Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
File:                     mecgmoybF2-_Yj7fPuC4IAf8LEA.mft (raw, json)
Hash identifier:          JxQv08g6+PK9CJfQd1H4pLg1k00ceoTnn7OwKtvIDqo=
Subject key identifier:   7D:DE:2D:AF:56:94:2E:4F:B2:F5:AF:DA:16:4E:9F:9B:78:02:B9:C1
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Certificate issuer:       /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial:       019FA260E48C77FD376F29F8324BC7E55004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
Manifest number:          19D7
Signing time:             Mon 27 Jul 2026 07:01:26 +0000
Manifest this update:     Mon 27 Jul 2026 07:01:26 +0000
Manifest next update:     Tue 28 Jul 2026 07:01:26 +0000
Files and hashes:         1: GMkb7Nfp3e1xwCHzIvQMW8YGBD8.roa (hash: 9tBjV2F1lcd6x85zAmu4+gOihfEhBFtC/fl/CG4h/+o=)
                          2: HNj3awdWSpdbaAsidPiHwTrpk-w.roa (hash: +1Q8zqw8FDmKfGP2AXog0DN3Zr+uSl/yie6I0H2SVv4=)
                          3: PSdQtBy68Y-4k3bCXbHKKLY0ziQ.roa (hash: 0eFbrFvPRaRamJKj2kPYRYq1/ZF/LzpKZfdMeA3TePc=)
                          4: jUS93b3kR9OAk9zT0yFMYbqw9IQ.roa (hash: 3Qwq734MlX1peNwyxgPAyf/XHf3lQhOFPZnpffDz3jU=)
                          5: mecgmoybF2-_Yj7fPuC4IAf8LEA.crl (hash: dLWNP1s2p3NYJB72FjizfHdakIQeLpk5ADmQffkjBi0=)
                          6: yMShbjNcgfYstYDZh-46SweXK1w.roa (hash: OZ6f7McsD/D/eJDsrpr3LQKsSGUTZnYABD4TkkcX4iw=)
                          7: ydJMToJ5B1bUDi2lNS_iW7lmLpE.roa (hash: BRax3SkiLH5mAWfBlAoIZAGF7JI9kbofyKrquNfm0Rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:e4:8c:77:fd:37:6f:29:f8:32:4b:c7:e5:50:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
        Validity
            Not Before: Jul 27 07:01:26 2026 GMT
            Not After : Jul 28 07:01:26 2026 GMT
        Subject: CN=7dde2daf56942e4fb2f5afda164e9f9b7802b9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6a:54:06:01:f5:e4:78:b7:b7:41:48:e9:99:
                    f8:e9:0f:9b:a6:99:f0:c9:73:74:27:e8:92:d6:6d:
                    f2:19:69:a5:10:e4:a7:13:8e:fc:14:30:c7:3d:f7:
                    18:1c:15:1d:ad:c2:d8:ee:eb:fc:50:99:27:5e:50:
                    0e:9b:37:5d:2f:75:41:4b:ba:64:63:2d:3b:c0:58:
                    bf:2f:60:4f:55:d0:e1:6d:76:1f:2a:22:51:47:d2:
                    23:80:f7:de:64:9e:82:b0:50:f6:8f:a0:42:e7:8c:
                    d3:8b:4e:3e:d8:e3:5a:f1:6f:6a:5b:2c:50:3b:1c:
                    15:a0:fb:f6:08:9a:0e:eb:79:f8:03:aa:c2:bc:53:
                    2e:81:f5:c5:42:ef:1c:ec:22:53:aa:d1:0e:34:d7:
                    92:1f:83:7f:d1:3a:6a:7e:01:31:55:b3:4e:1e:59:
                    ae:3d:65:11:33:91:5c:25:b5:29:fb:86:57:f7:39:
                    7a:e0:a9:69:fc:e2:eb:6f:90:02:84:9e:27:5a:3b:
                    23:35:b2:70:26:96:8b:af:24:80:37:77:86:a7:a6:
                    05:5d:c5:18:74:c8:12:8f:08:5f:a0:fc:cb:c7:6d:
                    74:5b:d3:66:b1:8f:c8:29:5c:99:cf:9e:f5:19:b1:
                    dd:5e:1b:14:2a:0d:73:b9:9d:db:47:e6:ac:30:f3:
                    43:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DE:2D:AF:56:94:2E:4F:B2:F5:AF:DA:16:4E:9F:9B:78:02:B9:C1
            X509v3 Authority Key Identifier:
                keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d4:a2:58:6a:8c:14:3e:2c:ce:b5:2b:51:01:f6:75:88:0e:
         12:d9:db:1c:9e:63:9f:3b:9a:2c:88:1f:34:11:50:c0:65:ed:
         78:db:6f:ba:eb:f1:75:3b:b1:3c:d3:a6:4c:7b:e5:0b:f3:d8:
         37:50:10:2c:c2:55:16:7a:a4:fc:3d:40:73:47:93:ab:81:cf:
         96:82:67:f5:3e:92:de:02:3c:26:de:f7:9e:21:ff:e2:95:9d:
         d1:d4:90:1c:96:be:80:55:56:b4:20:32:65:40:a8:82:49:e8:
         c8:59:00:a3:4c:af:79:46:cf:ed:aa:b0:1c:dc:03:4c:c4:c1:
         8b:66:8b:30:aa:20:23:9f:f0:f5:bd:37:f8:d9:0d:e5:5a:a3:
         15:24:94:c5:53:b4:d5:ce:7e:df:96:7c:5c:8d:c9:25:63:cb:
         e1:65:bf:0c:14:b9:f8:12:ab:4a:48:20:a4:ad:4e:11:f4:7f:
         58:80:a5:3c:6d:36:1b:14:0c:1d:3d:9e:c5:57:a6:44:70:96:
         33:10:4d:8a:f5:3b:4e:9e:c0:90:8a:2c:d2:d4:50:82:09:5a:
         37:5b:b4:59:22:ef:87:38:16:b4:ae:7a:97:4d:b4:0b:2b:5c:
         d1:bb:9a:1b:a2:f7:1a:f2:ec:1a:d0:c9:18:a4:fe:78:45:ba:
         75:17:17:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYOSMd/03byn4MkvH5VAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTcyMDlhOGM5YjE3NmZiZjYyM2VkZjNlZTBiODIwMDdm
YzJjNDAwHhcNMjYwNzI3MDcwMTI2WhcNMjYwNzI4MDcwMTI2WjAzMTEwLwYDVQQD
Eyg3ZGRlMmRhZjU2OTQyZTRmYjJmNWFmZGExNjRlOWY5Yjc4MDJiOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWpUBgH15Hi3t0FI6Zn46Q+bppnw
yXN0J+iS1m3yGWmlEOSnE478FDDHPfcYHBUdrcLY7uv8UJknXlAOmzddL3VBS7pk
Yy07wFi/L2BPVdDhbXYfKiJRR9IjgPfeZJ6CsFD2j6BC54zTi04+2ONa8W9qWyxQ
OxwVoPv2CJoO63n4A6rCvFMugfXFQu8c7CJTqtEONNeSH4N/0TpqfgExVbNOHlmu
PWURM5FcJbUp+4ZX9zl64Klp/OLrb5AChJ4nWjsjNbJwJpaLrySAN3eGp6YFXcUY
dMgSjwhfoPzLx210W9NmsY/IKVyZz571GbHdXhsUKg1zuZ3bR+asMPNDFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3eLa9WlC5PsvWv2hZOn5t4ArnBMB8GA1UdIwQY
MBaAFJnnIJqMmxdvv2I+3z7guCAH/CxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUt
YjJkY2MxODYzZThiLzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUtYjJkY2MxODYzZThi
LzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtSiWGqM
FD4szrUrUQH2dYgOEtnbHJ5jnzuaLIgfNBFQwGXteNtvuuvxdTuxPNOmTHvlC/PY
N1AQLMJVFnqk/D1Ac0eTq4HPloJn9T6S3gI8Jt73niH/4pWd0dSQHJa+gFVWtCAy
ZUCogknoyFkAo0yveUbP7aqwHNwDTMTBi2aLMKogI5/w9b03+NkN5VqjFSSUxVO0
1c5+35Z8XI3JJWPL4WW/DBS5+BKrSkggpK1OEfR/WIClPG02GxQMHT2exVemRHCW
MxBNivU7Tp7AkIos0tRQgglaN1u0WSLvhzgWtK56l020Cytc0buaG6L3GvLsGtDJ
GKT+eEW6dRcXyg==
-----END CERTIFICATE-----