Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File:                     _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier:          dCNSwxGkOKR/V4T9vTeI8XBfTXQl4JUSiGsIsHYFZ3s=
Subject key identifier:   5D:77:84:D1:36:F9:A5:B8:83:86:50:61:70:8E:21:7F:56:F5:A8:51
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer:       /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial:       019F93242447422053FC478109E2721B5114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number:          1333
Signing time:             Fri 24 Jul 2026 08:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:46 +0000
Files and hashes:         1: UBGkKBFV2Aa7JBw4pAiIxve4fn0.roa (hash: 9cBrWgFQDzVn82NDm23DCCjfy/yynDnSQwWNQi58HvU=)
                          2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: DLFEJ63qU+9m/TpPxa4t/PH1xE65dxLoR9NnOKmI058=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:24:47:42:20:53:fc:47:81:09:e2:72:1b:51:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
        Validity
            Not Before: Jul 24 08:00:46 2026 GMT
            Not After : Jul 25 08:00:46 2026 GMT
        Subject: CN=5d7784d136f9a5b883865061708e217f56f5a851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:f3:6a:3a:93:cc:f4:32:fe:c3:70:0d:34:
                    0d:6d:44:bd:4e:da:e5:4b:b3:a9:d4:9e:01:b4:93:
                    65:3d:52:7c:98:44:53:7f:11:60:35:5e:0b:6d:df:
                    f0:a2:32:b7:31:a5:90:7b:a5:f4:20:4b:61:fa:68:
                    6f:29:31:45:43:ce:e0:d0:2b:c6:87:c0:a0:18:12:
                    89:86:a7:3b:f4:4a:b4:e2:ed:b0:8a:f6:67:7b:10:
                    3b:d2:b9:d7:c2:cc:07:91:f9:bb:30:c4:36:f2:7d:
                    d6:0a:89:cb:91:73:b4:33:0c:4f:e8:88:a2:8b:a1:
                    d3:b4:2c:b9:d3:03:e7:8d:40:24:f3:23:b5:c6:8d:
                    1f:10:fd:25:78:84:e0:42:33:7f:e5:3e:70:54:e8:
                    f9:16:f6:16:e4:a6:cc:63:51:e6:1a:ec:50:d9:b5:
                    ca:a9:2f:4a:9b:6b:e2:14:10:b7:06:74:11:92:99:
                    d2:0b:f3:f6:68:f1:45:94:17:45:be:b1:01:52:5c:
                    a7:26:74:3c:1e:cf:6c:3c:f7:6a:f8:9d:d3:48:34:
                    59:c7:76:d5:16:ce:b7:0b:7e:87:92:c1:34:66:55:
                    1e:86:a8:7f:e5:f0:a4:ef:5f:aa:7e:31:4e:89:19:
                    16:b6:46:d5:33:90:9a:f6:65:38:84:04:04:df:c0:
                    c8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:77:84:D1:36:F9:A5:B8:83:86:50:61:70:8E:21:7F:56:F5:A8:51
            X509v3 Authority Key Identifier:
                keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2f:a5:ce:5e:d5:99:1f:7e:d1:a6:89:ab:ea:cb:65:d0:8d:
         97:e5:57:bc:4e:5f:d1:21:e6:ed:de:6c:2b:f5:b3:ee:cf:4c:
         16:a2:85:68:29:f3:03:cc:5e:fe:4f:c4:d3:7f:d4:64:e5:8f:
         3d:cd:50:81:dc:04:bb:03:a4:e5:de:7a:da:2c:61:bf:6e:b5:
         87:0d:13:7e:4f:4a:fd:25:a1:0d:21:17:5f:a2:53:4d:c4:1e:
         80:3d:ae:bc:54:55:ef:67:59:57:6e:22:d5:28:7b:19:ab:27:
         01:1c:27:21:45:77:f0:43:ca:73:99:57:75:d7:2b:80:b2:19:
         d3:4c:b5:f7:72:d2:31:9b:87:99:1d:95:c3:b2:23:ed:0b:24:
         49:1e:2f:8e:3d:8b:dd:05:2c:ae:25:3a:7d:01:60:74:c6:31:
         6b:66:8a:87:5a:95:07:72:f8:63:50:23:14:60:4e:f0:b9:e4:
         e8:36:74:45:7e:26:62:63:f1:20:ac:b0:6a:a1:9d:5d:d5:8a:
         c2:09:26:65:3c:80:0d:e9:32:38:91:92:23:bf:a9:bd:22:42:
         eb:34:54:ca:cf:f7:86:77:f6:65:9f:3e:27:60:23:91:2d:b4:
         ed:7a:3a:75:36:05:28:fb:06:0d:e1:15:bb:2b:6a:1c:e4:58:
         db:2a:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:12 2026 by rpki-client