Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File:                     x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier:          BOl1QJpE6zFu3J9AB0lOEv9MTMyuhrvs+U/C/GQbI1I=
Subject key identifier:   CC:7E:A5:2F:7F:40:D4:BD:C9:55:68:1F:7D:8F:66:51:52:49:D6:24
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer:       /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial:       019F2924C6AF39FFB1BFBBF86F6B3B43BD7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number:          16A3
Signing time:             Fri 03 Jul 2026 18:01:43 +0000
Manifest this update:     Fri 03 Jul 2026 18:01:43 +0000
Manifest next update:     Sat 04 Jul 2026 18:01:43 +0000
Files and hashes:         1: INecSgDNWHvp6sU-WpJihfiFh4s.roa (hash: PMEEstkE23N+oMl4zNZYpTJcYs3rPhZEK/XuV630Gno=)
                          2: f25A04rpXtD2_br_jQIVVfQ8etM.roa (hash: iSZljQkRURevE7K28zcSzw6RdndhY9rvXLjgdmSdTqY=)
                          3: ggUa6LfIuLLVR5P1Qr24VmoyZso.roa (hash: rdmuXEokTMYqrj4xUmy2EZVO5gA++Wv14CxkDlRPOSQ=)
                          4: gnB4DwAgCjyQcWFzJEdE7GWr73o.roa (hash: HW/BGej/dJUcVDYCwLRVJHa3/FSej9vAGH4VzbSF+To=)
                          5: tmpjXkdMeErzXzSF-Knv6lEK4MM.roa (hash: 59w580G8bYKyMW9mWYISKVPkaSir7aOf2hHeB7WsN6s=)
                          6: w_ptOPR66g-2hUDEWzrs74clcAE.roa (hash: 6vuuqzAxRKqIgwnNrTyFV+eVf/OZTeXgi5JQBVeXXCI=)
                          7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: 3VSjKPdzMD17wlCxicXW//e33e2Z65GMWYFaHsTwS98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:29:24:c6:af:39:ff:b1:bf:bb:f8:6f:6b:3b:43:bd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
        Validity
            Not Before: Jul  3 18:01:43 2026 GMT
            Not After : Jul  4 18:01:43 2026 GMT
        Subject: CN=cc7ea52f7f40d4bdc955681f7d8f66515249d624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:bb:e2:13:05:dc:cd:cd:89:08:20:16:0e:
                    2c:8e:d0:cc:fe:27:12:32:36:d4:c0:a4:ce:90:a7:
                    fd:3a:f0:e0:55:b7:c6:fb:1c:6c:66:b7:91:a1:2d:
                    aa:bf:d7:4d:0d:45:b7:3a:1c:53:7e:42:21:4b:93:
                    03:79:66:60:21:ca:9b:99:41:6a:aa:6a:32:e5:f4:
                    fe:82:f6:60:b6:4e:60:3e:eb:c5:47:48:59:01:ac:
                    bc:6b:41:e7:89:1b:3b:c6:a5:52:c8:fd:c7:00:60:
                    4c:0d:cc:93:e5:a9:e7:7f:70:9a:fb:2d:88:ba:06:
                    a1:9d:5b:03:68:0f:f5:85:29:38:9d:40:eb:34:5d:
                    e0:39:58:df:28:71:2e:10:e7:1b:a1:78:f1:f2:a1:
                    8a:56:c8:c7:78:17:d6:3a:22:a7:3b:bc:33:f2:46:
                    4a:61:4e:a1:a0:16:ee:7e:65:dd:59:b8:43:44:1c:
                    92:36:1e:4b:2a:58:a3:50:65:77:85:a0:f6:44:7c:
                    ca:06:e9:0a:7e:e5:2d:95:d0:b5:76:c3:b0:d3:47:
                    3a:1d:3d:62:25:d5:bd:70:75:db:4c:a9:f2:50:32:
                    10:c7:e1:80:8c:6a:ea:21:b7:9b:8f:ee:bf:77:e4:
                    b2:2b:af:9a:ce:d0:76:8f:ad:a9:6b:e8:a8:35:8a:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7E:A5:2F:7F:40:D4:BD:C9:55:68:1F:7D:8F:66:51:52:49:D6:24
            X509v3 Authority Key Identifier:
                keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b0:8e:f9:da:f6:83:e9:4b:37:02:33:a0:44:b2:bf:76:e8:
         44:ec:ca:06:09:3a:8b:61:07:52:cc:b2:82:a1:54:78:2e:64:
         18:06:f8:e7:10:21:fb:ca:21:f1:44:d6:f9:ad:a4:16:3d:c0:
         8a:a1:6f:3a:93:c8:54:65:6b:56:7a:e5:8e:1e:76:bf:8d:4d:
         93:2d:f2:45:5d:42:34:1e:80:13:f3:6d:e3:69:1a:29:e5:2e:
         57:4c:87:2a:de:2a:1b:f9:95:a1:55:83:c4:6b:2a:37:61:0c:
         7e:6e:7c:3a:73:15:70:0a:72:c1:ca:7c:69:32:3f:6d:b7:2b:
         ac:4c:cb:0e:85:20:14:68:c4:2d:18:6b:d5:89:92:02:5a:72:
         ee:16:77:e7:c0:76:b6:0f:3a:f5:44:46:c7:2e:1d:bc:3c:cf:
         b9:22:c7:29:2d:66:24:66:ed:34:9e:b8:c6:fd:3f:4f:f2:60:
         9a:91:dd:ff:74:62:84:d3:38:68:04:cb:51:c9:9d:05:5b:4d:
         8a:58:9b:fc:ae:94:c1:5d:08:48:b5:14:b0:39:ca:f0:b8:64:
         b9:24:f5:26:53:c9:a2:35:49:c9:d1:b1:de:ed:fd:35:a3:cc:
         f1:59:8d:73:0b:c3:a4:85:4e:ff:f8:80:27:32:9b:5f:b5:ea:
         a7:15:4f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8pJMavOf+xv7v4b2s7Q71+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OTgzYjNhOTc1OGZjYmU3ODczM2Q5MTU1YWVkMjY2Yzg4
MmEyM2MwHhcNMjYwNzAzMTgwMTQzWhcNMjYwNzA0MTgwMTQzWjAzMTEwLwYDVQQD
EyhjYzdlYTUyZjdmNDBkNGJkYzk1NTY4MWY3ZDhmNjY1MTUyNDlkNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ674hMF3M3NiQggFg4sjtDM/icS
MjbUwKTOkKf9OvDgVbfG+xxsZreRoS2qv9dNDUW3OhxTfkIhS5MDeWZgIcqbmUFq
qmoy5fT+gvZgtk5gPuvFR0hZAay8a0HniRs7xqVSyP3HAGBMDcyT5annf3Ca+y2I
ugahnVsDaA/1hSk4nUDrNF3gOVjfKHEuEOcboXjx8qGKVsjHeBfWOiKnO7wz8kZK
YU6hoBbufmXdWbhDRBySNh5LKlijUGV3haD2RHzKBukKfuUtldC1dsOw00c6HT1i
JdW9cHXbTKnyUDIQx+GAjGrqIbebj+6/d+SyK6+aztB2j62pa+ioNYrRjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMx+pS9/QNS9yVVoH32PZlFSSdYkMB8GA1UdIwQY
MBaAFMeYOzqXWPy+eHM9kVWu0mbIgqI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEt
MjM4NDA1ZjJjZGU5LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEtMjM4NDA1ZjJjZGU5
LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLCO+dr2
g+lLNwIzoESyv3boROzKBgk6i2EHUsyygqFUeC5kGAb45xAh+8oh8UTW+a2kFj3A
iqFvOpPIVGVrVnrljh52v41Nky3yRV1CNB6AE/Nt42kaKeUuV0yHKt4qG/mVoVWD
xGsqN2EMfm58OnMVcApywcp8aTI/bbcrrEzLDoUgFGjELRhr1YmSAlpy7hZ358B2
tg869URGxy4dvDzPuSLHKS1mJGbtNJ64xv0/T/JgmpHd/3RihNM4aATLUcmdBVtN
ilib/K6UwV0ISLUUsDnK8LhkuST1JlPJojVJydGx3u39NaPM8VmNcwvDpIVO//iA
JzKbX7XqpxVPqA==
-----END CERTIFICATE-----
Generated at Fri Jul 3 20:55:37 2026 by rpki-client