Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
File:                     bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json)
Hash identifier:          MEd0DvUZHBvBIMFwZtRy0XsdkaCOeZS8tsQYsNSUaIA=
Subject key identifier:   23:AD:7C:5A:D7:E7:66:09:A1:E1:DE:B3:7F:2D:32:E8:2B:1C:F6:FF
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Certificate issuer:       /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial:       019FA071E1A8FE363A7D206C6A98D78E14C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
Manifest number:          1AD1
Signing time:             Sun 26 Jul 2026 22:00:45 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:45 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:45 +0000
Files and hashes:         1: 0r3kkbCIc2trczoA0tV0PpuHTqk.roa (hash: hYQwD9eKL8aadDbtj9scQfTVqsN0ThTdN4voLWbulpc=)
                          2: 1-HMehk4Z5593y_16dRGWIQyy-Ng.roa (hash: EurbSdpdbDWY2LP7kxCHMWSabQW2ttzuwZ+l6NbR48o=)
                          3: 7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa (hash: 0WZmcRa658Us5LFqpepkQ3ZD0Z3AX8LDSbJ/uzthFek=)
                          4: CDjWTyoS71DXASo2Nj7eHKZDgBU.roa (hash: 0MjLF8Ccc2qdY2KgDxvd+hMdzbz7ozx3zfAkryxvvg0=)
                          5: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=)
                          6: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=)
                          7: KXN5i1ksyLJ3gWuszNVJ4lkPFkA.roa (hash: yrzgi/xgwBaka39UCK/DNXA3vvLMwfJcozcKOOGIcnk=)
                          8: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=)
                          9: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=)
                          10: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=)
                          11: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=)
                          12: Xk9NYhdXTr3rd3NYRXydtLgFRbs.roa (hash: 5i33Vv91iUeFK5+uzl8a/uVNcXnYM4QXT7Iz6UOmTNs=)
                          13: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=)
                          14: _-CNKE2_7z_kM89zZk_UMMjhAl8.roa (hash: Fyok2cPZyLmptoNn7yS8WruQ3n7BVYZFEv5nHH8YA4g=)
                          15: _yYeoQViTIjqsYE0h5QCAQRGd04.roa (hash: ZBg3y/n8GjKrQaC1IigA7ZREsnmFDIrXAnas9eg3WXo=)
                          16: a8icz_iV0I-bqil-bMRlOH1Nr5g.roa (hash: tNDWlSbeDLoMRL90ewXHPXUG9G9kPAmkJbfvaEeyj78=)
                          17: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: ygDeoSjFHqXrjOkEi02TecEpA/XZK2TwI5d7+7lrjKQ=)
                          18: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=)
                          19: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=)
                          20: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=)
                          21: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=)
                          22: x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa (hash: Sqa+wceVkaOOyPhxXULzb2svO17UJ0RHxLUOfuxIaDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:e1:a8:fe:36:3a:7d:20:6c:6a:98:d7:8e:14:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
        Validity
            Not Before: Jul 26 22:00:45 2026 GMT
            Not After : Jul 27 22:00:45 2026 GMT
        Subject: CN=23ad7c5ad7e76609a1e1deb37f2d32e82b1cf6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:56:7e:94:ad:be:3a:65:1d:15:a0:1a:67:
                    1d:ff:3f:92:04:47:ff:7d:cc:21:cf:27:7f:63:79:
                    2d:dc:bc:21:ef:b8:06:1d:1f:8a:2d:0d:05:e9:c4:
                    75:a9:09:49:c4:8a:5a:38:43:d1:98:0d:fd:31:db:
                    a0:13:65:83:70:0c:77:61:8c:b6:3f:1e:5f:ae:f3:
                    a3:f0:34:15:84:84:e1:63:7f:e2:02:b6:17:36:1b:
                    d7:a8:5e:e5:d7:af:80:dc:ac:14:73:ed:82:b5:e5:
                    79:3c:2d:e4:2a:93:b4:db:ab:64:51:d6:01:f9:cb:
                    1c:f1:18:15:68:ac:be:dd:df:8f:cb:1f:66:c9:80:
                    fc:e9:50:bf:62:cd:6b:b3:08:76:f0:64:34:48:90:
                    bd:f3:a1:7a:ad:d4:90:e8:e9:e0:2c:03:c6:76:18:
                    50:6d:86:55:70:86:d4:62:52:86:2a:da:15:44:6b:
                    99:58:e6:e1:17:7c:f0:4b:12:29:00:8a:45:5e:1b:
                    81:34:39:08:42:45:9e:76:cb:51:3d:dc:d5:a6:9d:
                    7c:c8:9b:63:b0:45:fe:b4:f9:b2:87:f0:28:f8:55:
                    45:b3:8f:24:21:7b:e1:19:d9:47:ca:8f:98:5c:c4:
                    17:cf:bb:c6:9c:4f:1f:66:b9:da:7e:38:99:d3:d4:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AD:7C:5A:D7:E7:66:09:A1:E1:DE:B3:7F:2D:32:E8:2B:1C:F6:FF
            X509v3 Authority Key Identifier:
                keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:9b:e8:10:b9:05:18:bc:cd:4c:d8:01:b4:47:57:ff:bb:68:
         60:8b:b4:c4:86:a4:24:26:89:72:e0:6e:f7:a2:ed:c9:ee:7c:
         38:08:39:9c:8f:55:03:8b:1b:8c:95:22:af:a5:be:c4:72:c5:
         21:f4:d5:3f:57:f0:32:04:68:5e:46:05:c3:60:50:c3:5b:8e:
         e1:7a:1c:84:8f:b6:37:9b:1f:c8:8d:28:d8:1b:b3:6c:22:9e:
         3d:78:4b:ba:d0:9c:ca:63:20:c6:95:71:71:8d:d1:76:63:1d:
         97:86:0d:a8:35:4a:3d:15:d4:d3:9f:80:23:cd:97:9a:97:76:
         58:71:35:2b:12:37:ad:68:68:2a:37:14:84:95:66:8d:b4:a0:
         42:df:9c:9d:3c:39:dd:ac:0b:76:6a:ee:02:74:2f:0c:11:e9:
         bf:ff:1d:5a:c2:f0:d1:98:c1:b9:76:0a:5b:09:fe:f8:7e:1f:
         55:9c:e0:3e:c1:a3:a7:7a:a5:0b:48:9e:2b:79:3f:b5:82:4a:
         5a:7c:33:39:e4:02:e7:4f:12:2e:d2:5b:a1:d5:34:1c:b4:5a:
         24:4e:a3:29:8c:43:11:12:68:fc:46:bc:26:ee:e2:b1:7d:83:
         6f:56:f6:36:80:69:08:7e:82:e3:9c:4d:8c:08:10:c2:88:77:
         ae:0c:50:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:30:01 2026 by rpki-client