Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
File:                     Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json)
Hash identifier:          0dtCu+eHLy51gmzFdLlz0YaZCmyQojDWHtGU6UYlFak=
Subject key identifier:   6F:D4:BD:1B:81:A8:28:F2:FC:72:B9:1E:01:C5:BB:21:87:E9:30:30
Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Certificate issuer:       /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Certificate serial:       019F9323F2DD6F76A7E816BC9F441C8D6603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
Manifest number:          08C6
Signing time:             Fri 24 Jul 2026 08:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:34 +0000
Files and hashes:         1: 9MMTJC9bSYJjm0yH2SR40mWxLt4.roa (hash: 911epWb1C+HTij7xHBBtK6BFbTtOQmcCGUfZtk4CgN0=)
                          2: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: osIATfjgOoCrE1hv1JFJxgb3C5e5dcycmo0ZpGut60Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:f2:dd:6f:76:a7:e8:16:bc:9f:44:1c:8d:66:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
        Validity
            Not Before: Jul 24 08:00:34 2026 GMT
            Not After : Jul 25 08:00:34 2026 GMT
        Subject: CN=6fd4bd1b81a828f2fc72b91e01c5bb2187e93030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c6:4d:e0:6a:0c:f2:e0:e5:62:08:d7:7b:09:
                    bd:94:bc:70:82:3c:59:79:e8:10:97:d4:7c:0d:3e:
                    f2:86:d5:7b:2e:71:4c:69:7b:f9:aa:ee:44:2f:f5:
                    ba:60:82:c2:2f:96:4f:35:8b:bf:8a:f3:48:44:55:
                    b7:78:79:7c:2e:cb:ee:5e:2a:c5:10:61:71:7b:e3:
                    52:fd:e1:5a:6b:5e:46:9a:dc:cc:7a:d6:3b:03:9f:
                    4a:d4:b2:e4:ff:bc:96:44:4f:dc:87:10:f1:79:d9:
                    31:e6:37:ab:75:58:b8:40:19:57:22:e9:9e:77:d6:
                    31:9a:51:b7:3c:1c:a5:05:3f:2e:44:71:bb:ef:23:
                    e9:7d:ed:99:38:66:a5:f4:4d:7e:3c:41:bd:66:f1:
                    fd:a1:8e:ce:0f:a4:58:d4:60:7d:da:e1:51:8d:4a:
                    91:4b:66:ee:1e:7f:ef:62:57:e3:09:58:5b:a1:e8:
                    a4:60:47:29:e7:56:02:77:ea:35:01:68:ee:c2:79:
                    82:e5:37:b4:4d:50:60:68:0f:c0:31:a2:8a:9b:42:
                    93:1b:db:bc:dc:c3:cb:75:c6:95:bb:60:db:ba:29:
                    07:b6:e6:44:ea:5b:97:8f:f5:e4:b9:58:68:76:b0:
                    ed:3d:82:42:27:ba:92:b7:c3:0d:b0:ce:23:ab:33:
                    a5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D4:BD:1B:81:A8:28:F2:FC:72:B9:1E:01:C5:BB:21:87:E9:30:30
            X509v3 Authority Key Identifier:
                keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:f6:5e:d8:7b:5d:63:eb:c7:9f:cf:1d:78:1b:9d:dd:2a:f4:
         fa:6c:19:a6:5f:98:0c:97:87:a6:b4:5e:69:25:71:fd:b0:30:
         ff:44:98:9a:8d:92:46:08:d7:b4:df:82:c3:54:19:51:cc:f8:
         8f:97:f6:6f:0e:09:32:ac:9d:23:f1:ab:64:a4:8d:45:d8:97:
         98:42:da:32:d1:fd:fc:b7:7a:da:09:9d:aa:ec:5e:13:1a:3b:
         ae:27:77:e4:35:2f:bc:72:54:9d:50:e0:26:78:07:69:94:e4:
         d4:36:64:4e:a3:62:aa:c5:cc:11:f8:36:c1:36:ad:c4:03:9b:
         88:9e:c3:6d:03:c1:b6:42:01:0e:4a:d3:5d:0e:86:31:72:c4:
         e3:98:16:59:14:ed:fc:86:ca:16:20:d6:11:6c:e9:7c:0d:e4:
         e4:77:18:25:df:61:fd:a2:fb:99:c8:cc:52:7c:95:38:4f:48:
         d9:af:d9:34:e6:2b:cc:64:7e:b8:44:f0:32:5d:ed:4c:ff:05:
         89:20:34:8f:d4:f2:f7:3e:20:aa:1f:5c:8a:5d:af:07:d7:6e:
         ec:00:ac:1a:18:8d:f4:3b:72:d9:5f:31:48:71:0f:79:fb:9b:
         ca:c3:36:19:65:f2:37:1c:2a:a1:35:61:7e:7f:7c:28:96:1b:
         e0:17:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:44 2026 by rpki-client