Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File:                     P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier:          Ns9iGH8idIPAzNph665tqBIRi83axXtehKLU7JlsZeo=
Subject key identifier:   31:1D:EF:43:55:10:FE:01:34:8D:A6:4C:B2:0E:03:29:47:BB:EF:95
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer:       /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial:       019F3ABCFEA2AB788DABF1BD8A8631A3E1B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number:          199C
Signing time:             Tue 07 Jul 2026 04:01:31 +0000
Manifest this update:     Tue 07 Jul 2026 04:01:31 +0000
Manifest next update:     Wed 08 Jul 2026 04:01:31 +0000
Files and hashes:         1: 4rItdFCAXyTHzax5zB2EQ6OhwBM.roa (hash: q25Gmt6B02xtO+B5GemXY9TeBKKJKUx9rShQhMwe5HQ=)
                          2: Ascb1T5MRl8oo-kehh_BRkLaHrA.asa (hash: W9WHd/i0tHzguizYbyV14C4Ft3qCu8gI4uA0bUVEKZ4=)
                          3: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: UQCgETpmI1Ug5dSeUGboLyX4pnlX7Jxqo7Zvzd34SBQ=)
                          4: fSbObenQqMh0-me9W8aCUmvq5EI.roa (hash: zKguKMkuYjbS+U0PhiTMN3CNe4E1jQXYVJh/03csrHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3a:bc:fe:a2:ab:78:8d:ab:f1:bd:8a:86:31:a3:e1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
        Validity
            Not Before: Jul  7 04:01:31 2026 GMT
            Not After : Jul  8 04:01:31 2026 GMT
        Subject: CN=311def435510fe01348da64cb20e032947bbef95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:f2:85:eb:69:b6:a9:f4:17:11:15:c5:2c:
                    bc:9e:9e:03:90:78:ce:81:7a:62:4e:2b:7e:15:a3:
                    19:2d:74:ac:f0:f7:1c:e0:f3:ac:c9:ec:dd:f7:16:
                    c5:d9:a9:c9:70:8f:11:7e:bf:4e:19:cc:cd:78:14:
                    c2:ea:72:b5:8a:64:cf:ea:41:9e:81:3a:c2:9a:35:
                    4c:d9:cd:98:76:d1:f7:75:ae:c1:6f:a0:3b:ba:1a:
                    40:36:7c:c0:ee:14:18:9d:62:d6:33:d7:0c:f1:72:
                    9c:03:c4:45:23:1e:70:b9:ef:59:7c:03:11:ba:50:
                    47:e9:0d:43:e4:dc:09:68:8a:65:af:43:e3:e9:65:
                    eb:e1:c3:55:1c:44:d5:61:a0:cc:55:22:97:6b:b4:
                    ba:d2:49:f4:fb:86:1d:af:85:02:66:16:e6:99:a8:
                    e5:74:3e:d2:d8:de:40:61:0a:d9:43:90:47:db:b2:
                    4b:08:20:81:1a:e1:86:94:e4:2d:76:f9:ff:6c:40:
                    dc:8d:ad:82:89:97:4f:25:84:be:7e:87:80:d5:25:
                    97:f5:19:b8:85:d6:2c:0b:09:ee:9a:8c:da:20:e3:
                    f7:af:03:4f:e4:fe:47:55:d7:d9:53:b0:39:11:88:
                    36:b6:18:e3:89:ae:dd:a5:37:06:47:00:55:3b:00:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:EF:43:55:10:FE:01:34:8D:A6:4C:B2:0E:03:29:47:BB:EF:95
            X509v3 Authority Key Identifier:
                keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3e:1d:d4:67:13:e6:77:e9:04:c2:e6:47:5b:61:b4:8b:5c:
         ba:d0:95:3a:fd:8b:cf:61:79:9d:2d:33:1a:e1:9d:26:1d:96:
         45:a0:07:4f:3a:27:e9:34:b9:b5:e7:32:25:ee:73:39:8e:cf:
         d4:ff:32:dd:bd:ea:b6:e6:06:f1:e0:3a:e1:cc:85:ca:19:d3:
         71:2f:b1:9e:92:64:d1:c1:d6:4e:a7:23:d8:5d:e9:09:ce:85:
         71:7a:51:66:a6:86:ab:b5:bb:1f:98:65:6a:10:39:2d:80:36:
         6d:a5:b0:bb:57:12:d7:e6:e8:cc:f2:15:06:dd:9e:eb:c9:11:
         ad:bc:35:20:9e:89:67:87:d1:02:53:fb:e4:8f:db:d8:6e:6d:
         26:bc:3a:6f:bb:b9:87:85:9f:1f:60:0a:ef:c7:d6:24:4d:51:
         e8:e4:1a:96:ac:5d:76:49:a0:54:c8:33:0f:0c:83:2b:59:35:
         d4:8a:46:85:e1:96:f2:75:49:a5:73:ea:84:aa:65:6f:50:b2:
         ca:f7:e5:2f:42:e4:c3:b7:e3:4d:26:d8:e1:6a:53:ed:f1:25:
         95:c4:ff:15:f7:d2:0f:49:f6:84:85:19:6f:fa:0a:8d:7d:79:
         36:80:38:4d:36:05:eb:ce:3e:d5:62:c6:90:26:dc:10:67:e9:
         d5:f5:5e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ86vP6iq3iNq/G9ioYxo+G5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTQ3YzRmZDIzOTZkOWVkYjhiYzQ1NDQwNWU1NzU1OGQ4
Yjk1MDIwHhcNMjYwNzA3MDQwMTMxWhcNMjYwNzA4MDQwMTMxWjAzMTEwLwYDVQQD
EygzMTFkZWY0MzU1MTBmZTAxMzQ4ZGE2NGNiMjBlMDMyOTQ3YmJlZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1zyhetptqn0FxEVxSy8np4DkHjO
gXpiTit+FaMZLXSs8Pcc4POsyezd9xbF2anJcI8Rfr9OGczNeBTC6nK1imTP6kGe
gTrCmjVM2c2YdtH3da7Bb6A7uhpANnzA7hQYnWLWM9cM8XKcA8RFIx5wue9ZfAMR
ulBH6Q1D5NwJaIplr0Pj6WXr4cNVHETVYaDMVSKXa7S60kn0+4Ydr4UCZhbmmajl
dD7S2N5AYQrZQ5BH27JLCCCBGuGGlOQtdvn/bEDcja2CiZdPJYS+foeA1SWX9Rm4
hdYsCwnumozaIOP3rwNP5P5HVdfZU7A5EYg2thjjia7dpTcGRwBVOwB8cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEd70NVEP4BNI2mTLIOAylHu++VMB8GA1UdIwQY
MBaAFD+UfE/SOW2e24vEVEBeV1WNi5UCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOWI0NTAtNzI5ZC00OGRlLWFiOGYt
Y2VjNDBlNDI1MjY0LzEvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kOWI0NTAtNzI5ZC00OGRlLWFiOGYtY2VjNDBlNDI1MjY0
LzEvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz4d1GcT
5nfpBMLmR1thtItcutCVOv2Lz2F5nS0zGuGdJh2WRaAHTzon6TS5tecyJe5zOY7P
1P8y3b3qtuYG8eA64cyFyhnTcS+xnpJk0cHWTqcj2F3pCc6FcXpRZqaGq7W7H5hl
ahA5LYA2baWwu1cS1+bozPIVBt2e68kRrbw1IJ6JZ4fRAlP75I/b2G5tJrw6b7u5
h4WfH2AK78fWJE1R6OQalqxddkmgVMgzDwyDK1k11IpGheGW8nVJpXPqhKplb1Cy
yvflL0Lkw7fjTSbY4WpT7fEllcT/FffSD0n2hIUZb/oKjX15NoA4TTYF684+1WLG
kCbcEGfp1fVe/w==
-----END CERTIFICATE-----
Generated at Tue Jul 7 10:47:24 2026 by rpki-client