Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File:                     gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier:          3l1YskQVcUj1JgS/0WOe0D8a33xn57t6OHWo2ySwXuQ=
Subject key identifier:   10:3D:8D:F6:48:97:3A:B5:AD:B1:6E:EB:DF:DF:68:53:E6:25:F6:56
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer:       /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial:       019FA33C64C9A116FF36F3FDB6DF28B15E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number:          1100
Signing time:             Mon 27 Jul 2026 11:01:11 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:11 +0000
Manifest next update:     Tue 28 Jul 2026 11:01:11 +0000
Files and hashes:         1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=)
                          2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: +ABHFRmLE5lFsx2X/oLO30FJeBNek9erZBkyiT+ZWGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:64:c9:a1:16:ff:36:f3:fd:b6:df:28:b1:5e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
        Validity
            Not Before: Jul 27 11:01:11 2026 GMT
            Not After : Jul 28 11:01:11 2026 GMT
        Subject: CN=103d8df648973ab5adb16eebdfdf6853e625f656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:77:d4:4d:1e:6b:87:68:14:4e:e4:46:36:
                    97:53:72:e7:bb:39:ea:33:04:bd:fe:57:2e:e5:0e:
                    e0:67:7d:65:a3:77:ec:70:20:8b:5c:25:6e:81:44:
                    c9:6e:8e:52:94:a1:c3:bf:d8:03:f5:ea:01:b0:86:
                    99:a2:94:c6:8b:7e:8c:0b:fb:a3:20:d4:1e:a3:03:
                    a4:00:ef:96:f8:c2:f1:c6:98:b9:a0:f8:a0:97:64:
                    05:9f:cd:62:e5:e6:34:a3:3d:66:2e:93:07:2c:3f:
                    0a:c0:a1:78:f5:5d:7c:e4:15:64:1b:d8:1a:79:e4:
                    3c:38:55:0b:a6:9c:15:b1:dc:8e:ce:91:d0:dc:af:
                    8a:2f:2b:35:99:07:16:1e:a7:c3:bd:b1:56:86:c7:
                    9a:d0:1a:10:8d:33:45:b6:42:c2:7e:12:75:a8:a4:
                    0b:e8:38:a5:ef:37:29:17:ca:ac:a4:68:8e:e3:88:
                    f8:c5:9e:23:71:aa:c9:cc:b7:43:3f:bc:60:d5:70:
                    6c:70:ef:bf:b1:25:30:65:89:2e:85:8a:4a:cc:3a:
                    bc:31:b0:5e:a5:cd:e4:35:e4:95:a3:e9:cd:c8:68:
                    e7:0b:4d:10:29:f4:04:66:d2:af:6a:b9:4b:87:00:
                    cd:42:9c:62:22:a1:39:02:72:fb:5d:68:ae:b3:2d:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3D:8D:F6:48:97:3A:B5:AD:B1:6E:EB:DF:DF:68:53:E6:25:F6:56
            X509v3 Authority Key Identifier:
                keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:24:d9:33:37:02:21:ce:36:d4:cc:90:3e:4f:d3:1f:f5:1a:
         f6:da:53:a0:35:24:3e:2f:24:c9:b3:10:99:7d:23:bf:41:1a:
         35:ea:87:0a:90:00:57:3a:e4:00:15:fc:d5:44:6b:63:5e:48:
         1f:d9:a4:c4:5c:15:bb:58:f3:e7:b8:67:fe:f3:20:a3:f4:52:
         6a:f1:71:9c:0f:40:60:a2:1b:8a:d1:76:39:7b:20:22:19:f3:
         28:6d:58:1f:cd:1e:74:17:4d:01:95:4d:13:c1:de:78:32:6d:
         8f:ab:cb:2b:17:0e:db:8f:d7:9b:40:9e:fe:21:fe:90:70:75:
         8a:20:09:b1:75:92:8d:c2:20:35:92:21:82:64:c9:e7:a3:30:
         d2:39:d4:15:6b:87:4b:5c:e1:24:a1:4e:ec:06:4f:d7:4d:9d:
         9c:3f:ef:7c:46:6d:2b:ed:c0:89:be:93:31:a2:28:80:7d:63:
         cc:a3:7d:6e:23:0d:68:ce:31:26:27:36:45:ce:2e:14:cf:d5:
         b8:92:e3:eb:3c:34:60:46:6a:c3:33:5e:30:e7:1a:3f:57:f6:
         5c:8d:ba:fd:33:66:47:3a:85:a0:03:6c:2a:cf:ad:7a:4c:4e:
         48:c5:e7:c5:93:78:f2:ed:0f:6f:9f:44:46:8a:95:4e:f7:af:
         3f:7f:46:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jPGTJoRb/NvP9tt8osV4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2
YmFlNGMwHhcNMjYwNzI3MTEwMTExWhcNMjYwNzI4MTEwMTExWjAzMTEwLwYDVQQD
EygxMDNkOGRmNjQ4OTczYWI1YWRiMTZlZWJkZmRmNjg1M2U2MjVmNjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnp31E0ea4doFE7kRjaXU3Lnuznq
MwS9/lcu5Q7gZ31lo3fscCCLXCVugUTJbo5SlKHDv9gD9eoBsIaZopTGi36MC/uj
INQeowOkAO+W+MLxxpi5oPigl2QFn81i5eY0oz1mLpMHLD8KwKF49V185BVkG9ga
eeQ8OFULppwVsdyOzpHQ3K+KLys1mQcWHqfDvbFWhsea0BoQjTNFtkLCfhJ1qKQL
6Dil7zcpF8qspGiO44j4xZ4jcarJzLdDP7xg1XBscO+/sSUwZYkuhYpKzDq8MbBe
pc3kNeSVo+nNyGjnC00QKfQEZtKvarlLhwDNQpxiIqE5AnL7XWiusy1AgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBA9jfZIlzq1rbFu69/faFPmJfZWMB8GA1UdIwQY
MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt
YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj
LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSTZMzcC
Ic421MyQPk/TH/Ua9tpToDUkPi8kybMQmX0jv0EaNeqHCpAAVzrkABX81URrY15I
H9mkxFwVu1jz57hn/vMgo/RSavFxnA9AYKIbitF2OXsgIhnzKG1YH80edBdNAZVN
E8HeeDJtj6vLKxcO24/Xm0Ce/iH+kHB1iiAJsXWSjcIgNZIhgmTJ56Mw0jnUFWuH
S1zhJKFO7AZP102dnD/vfEZtK+3Aib6TMaIogH1jzKN9biMNaM4xJic2Rc4uFM/V
uJLj6zw0YEZqwzNeMOcaP1f2XI26/TNmRzqFoANsKs+tekxOSMXnxZN48u0Pb59E
RoqVTvevP39Gqw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:36:12 2026 by rpki-client