Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File:                     ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier:          T2FuzheCGmEm9C74l33VhB6BHlPP0HlivLaGwtcstug=
Subject key identifier:   84:6B:BB:D0:21:26:28:CA:4A:ED:ED:5A:43:3B:02:4D:60:F2:3C:77
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer:       /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial:       019F728799872AFDA8B46FA2B1E8673ED69F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number:          19BA
Signing time:             Sat 18 Jul 2026 00:01:56 +0000
Manifest this update:     Sat 18 Jul 2026 00:01:56 +0000
Manifest next update:     Sun 19 Jul 2026 00:01:56 +0000
Files and hashes:         1: DPIuTlPDQsCMliQH2yCW70IWFSA.roa (hash: XoPgon1icCFhtP9xfLWgNL9py4uMSqIopAyjCfTp874=)
                          2: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: ql1DMgu1U24lV2CyayD+hrrhZBrfW3th5SFuHhvxOi8=)
                          3: XoroHKzHcF4gIRR_sz3VpH7FRlk.roa (hash: gbEFPzyD3F8+HScFUiNxrYjDnQgNn3EhyOvcJtp08oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Jul 2026 00:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:72:87:99:87:2a:fd:a8:b4:6f:a2:b1:e8:67:3e:d6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
        Validity
            Not Before: Jul 18 00:01:56 2026 GMT
            Not After : Jul 19 00:01:56 2026 GMT
        Subject: CN=846bbbd0212628ca4aeded5a433b024d60f23c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:21:b6:72:d6:07:29:85:50:35:44:03:14:
                    5f:b6:2f:03:d6:6c:72:a1:fb:41:90:f5:8e:22:d0:
                    de:9a:76:50:38:e7:f2:ff:48:8d:fb:8f:1d:33:7a:
                    2b:a2:85:11:95:9b:83:27:f7:b4:3d:67:71:15:62:
                    b0:ff:50:df:ff:34:79:f2:c2:57:19:26:54:7e:6a:
                    a5:85:3f:74:6d:da:51:ee:af:42:34:22:7a:4a:95:
                    2b:c5:d1:a8:e2:9f:e8:fe:37:03:03:87:10:8e:cc:
                    3a:7e:3f:57:96:e3:1b:41:f0:97:c3:b9:1a:9a:7e:
                    6d:bc:41:66:82:9e:ca:02:3f:f6:49:e4:82:d7:3f:
                    32:70:73:1a:cb:ab:05:9b:84:78:bb:6c:b8:10:8f:
                    92:43:ad:f4:56:44:8a:4d:04:c1:15:38:07:87:97:
                    72:fb:67:ed:ff:05:7d:73:a3:92:f7:86:c2:21:5c:
                    7e:d2:31:25:67:4d:64:a3:02:e4:36:9e:84:c8:3f:
                    e1:84:89:c2:5c:c5:3e:82:d9:63:16:f2:0f:f6:78:
                    23:96:a9:5a:a8:98:9e:fd:d8:cd:38:a6:b0:98:33:
                    f5:6c:a4:f0:9f:b7:55:7d:17:56:41:a5:04:e7:d2:
                    29:5f:d7:e0:34:49:78:67:75:30:40:fc:8e:22:48:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6B:BB:D0:21:26:28:CA:4A:ED:ED:5A:43:3B:02:4D:60:F2:3C:77
            X509v3 Authority Key Identifier:
                keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a6:de:eb:44:7e:0f:6c:1e:58:09:87:91:ad:fc:ca:f0:ea:
         e8:4b:10:bf:96:65:c6:57:2f:c7:d7:97:9e:11:ac:c3:34:bc:
         c2:89:b3:0d:c0:bb:7d:a4:36:0c:af:25:3f:b8:74:f6:e9:a4:
         6f:58:e8:d3:b7:87:29:6f:54:94:66:3d:f3:ba:b2:39:06:e4:
         6d:e5:f6:61:f3:8d:20:79:32:f2:53:f3:5e:a5:6c:6d:03:10:
         d6:a4:20:4f:04:15:ac:bf:56:33:28:9a:12:f3:43:8e:5d:7b:
         fb:9f:36:2e:37:9a:88:de:01:c7:a7:fc:41:63:27:f8:20:fd:
         d0:a2:43:25:9a:b9:75:01:a3:ab:06:51:90:63:8d:a0:07:d5:
         cd:b0:d3:32:c7:a9:02:3f:dc:d4:7c:0a:15:18:27:aa:5a:f9:
         43:37:78:25:e4:96:58:c3:f1:b1:5e:7a:9a:68:23:f3:21:fe:
         ab:0e:7c:0d:38:5f:68:59:a1:0e:08:f2:b9:64:a2:79:b5:1d:
         ed:10:0c:2e:52:97:b2:40:ce:6d:e9:a3:81:8e:60:40:e1:fc:
         76:8b:76:6f:e6:a8:ac:85:69:e4:85:9e:4e:62:44:0a:a1:85:
         ac:4d:e8:ee:09:68:fe:31:21:10:f4:2e:df:a3:fa:2f:37:09:
         44:3a:35:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9yh5mHKv2otG+isehnPtafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMjY5Njc1YWNlZmJiZjg0OTdiMWUyMWNhNzM3NjRhZjRh
YThjN2IwHhcNMjYwNzE4MDAwMTU2WhcNMjYwNzE5MDAwMTU2WjAzMTEwLwYDVQQD
Eyg4NDZiYmJkMDIxMjYyOGNhNGFlZGVkNWE0MzNiMDI0ZDYwZjIzYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJghtnLWBymFUDVEAxRfti8D1mxy
oftBkPWOItDemnZQOOfy/0iN+48dM3orooURlZuDJ/e0PWdxFWKw/1Df/zR58sJX
GSZUfmqlhT90bdpR7q9CNCJ6SpUrxdGo4p/o/jcDA4cQjsw6fj9XluMbQfCXw7ka
mn5tvEFmgp7KAj/2SeSC1z8ycHMay6sFm4R4u2y4EI+SQ630VkSKTQTBFTgHh5dy
+2ft/wV9c6OS94bCIVx+0jElZ01kowLkNp6EyD/hhInCXMU+gtljFvIP9ngjlqla
qJie/djNOKawmDP1bKTwn7dVfRdWQaUE59IpX9fgNEl4Z3UwQPyOIkjGUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRru9AhJijKSu3tWkM7Ak1g8jx3MB8GA1UdIwQY
MBaAFCEmlnWs77v4SXseIcpzdkr0qox7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzkt
MWQ0ZGZiNGY0ODAwLzEvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzktMWQ0ZGZiNGY0ODAw
LzEvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKbe60R+
D2weWAmHka38yvDq6EsQv5Zlxlcvx9eXnhGswzS8womzDcC7faQ2DK8lP7h09umk
b1jo07eHKW9UlGY987qyOQbkbeX2YfONIHky8lPzXqVsbQMQ1qQgTwQVrL9WMyia
EvNDjl17+582LjeaiN4Bx6f8QWMn+CD90KJDJZq5dQGjqwZRkGONoAfVzbDTMsep
Aj/c1HwKFRgnqlr5Qzd4JeSWWMPxsV56mmgj8yH+qw58DThfaFmhDgjyuWSiebUd
7RAMLlKXskDObemjgY5gQOH8dot2b+aorIVp5IWeTmJECqGFrE3o7glo/jEhEPQu
36P6LzcJRDo1+A==
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:15:51 2026 by rpki-client