Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
File:                     dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft (raw, json)
Hash identifier:          MKzoriidKP7A6TUMCAEmpga2zXWsJz5SFJOpxXIE7+8=
Subject key identifier:   80:AA:5B:4A:BB:7A:D0:80:E0:E7:62:A1:B5:92:E0:D7:35:A8:DD:8C
Authority key identifier: 76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4
Certificate issuer:       /CN=7668fe49ae9747257150015be43e29628c6316c4
Certificate serial:       019FA1BBA8F36459D1F33E77DB0C78201D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
Manifest number:          19CF
Signing time:             Mon 27 Jul 2026 04:00:57 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:57 +0000
Manifest next update:     Tue 28 Jul 2026 04:00:57 +0000
Files and hashes:         1: 7PU06grVngn__PyWKKvtWslEGAM.roa (hash: uvFJtYim7HXN6krTzVc4QD8VUGVl3D711DAfuBRhXa0=)
                          2: dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl (hash: q8YGUI8bw36VsmDBj6gEIJF8vQlZdrG0RJn7XoP/1AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:a8:f3:64:59:d1:f3:3e:77:db:0c:78:20:1d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7668fe49ae9747257150015be43e29628c6316c4
        Validity
            Not Before: Jul 27 04:00:57 2026 GMT
            Not After : Jul 28 04:00:57 2026 GMT
        Subject: CN=80aa5b4abb7ad080e0e762a1b592e0d735a8dd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a1:56:10:db:b8:0c:f8:27:87:27:6e:e1:b4:
                    8d:79:e3:a2:42:87:ba:2e:49:42:75:f6:aa:4a:bb:
                    3f:f6:f7:e5:41:09:1b:6e:4f:12:ea:60:9a:d4:43:
                    25:63:ba:32:d9:37:c5:ff:99:9c:45:58:25:8e:e9:
                    7c:50:7c:c8:a3:44:12:bc:a9:d6:52:80:5e:50:da:
                    23:fa:0e:f8:c3:3a:e7:4e:d8:da:d6:be:f6:ce:c4:
                    26:a2:56:d8:dd:bc:cc:1f:c5:99:96:a9:fa:51:76:
                    d2:b9:33:b9:be:a2:84:39:1c:a6:e0:2e:64:3a:f7:
                    b4:29:1a:4e:8f:78:20:d3:c4:be:62:d5:0f:3a:38:
                    46:e4:2a:3c:54:93:aa:2f:98:c8:4b:c8:d7:aa:e1:
                    af:f9:00:4a:68:66:f6:0f:b9:b6:32:84:8f:f6:89:
                    5a:d4:2d:d0:38:86:06:0e:d9:7c:39:73:8e:0c:bf:
                    f4:1e:f3:bb:05:d3:aa:ce:f7:af:7e:63:84:73:b3:
                    cd:0e:fa:c7:f3:3d:8c:80:fc:b3:50:44:77:75:6e:
                    95:d8:ab:8f:6e:5f:82:81:94:5d:da:ac:84:16:22:
                    35:c1:dc:ac:9d:81:39:9c:10:a8:67:68:9b:94:bb:
                    1a:a9:39:16:a7:32:f8:18:35:9d:1f:21:24:94:5c:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AA:5B:4A:BB:7A:D0:80:E0:E7:62:A1:B5:92:E0:D7:35:A8:DD:8C
            X509v3 Authority Key Identifier:
                keyid:76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:dc:d7:29:51:39:c0:1e:b3:12:9a:bc:51:52:80:a0:58:f5:
         55:10:cb:d3:88:fb:19:0d:aa:7b:7c:f4:a8:94:02:95:ce:c0:
         d8:af:7d:fb:7c:d1:fa:cf:4b:74:8f:d5:cc:5a:53:8c:0d:f5:
         94:16:6e:2e:43:81:22:ef:5d:ce:d5:fb:ef:9c:1f:7b:9a:96:
         db:48:7c:8b:5d:cf:80:22:75:df:07:24:2f:d5:e9:45:6a:23:
         21:7b:6f:43:df:36:13:7b:f0:d0:64:8e:de:1e:e7:89:a9:b1:
         6c:f2:cf:86:b7:63:f6:92:32:b2:24:b3:f1:99:b2:d9:a0:70:
         1b:01:65:e2:bd:8c:dc:f6:07:2b:b4:52:72:21:54:8b:23:05:
         b8:ec:77:fe:6a:27:84:15:0d:bb:ab:aa:f9:8e:20:0a:06:90:
         d5:0a:8d:cf:63:2c:24:09:e8:7f:39:f7:67:d6:c5:b1:46:4e:
         db:f4:64:fc:02:1d:4b:ec:16:29:06:74:56:15:ac:73:b7:c2:
         c5:36:49:b1:34:1d:7b:64:fd:e1:f1:84:44:10:cf:d7:88:26:
         22:98:3c:0d:61:c0:31:a7:dd:8c:60:a6:5b:51:4e:60:6a:7c:
         4d:ed:d9:c9:ac:26:ae:1d:d0:58:42:b8:49:45:a4:c1:b9:af:
         81:49:a6:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu6jzZFnR8z532wx4IB00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NjhmZTQ5YWU5NzQ3MjU3MTUwMDE1YmU0M2UyOTYyOGM2
MzE2YzQwHhcNMjYwNzI3MDQwMDU3WhcNMjYwNzI4MDQwMDU3WjAzMTEwLwYDVQQD
Eyg4MGFhNWI0YWJiN2FkMDgwZTBlNzYyYTFiNTkyZTBkNzM1YThkZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqFWENu4DPgnhydu4bSNeeOiQoe6
LklCdfaqSrs/9vflQQkbbk8S6mCa1EMlY7oy2TfF/5mcRVgljul8UHzIo0QSvKnW
UoBeUNoj+g74wzrnTtja1r72zsQmolbY3bzMH8WZlqn6UXbSuTO5vqKEORym4C5k
Ove0KRpOj3gg08S+YtUPOjhG5Co8VJOqL5jIS8jXquGv+QBKaGb2D7m2MoSP9ola
1C3QOIYGDtl8OXOODL/0HvO7BdOqzvevfmOEc7PNDvrH8z2MgPyzUER3dW6V2KuP
bl+CgZRd2qyEFiI1wdysnYE5nBCoZ2iblLsaqTkWpzL4GDWdHyEklFxDVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICqW0q7etCA4OdiobWS4Nc1qN2MMB8GA1UdIwQY
MBaAFHZo/kmul0clcVABW+Q+KWKMYxbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG1qLVNhNlhSeVZ4VUFGYjVENHBZb3hqRnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xNjAxZTYtYzViOS00MzIyLTg5Zjkt
NGJkMTRlN2E4NWNmLzEvZG1qLVNhNlhSeVZ4VUFGYjVENHBZb3hqRnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8xNjAxZTYtYzViOS00MzIyLTg5ZjktNGJkMTRlN2E4NWNm
LzEvZG1qLVNhNlhSeVZ4VUFGYjVENHBZb3hqRnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdzXKVE5
wB6zEpq8UVKAoFj1VRDL04j7GQ2qe3z0qJQClc7A2K99+3zR+s9LdI/VzFpTjA31
lBZuLkOBIu9dztX775wfe5qW20h8i13PgCJ13wckL9XpRWojIXtvQ982E3vw0GSO
3h7niamxbPLPhrdj9pIysiSz8Zmy2aBwGwFl4r2M3PYHK7RSciFUiyMFuOx3/mon
hBUNu6uq+Y4gCgaQ1QqNz2MsJAnofzn3Z9bFsUZO2/Rk/AIdS+wWKQZ0VhWsc7fC
xTZJsTQde2T94fGERBDP14gmIpg8DWHAMafdjGCmW1FOYGp8Te3Zyawmrh3QWEK4
SUWkwbmvgUmmTg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:53 2026 by rpki-client