b:64:9a:0d:61:84:7e:
         9c:e1:81:fd:46:3d:52:4c:b6:73:57:df:d6:fd:48:92:fd:d9:
         ca:a2:6d:0c:28:74:e8:52:61:70:aa:9e:ea:57:39:b7:4c:da:
         c8:cd:dd:74:7c:55:05:e2:d9:64:d0:bd:e6:8c:cc:11:a2:e2:
         a2:39:ed:29:c4:69:0f:01:8f:39:50:49:55:0f:ee:4a:96:cd:
         6e:6c:b1:3f:78:48:72:35:de:db:19:76:1b:cd:63:1e:5d:12:
         a0:44:ad:20:59:49:5d:77:21:73:a5:f2:0e:f1:f1:a1:c7:55:
         58:6b:50:e7:c2:f7:ef:c2:ca:4b:05:3a:04:9e:d2:ba:24:a0:
         6e:55:15:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8oczAaUYS+11jy3KKts4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNmUyZTY5NjZlMDZhYjI1Y2EwZTFkYTY2ZTFlM2Q2NDI0
OGIzYTEwHhcNMjYwNzI3MDUwMDUzWhcNMjYwNzI4MDUwMDUzWjAzMTEwLwYDVQQD
Eyg1NDQ2YTE1N2MwN2Q3NTM5OWU0NWUxMjBmNjg3ZGYxOTljY2M3NTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw1gvxD8JyoYMUOkCyE27urROvR5
Mxjnfqx1QV+z0toijZzMCwCOcjGWtMuvD1Q3yM1G+XdWRQjOKZdsiIZxsBJMb9+r
NBZVFm4jwPlq5WwTjA8hV/9yjnOsThN6CEMmz702LORtU2bY9h1gp/e+QSG1a5Ay
H6RwUrqsp4WTrTVwxHjDJ+gHWg8PobHMlKdYxJioonTApTdTHON5XW8Cy1sooVw9
gm5BsCSGd6Cag+unwTJQT74IfMxoTBAOj1R9ZZv71WgzoJiMWUb041jLv3btSTHJ
gNT0yPnPIrVZoVx33Cq+HG9QvEi2WBChEKgGhkf+4HjzJo72JvHfdr9NcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRGoVfAfXU5nkXhIPaH3xmczHUlMB8GA1UdIwQY
MBaAFH5uLmlm4GqyXKDh2mbh49ZCSLOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hNzUzOGEtNjliZS00ZmJlLTk3ZTEt
ODdkOTdlMmFhZGM0LzEvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9hNzUzOGEtNjliZS00ZmJlLTk3ZTEtODdkOTdlMmFhZGM0
LzEvZm00dWFXYmdhckpjb09IYVp1SGoxa0pJczZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaBkjp0H
lwyYfdcI4z9g5iamPHqTW9D2FFjnedO9ncHf7XWnq6pNrig6Z3R9Mz1qIIPaXX8V
6NPQYi3N6yvn5Ulg8SVgNRULAi5uzAtyIUS/+r27eYCuYAcP+M4BKr4PWRvdrU69
fd00/pX/+F2aVFSUYlvC50tbZJoNYYR+nOGB/UY9Uky2c1ff1v1Ikv3ZyqJtDCh0
6FJhcKqe6lc5t0zayM3ddHxVBeLZZNC95ozMEaLiojntKcRpDwGPOVBJVQ/uSpbN
bmyxP3hIcjXe2xl2G81jHl0SoEStIFlJXXchc6XyDvHxocdVWGtQ58L378LKSwU6
BJ7SuiSgblUVWg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:53 2026 by rpki-client