Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier:          ZEbsG5kXCXo2nsgmol4UsD7riZb/kPRucuHEjWrKPag=
Subject key identifier:   98:7F:1E:FA:46:04:84:2A:70:28:BD:FE:9E:96:09:02:FB:B8:D7:2B
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer:       /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial:       019FA14DC8A0D4D720D0B7A6E05D174088C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number:          0836
Signing time:             Mon 27 Jul 2026 02:00:56 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:56 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:56 +0000
Files and hashes:         1: 1y_PVDrf292ypVubKlcfPa0VLTs.roa (hash: 0XpTQ3RyKshZ7qbm+aFTzxAKabtVi92GLDrjmKUXNmw=)
                          2: OzQYkhg3U6SPEppTB5KeCir3I54.roa (hash: pkZLPVt0U4vONG6pCB0IupbzzE3+kAThVfHoxE9CIfo=)
                          3: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: 6L0U1u990mHeK/xyAxIXA6QhWeAiSbS+kWESwVjaEnY=)
                          4: gy24Ea8BsuXB1XC8engI4KEXF4A.roa (hash: 2h0DlQ9bxyg8udmh82iK9dYgkvfs9qOrlDFcUWd8VWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:c8:a0:d4:d7:20:d0:b7:a6:e0:5d:17:40:88:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Validity
            Not Before: Jul 27 02:00:56 2026 GMT
            Not After : Jul 28 02:00:56 2026 GMT
        Subject: CN=987f1efa4604842a7028bdfe9e960902fbb8d72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:6c:92:53:ad:78:1c:30:f4:37:30:7a:99:
                    12:af:34:8c:50:a7:45:cb:a3:c9:b3:d1:fd:22:e2:
                    5e:32:d3:01:20:cb:f2:c4:fe:68:22:ff:4d:0d:27:
                    af:2e:27:ed:5d:4d:c0:12:c3:81:20:94:8b:7c:a8:
                    bb:bc:28:3c:72:d9:97:34:64:c7:dc:93:76:9c:c1:
                    58:d4:06:28:72:93:5f:11:0c:aa:99:7d:86:23:02:
                    77:33:db:37:01:fa:f6:66:75:77:4d:ec:da:45:c1:
                    1b:c4:16:4c:3b:a1:40:fa:cf:a7:d7:1d:ba:32:32:
                    1c:74:7f:13:a1:87:bf:10:f1:7b:76:18:00:66:fc:
                    8e:3f:56:0f:8f:84:19:70:db:c1:c0:ba:9c:49:5c:
                    2a:f6:05:1e:77:5b:7c:f5:30:8f:3f:d2:87:3b:f0:
                    5f:92:2a:13:06:47:65:a6:d3:72:8d:bb:ab:f6:c1:
                    36:09:a9:1f:89:b6:d9:e8:2a:68:59:d5:a8:e6:5a:
                    38:54:82:96:53:04:7c:dd:5c:9f:9d:fa:a1:8e:1d:
                    29:95:0a:43:1d:30:14:ca:ba:00:c2:af:f6:fd:2a:
                    ad:b4:62:c2:8a:c0:9b:de:10:29:8e:bd:2a:d7:ca:
                    cc:9e:98:0c:fa:ec:0e:59:e7:08:1a:f1:42:c4:fb:
                    22:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7F:1E:FA:46:04:84:2A:70:28:BD:FE:9E:96:09:02:FB:B8:D7:2B
            X509v3 Authority Key Identifier:
                keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6b:39:6e:5a:6c:dd:98:11:53:22:f4:db:63:88:ec:84:60:
         73:af:27:c0:3c:ba:4a:00:98:5c:c6:17:6f:3e:d8:39:41:cf:
         e1:3a:7a:75:f3:80:e5:3d:e4:27:55:af:54:6b:61:51:8c:85:
         70:bb:0c:b1:61:98:d2:05:02:90:b6:1b:6b:29:0e:8c:6c:63:
         97:a8:8d:9a:48:75:df:40:53:44:eb:e2:7a:81:8e:cc:ca:90:
         92:71:21:82:d4:93:d7:10:fe:6f:2e:f1:a6:4c:71:d9:f2:b7:
         4d:c7:5a:37:bb:a5:04:6b:65:ee:fa:2d:c3:30:2b:b4:b2:bb:
         2c:05:6b:51:05:2a:9b:ed:b8:1c:1f:57:3e:3b:32:23:41:b9:
         4c:93:ab:5d:51:40:62:ff:6c:e6:2e:bf:13:f4:ff:27:57:75:
         64:98:cf:51:67:6a:31:79:3f:9e:70:4a:ca:41:6e:e9:35:02:
         56:a4:8f:2e:1d:aa:da:2e:10:f5:39:44:53:b1:1f:0f:98:fb:
         cc:18:d4:87:c1:ed:1e:ba:7d:58:4b:87:f9:aa:bb:bd:5a:38:
         74:e6:fb:ff:55:2e:ab:0a:7a:bd:1f:db:9e:76:ae:f1:c3:d0:
         66:18:09:95:84:48:0a:72:f2:ec:6b:89:5b:07:7b:31:21:87:
         bd:0a:a8:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTcig1Ncg0Lem4F0XQIjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTEyOGE3NjJjZWViNmI1OWY1NDMxNTY4YmMxM2ZjZTQx
YWJhMTIwHhcNMjYwNzI3MDIwMDU2WhcNMjYwNzI4MDIwMDU2WjAzMTEwLwYDVQQD
Eyg5ODdmMWVmYTQ2MDQ4NDJhNzAyOGJkZmU5ZTk2MDkwMmZiYjhkNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumNsklOteBww9DcwepkSrzSMUKdF
y6PJs9H9IuJeMtMBIMvyxP5oIv9NDSevLiftXU3AEsOBIJSLfKi7vCg8ctmXNGTH
3JN2nMFY1AYocpNfEQyqmX2GIwJ3M9s3Afr2ZnV3TezaRcEbxBZMO6FA+s+n1x26
MjIcdH8ToYe/EPF7dhgAZvyOP1YPj4QZcNvBwLqcSVwq9gUed1t89TCPP9KHO/Bf
kioTBkdlptNyjbur9sE2CakfibbZ6CpoWdWo5lo4VIKWUwR83Vyfnfqhjh0plQpD
HTAUyroAwq/2/SqttGLCisCb3hApjr0q18rMnpgM+uwOWecIGvFCxPsipwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh/HvpGBIQqcCi9/p6WCQL7uNcrMB8GA1UdIwQY
MBaAFPyRKKdizutrWfVDFWi8E/zkGroSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAt
MTM1ZDcwOWI1OWUwLzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAtMTM1ZDcwOWI1OWUw
LzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2s5blps
3ZgRUyL022OI7IRgc68nwDy6SgCYXMYXbz7YOUHP4Tp6dfOA5T3kJ1WvVGthUYyF
cLsMsWGY0gUCkLYbaykOjGxjl6iNmkh130BTROvieoGOzMqQknEhgtST1xD+by7x
pkxx2fK3TcdaN7ulBGtl7votwzArtLK7LAVrUQUqm+24HB9XPjsyI0G5TJOrXVFA
Yv9s5i6/E/T/J1d1ZJjPUWdqMXk/nnBKykFu6TUCVqSPLh2q2i4Q9TlEU7EfD5j7
zBjUh8HtHrp9WEuH+aq7vVo4dOb7/1Uuqwp6vR/bnnau8cPQZhgJlYRICnLy7GuJ
Wwd7MSGHvQqoPA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:37:02 2026 by rpki-client