Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          opm4KDZzrHEti+Wxzyzh88ZXtePo7QmJtVWlXFzzqIA=
Subject key identifier:   D6:B0:72:A5:9F:AA:E4:C6:59:21:5C:DB:02:48:B3:C6:A5:DC:22:71
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019F7851DB409DDAFFCFB113AE4818167A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          11D7
Signing time:             Sun 19 Jul 2026 03:00:58 +0000
Manifest this update:     Sun 19 Jul 2026 03:00:58 +0000
Manifest next update:     Mon 20 Jul 2026 03:00:58 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: aACp-SkFP7ASwX_a2tuNg_nv_j4.roa (hash: 826QRydcpcHGVP83CrJwkOk7bh/+OgMxavlPdNEpobs=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: xbCsxnPJyzsy6vSo5yI1HyP6nhErtbDvO8YlFJgMqZ4=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Jul 2026 20:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:78:51:db:40:9d:da:ff:cf:b1:13:ae:48:18:16:7a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jul 19 03:00:58 2026 GMT
            Not After : Jul 20 03:00:58 2026 GMT
        Subject: CN=d6b072a59faae4c659215cdb0248b3c6a5dc2271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:aa:11:5c:d2:ec:1b:4f:bc:cc:b3:15:44:
                    83:19:62:13:93:99:da:bb:a7:2d:fd:2b:54:25:62:
                    d5:2e:78:a9:c8:dc:a2:b3:40:94:9e:dd:0b:37:f1:
                    22:9c:d0:fd:2e:aa:28:1b:09:01:2f:4a:5c:60:99:
                    1d:21:a6:b1:87:58:72:d3:f5:8e:e7:4f:12:bc:19:
                    16:ed:c9:06:31:26:13:22:df:2b:67:f0:d1:48:6a:
                    c4:4e:76:bf:5f:77:bc:4c:97:62:b8:c3:e8:9e:c7:
                    cd:b8:5c:9f:2e:01:c4:d8:b2:3f:19:fb:57:d9:27:
                    37:fe:5c:aa:83:be:36:74:56:0e:34:17:36:dd:17:
                    84:3a:60:36:64:08:1d:0c:ac:6a:e1:03:e0:03:24:
                    97:16:87:87:1c:6f:51:ae:52:a8:07:7f:dc:3d:11:
                    8e:e4:f1:bd:3a:8d:f5:06:ee:af:ac:70:87:f9:fa:
                    fd:a1:c5:3c:6d:26:c3:fb:57:8d:4d:44:08:0a:6e:
                    62:8b:c2:32:d5:b2:1c:ae:90:6d:52:f3:01:68:e4:
                    ea:98:25:bf:cd:9b:80:81:4a:4b:71:b0:58:00:24:
                    a5:c0:58:69:b4:e3:c8:3c:53:89:ad:dd:05:9b:74:
                    0e:ca:92:5a:5b:eb:23:0a:a4:7f:24:69:3f:6c:07:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B0:72:A5:9F:AA:E4:C6:59:21:5C:DB:02:48:B3:C6:A5:DC:22:71
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fe:97:d2:12:20:01:0f:50:a2:18:b7:1a:6c:4a:51:af:d5:
         11:52:e8:5e:78:fb:94:41:7c:ef:a2:3c:b3:22:bb:be:97:1e:
         0a:6d:71:98:ef:b3:d3:d2:a0:0e:4b:bd:65:c6:3a:22:93:6c:
         ba:ac:6d:a7:ed:85:4e:65:7f:b1:28:d4:6d:e9:27:e3:6e:ad:
         b4:d0:69:b3:8d:2c:4f:e7:6e:a7:0a:40:5c:fb:ab:c1:9f:e0:
         14:77:a6:ff:a7:da:2d:c6:79:79:14:2a:67:a3:6d:f2:ae:56:
         82:bf:8f:20:7a:c8:7c:74:a2:4c:77:02:6d:5c:57:5e:d2:ce:
         84:9d:01:20:2a:73:2e:b9:7c:65:72:b0:05:85:f5:23:3d:99:
         8c:cf:01:49:f9:65:3f:9b:0e:30:d4:f0:2d:aa:b9:34:f3:99:
         71:3b:4c:39:75:da:6d:c5:79:67:5e:58:ec:16:01:39:a8:0c:
         13:98:a4:1c:d0:d9:85:15:9b:4d:85:10:04:cc:09:fc:21:ed:
         71:98:19:40:5e:25:62:c2:59:55:3e:7d:ec:b9:66:5e:ab:95:
         5b:47:f2:32:9c:65:a5:6a:92:7e:2e:72:2a:62:fa:f7:c7:d5:
         9d:c4:d3:f2:19:44:9d:4a:df:5b:74:ac:ab:a8:f0:8b:7c:f0:
         db:da:ea:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ94UdtAndr/z7ETrkgYFnowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjYwNzE5MDMwMDU4WhcNMjYwNzIwMDMwMDU4WjAzMTEwLwYDVQQD
EyhkNmIwNzJhNTlmYWFlNGM2NTkyMTVjZGIwMjQ4YjNjNmE1ZGMyMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAuqEVzS7BtPvMyzFUSDGWITk5na
u6ct/StUJWLVLnipyNyis0CUnt0LN/EinND9LqooGwkBL0pcYJkdIaaxh1hy0/WO
508SvBkW7ckGMSYTIt8rZ/DRSGrETna/X3e8TJdiuMPonsfNuFyfLgHE2LI/GftX
2Sc3/lyqg742dFYONBc23ReEOmA2ZAgdDKxq4QPgAySXFoeHHG9RrlKoB3/cPRGO
5PG9Oo31Bu6vrHCH+fr9ocU8bSbD+1eNTUQICm5ii8Iy1bIcrpBtUvMBaOTqmCW/
zZuAgUpLcbBYACSlwFhptOPIPFOJrd0Fm3QOypJaW+sjCqR/JGk/bAeW1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNawcqWfquTGWSFc2wJIs8al3CJxMB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADv6X0hIg
AQ9Qohi3GmxKUa/VEVLoXnj7lEF876I8syK7vpceCm1xmO+z09KgDku9ZcY6IpNs
uqxtp+2FTmV/sSjUbekn426ttNBps40sT+dupwpAXPurwZ/gFHem/6faLcZ5eRQq
Z6Nt8q5Wgr+PIHrIfHSiTHcCbVxXXtLOhJ0BICpzLrl8ZXKwBYX1Iz2ZjM8BSfll
P5sOMNTwLaq5NPOZcTtMOXXabcV5Z15Y7BYBOagME5ikHNDZhRWbTYUQBMwJ/CHt
cZgZQF4lYsJZVT597LlmXquVW0fyMpxlpWqSfi5yKmL698fVncTT8hlEnUrfW3Ss
q6jwi3zw29rqwg==
-----END CERTIFICATE-----
Generated at Sun Jul 19 04:37:21 2026 by rpki-client