Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File:                     m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier:          r5Z0zMSMmgSu5QkMvUuh6dNuL0aVlM/P0QC5d3vc/RY=
Subject key identifier:   99:F3:7C:0F:EF:43:10:09:57:11:E7:EA:32:5B:C5:DC:59:F9:B2:55
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer:       /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial:       019FA1BB34555A4434817229B6064933169D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number:          1963
Signing time:             Mon 27 Jul 2026 04:00:28 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:28 +0000
Manifest next update:     Tue 28 Jul 2026 04:00:28 +0000
Files and hashes:         1: cjkYRf3Yh9WpwKdD5YYzfaFNvWw.roa (hash: 3gq9vL58U08Go4S/2DXWUX5EoB3kYBslnaNgZp37wkE=)
                          2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: DRJ6l6ZB4wDAp6SCRRvrNsjKyh+opK5i5wreXbSs+qo=)
                          3: msBIl7hzmZuQkbrJ6sui74p1Pgg.roa (hash: 1/8Tc8pewIiwrYAG9YY8GUqoXDl/4u6a8D5S98uRMyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:34:55:5a:44:34:81:72:29:b6:06:49:33:16:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
        Validity
            Not Before: Jul 27 04:00:28 2026 GMT
            Not After : Jul 28 04:00:28 2026 GMT
        Subject: CN=99f37c0fef4310095711e7ea325bc5dc59f9b255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:28:e0:6f:0e:93:39:57:bd:61:ad:c5:03:be:
                    84:8f:52:67:ee:3b:98:f4:83:ee:8e:4c:df:a9:37:
                    87:06:03:0d:ef:91:58:00:fd:6a:d6:5d:d4:6d:70:
                    6d:8c:b7:a6:80:25:dd:ec:44:be:84:58:c5:21:4d:
                    f7:0c:93:22:da:32:8e:15:4a:d1:11:ef:a7:a1:37:
                    86:e0:aa:b4:ee:5f:ad:c8:57:f3:04:68:2f:36:2b:
                    06:04:39:7d:b6:0e:68:a6:3c:65:9a:7a:dc:d5:df:
                    8d:ba:62:98:27:7b:41:bd:7f:91:e6:10:95:e3:f8:
                    bf:5d:23:7d:c5:6a:2c:32:27:73:3b:f3:eb:ab:d0:
                    5b:22:eb:67:ab:bf:e2:35:f0:05:f3:8b:77:65:9f:
                    80:58:08:f9:dd:1a:78:4a:45:4a:f0:f4:b3:08:6b:
                    bc:7c:31:0c:a7:d4:5e:ec:1c:2f:90:14:8b:91:e6:
                    7f:d6:8e:e3:4f:07:a4:ca:80:a6:32:4c:33:c2:0a:
                    64:d9:f0:29:01:4b:25:5b:e7:a9:e9:46:23:2b:06:
                    c9:20:4b:e4:cb:f2:aa:c6:01:37:d8:5d:ae:58:cb:
                    dd:11:79:35:ff:d8:68:70:14:6b:4f:5a:4d:ca:09:
                    17:6d:0b:8a:1d:a8:93:1c:c5:a1:85:93:14:8a:97:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F3:7C:0F:EF:43:10:09:57:11:E7:EA:32:5B:C5:DC:59:F9:B2:55
            X509v3 Authority Key Identifier:
                keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8e:b5:a9:02:2d:4b:42:49:62:e8:44:2b:67:6a:10:85:c2:
         c0:56:0d:60:0c:c1:1a:5d:96:f8:f1:34:f7:53:41:a6:0f:c2:
         94:84:5f:41:a2:8a:ff:61:8a:e1:c0:36:5e:13:a0:41:c7:a6:
         e7:36:38:4b:ae:3e:7f:04:f2:3c:05:db:2d:0f:ee:17:d5:9e:
         51:e2:ec:cf:47:22:fa:84:d9:a7:13:2a:6f:16:d7:f7:8d:8a:
         1a:29:ac:fe:6f:e2:9a:25:00:f0:e4:29:94:23:82:94:9f:a7:
         f9:b5:29:01:ac:22:60:e4:0e:93:6b:32:43:db:30:a5:fa:84:
         4d:35:de:ee:e4:b1:e7:aa:c2:2b:9c:ac:30:c1:7a:95:4c:7d:
         28:3f:2a:36:ce:32:c1:a2:d0:66:86:81:69:5c:ad:13:78:41:
         b6:b6:c0:99:14:ef:d7:c8:81:05:a2:fc:3d:92:58:c9:16:8c:
         75:4e:8c:ea:c0:47:69:17:be:f2:39:cc:10:c1:da:7c:84:4b:
         b1:54:b3:e0:7b:41:13:b1:55:56:ca:78:18:52:72:4f:ce:9b:
         df:d1:66:58:c0:1b:20:4d:b5:4f:7d:17:5c:c8:b6:40:f4:2e:
         b5:b3:ea:a5:78:94:bf:a4:1f:5a:33:c2:9b:7d:be:c9:76:e5:
         7e:c2:b5:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+huzRVWkQ0gXIptgZJMxadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTMzN2JkMWE3YzVlZTljNTdhNzNiMGEzM2M2MTIxOWNk
MmE5Y2IwHhcNMjYwNzI3MDQwMDI4WhcNMjYwNzI4MDQwMDI4WjAzMTEwLwYDVQQD
Eyg5OWYzN2MwZmVmNDMxMDA5NTcxMWU3ZWEzMjViYzVkYzU5ZjliMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yjgbw6TOVe9Ya3FA76Ej1Jn7juY
9IPujkzfqTeHBgMN75FYAP1q1l3UbXBtjLemgCXd7ES+hFjFIU33DJMi2jKOFUrR
Ee+noTeG4Kq07l+tyFfzBGgvNisGBDl9tg5opjxlmnrc1d+NumKYJ3tBvX+R5hCV
4/i/XSN9xWosMidzO/Prq9BbIutnq7/iNfAF84t3ZZ+AWAj53Rp4SkVK8PSzCGu8
fDEMp9Re7BwvkBSLkeZ/1o7jTwekyoCmMkwzwgpk2fApAUslW+ep6UYjKwbJIEvk
y/KqxgE32F2uWMvdEXk1/9hocBRrT1pNygkXbQuKHaiTHMWhhZMUipcDBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnzfA/vQxAJVxHn6jJbxdxZ+bJVMB8GA1UdIwQY
MBaAFJtTN70afF7pxXpzsKM8YSGc0qnLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQt
MmVmNzE2NWIyMWI1LzEvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQtMmVmNzE2NWIyMWI1
LzEvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADo61qQIt
S0JJYuhEK2dqEIXCwFYNYAzBGl2W+PE091NBpg/ClIRfQaKK/2GK4cA2XhOgQcem
5zY4S64+fwTyPAXbLQ/uF9WeUeLsz0ci+oTZpxMqbxbX942KGims/m/imiUA8OQp
lCOClJ+n+bUpAawiYOQOk2syQ9swpfqETTXe7uSx56rCK5ysMMF6lUx9KD8qNs4y
waLQZoaBaVytE3hBtrbAmRTv18iBBaL8PZJYyRaMdU6M6sBHaRe+8jnMEMHafIRL
sVSz4HtBE7FVVsp4GFJyT86b39FmWMAbIE21T30XXMi2QPQutbPqpXiUv6QfWjPC
m32+yXblfsK1Mg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:05:33 2026 by rpki-client