Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
File:                     d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft (raw, json)
Hash identifier:          lT3xk+5EdlxUnN8NOFvpGYYYOb5bmoqZq4lVL5Xe13Y=
Subject key identifier:   A5:2D:87:C2:BD:6A:78:2F:45:2C:D5:86:F7:B4:B8:76:2B:48:B3:9C
Authority key identifier: 77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
Certificate issuer:       /CN=77724112f0285d830c87ee3256d51968f15bb90b
Certificate serial:       019FA184922BBCE0C46E330DC27218FAA235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
Manifest number:          018C
Signing time:             Mon 27 Jul 2026 03:00:47 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:47 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:47 +0000
Files and hashes:         1: 6p1ednwrZQ_JDbcmNlbUx0LPSFQ.roa (hash: hIJJSdmlqRlS5NfeTFhoCLt5Vs93+x5E1RzMdfdB3oA=)
                          2: d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl (hash: mHhKXMZD/tAGYcF1JChG8WnlVTObuqJrb1Qxtr5feos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:92:2b:bc:e0:c4:6e:33:0d:c2:72:18:fa:a2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77724112f0285d830c87ee3256d51968f15bb90b
        Validity
            Not Before: Jul 27 03:00:47 2026 GMT
            Not After : Jul 28 03:00:47 2026 GMT
        Subject: CN=a52d87c2bd6a782f452cd586f7b4b8762b48b39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:18:3f:27:0c:55:c3:b7:1a:97:35:b2:cf:d8:
                    cc:ba:ec:94:09:1c:ef:87:4d:05:64:b0:38:67:3b:
                    b1:95:81:c0:17:2b:05:20:cb:cf:5f:23:dd:f2:bf:
                    d5:80:df:36:28:4b:b3:66:01:61:fe:8c:88:3d:75:
                    23:62:67:5a:68:cd:ac:07:b9:94:7b:a4:79:49:ff:
                    b6:ae:db:5f:a1:db:bb:8d:2f:9b:f2:53:53:b3:7c:
                    d7:83:df:71:24:5f:3d:c7:2f:83:1a:a0:85:35:99:
                    ce:ab:bd:af:e2:92:4c:54:91:0e:0c:1b:5e:20:f3:
                    5d:9b:d1:89:5a:54:c9:c2:23:18:c6:d0:58:7c:4d:
                    ea:96:ab:9d:7d:e0:06:12:18:67:b2:04:2a:26:50:
                    16:55:8e:d6:39:9f:e9:d4:de:e5:b9:bb:b0:64:ff:
                    9b:a5:d8:e4:38:bb:f5:08:9a:ff:79:e8:cb:6f:35:
                    a3:59:47:b7:3b:44:d2:ab:0f:46:91:f9:e7:43:f5:
                    e7:65:ce:af:11:67:19:15:ef:c6:06:40:a4:84:33:
                    98:f9:74:4c:b0:55:34:d0:ae:b5:67:92:e4:65:1c:
                    c3:01:69:3c:b5:c8:ce:ba:bf:e5:0e:df:a3:0c:fa:
                    fe:a5:e1:d7:8e:10:38:b5:51:c8:99:9a:16:81:2a:
                    db:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2D:87:C2:BD:6A:78:2F:45:2C:D5:86:F7:B4:B8:76:2B:48:B3:9C
            X509v3 Authority Key Identifier:
                keyid:77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:8a:13:83:51:92:66:ff:fd:9f:63:53:c4:92:32:6d:9c:
         fa:13:32:9d:17:a3:32:ac:27:f7:67:da:5e:1e:be:0c:4f:4f:
         1f:22:4d:45:24:42:ef:64:f7:02:0f:c1:79:d5:f3:b1:ff:63:
         1e:a3:53:97:90:ed:51:15:cf:8f:84:64:bf:4a:e2:5b:34:b4:
         27:08:a2:ad:47:87:63:35:5c:01:7c:6a:a0:e3:22:9e:8c:c1:
         82:50:e6:cf:cc:81:5f:57:c6:18:c4:28:3e:5c:e8:11:7b:aa:
         52:1f:07:14:6b:8b:48:43:1a:6f:9c:b3:89:a4:f7:45:bb:bf:
         33:5b:8d:19:05:72:8d:8e:7a:c2:64:ce:f4:d6:c8:40:7d:33:
         20:e2:51:4e:4f:4f:7a:a1:43:f6:21:66:b0:0f:f3:ec:f8:95:
         c2:ce:57:7b:94:87:cc:0c:27:e7:a7:e8:d0:3d:cf:b8:6b:02:
         b7:91:12:5f:df:12:75:8d:ef:c3:77:21:c9:50:a6:f1:87:10:
         26:1f:d3:a5:34:22:42:a7:6c:bb:dc:a2:fc:cd:b7:8b:70:d1:
         51:14:3b:31:04:c2:3f:29:21:4f:db:29:06:92:97:10:f5:8d:
         6b:46:e7:71:9b:71:db:49:2a:9c:b1:8b:7b:99:be:29:24:9d:
         62:4a:06:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhJIrvODEbjMNwnIY+qI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NzI0MTEyZjAyODVkODMwYzg3ZWUzMjU2ZDUxOTY4ZjE1
YmI5MGIwHhcNMjYwNzI3MDMwMDQ3WhcNMjYwNzI4MDMwMDQ3WjAzMTEwLwYDVQQD
EyhhNTJkODdjMmJkNmE3ODJmNDUyY2Q1ODZmN2I0Yjg3NjJiNDhiMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhg/JwxVw7calzWyz9jMuuyUCRzv
h00FZLA4ZzuxlYHAFysFIMvPXyPd8r/VgN82KEuzZgFh/oyIPXUjYmdaaM2sB7mU
e6R5Sf+2rttfodu7jS+b8lNTs3zXg99xJF89xy+DGqCFNZnOq72v4pJMVJEODBte
IPNdm9GJWlTJwiMYxtBYfE3qlqudfeAGEhhnsgQqJlAWVY7WOZ/p1N7lubuwZP+b
pdjkOLv1CJr/eejLbzWjWUe3O0TSqw9GkfnnQ/XnZc6vEWcZFe/GBkCkhDOY+XRM
sFU00K61Z5LkZRzDAWk8tcjOur/lDt+jDPr+peHXjhA4tVHImZoWgSrbPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUth8K9angvRSzVhve0uHYrSLOcMB8GA1UdIwQY
MBaAFHdyQRLwKF2DDIfuMlbVGWjxW7kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDNKQkV2QW9YWU1NaC00eVZ0VVphUEZidVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iMjc3MDQtZWY1Mi00NGE3LWJkZDEt
ZjlmOTFlNGUzMWZhLzEvZDNKQkV2QW9YWU1NaC00eVZ0VVphUEZidVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iMjc3MDQtZWY1Mi00NGE3LWJkZDEtZjlmOTFlNGUzMWZh
LzEvZDNKQkV2QW9YWU1NaC00eVZ0VVphUEZidVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKKKE4NR
kmb//Z9jU8SSMm2c+hMynRejMqwn92faXh6+DE9PHyJNRSRC72T3Ag/BedXzsf9j
HqNTl5DtURXPj4Rkv0riWzS0JwiirUeHYzVcAXxqoOMinozBglDmz8yBX1fGGMQo
PlzoEXuqUh8HFGuLSEMab5yziaT3Rbu/M1uNGQVyjY56wmTO9NbIQH0zIOJRTk9P
eqFD9iFmsA/z7PiVws5Xe5SHzAwn56fo0D3PuGsCt5ESX98SdY3vw3chyVCm8YcQ
Jh/TpTQiQqdsu9yi/M23i3DRURQ7MQTCPykhT9spBpKXEPWNa0bncZtx20kqnLGL
e5m+KSSdYkoGrg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:45 2026 by rpki-client