Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File:                     PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier:          FsjwFl9MgBwrD3C7J1G35YADt92ppjHnMwyzHHTrzLI=
Subject key identifier:   0B:BB:08:45:32:B4:C5:A7:9E:93:2D:F5:58:5C:CB:C6:3C:EB:19:45
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer:       /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial:       019F9135D053FB9D1FDB5F873D3F53A8CA80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number:          1407
Signing time:             Thu 23 Jul 2026 23:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:50 +0000
Files and hashes:         1: Owu-o7JvEybmXtpQNjtKXjhH9ug.roa (hash: 89sGeUxvhpVypElkHwSDvmrZnRJHBtaKeL9yMz7nC6U=)
                          2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: upNceXy62qtGUzE0W0YJH7WTJU8lVas5nRT84H1J/zg=)
                          3: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:d0:53:fb:9d:1f:db:5f:87:3d:3f:53:a8:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
        Validity
            Not Before: Jul 23 23:00:50 2026 GMT
            Not After : Jul 24 23:00:50 2026 GMT
        Subject: CN=0bbb084532b4c5a79e932df5585ccbc63ceb1945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:09:b0:9a:2b:73:d3:4c:30:e1:84:7b:9f:ea:
                    7b:91:13:27:22:ea:28:77:ea:ba:d0:13:c4:20:1b:
                    df:5e:05:3e:54:98:b1:3e:87:bf:e0:08:d1:17:51:
                    1c:c5:03:0d:8c:d5:8d:22:c5:72:cf:5a:22:8c:25:
                    f2:77:be:b3:56:be:03:0d:08:1e:03:ca:49:1f:b4:
                    95:8b:fa:08:47:5b:d3:78:c8:63:a9:3f:0a:ca:49:
                    da:ae:2a:46:4b:91:1a:b7:61:7c:ea:7d:29:ba:79:
                    e2:92:a7:be:b2:fe:8a:e0:6b:33:d2:d4:94:7c:1f:
                    f3:bc:dd:3b:50:bf:28:8e:69:e3:9f:e3:6c:74:fa:
                    54:d1:2e:d7:fc:8e:00:da:25:a8:52:e0:7b:05:69:
                    53:e3:6c:f8:50:ff:dd:76:39:a4:43:4e:cf:88:f5:
                    ca:76:06:d1:75:3d:f0:7a:ca:33:1f:89:3c:b5:cb:
                    fa:d2:ed:8f:b6:de:22:fa:40:0f:f8:3d:21:63:e6:
                    8a:48:bd:57:f2:21:27:a6:8b:ed:8c:c6:09:b5:83:
                    c2:6d:32:f3:34:dd:61:7f:a9:85:68:d0:df:f5:19:
                    d5:2d:05:94:2f:00:f1:c4:29:80:e4:35:ca:58:a8:
                    68:19:f3:53:d8:92:1b:a8:12:8a:3b:df:4b:f1:70:
                    31:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BB:08:45:32:B4:C5:A7:9E:93:2D:F5:58:5C:CB:C6:3C:EB:19:45
            X509v3 Authority Key Identifier:
                keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:a7:e2:9e:98:f5:d0:01:2f:f5:2b:c0:b6:71:97:2c:49:
         d5:eb:cd:f0:b9:6d:b0:5b:20:c2:77:ad:84:a6:04:18:36:02:
         f9:09:a3:6f:f5:5f:18:2f:ae:af:81:b9:1f:20:71:ea:f2:0c:
         fb:eb:61:be:ef:95:cd:dd:92:47:92:b4:27:5a:20:b2:84:00:
         4e:29:b5:21:6b:95:10:92:53:05:58:45:bc:05:c3:ed:5b:9c:
         95:22:6b:8b:d9:0a:ff:b3:d9:7d:ce:53:4b:38:8e:db:c1:9c:
         d9:43:28:f4:1c:f2:bd:9b:28:3f:b0:1b:74:e3:6b:91:9e:d5:
         3d:f3:ae:12:47:a6:a9:08:09:ba:60:33:d2:89:55:bb:7f:f8:
         bd:67:13:42:0e:2c:f1:7c:95:ca:81:34:18:84:cd:b6:3e:f1:
         d6:f0:d5:a5:91:b2:76:bc:f5:83:e7:6a:c0:5a:ae:4a:0e:a5:
         2a:2b:6b:53:d0:a8:98:5a:57:c9:2b:74:05:34:8e:f8:65:77:
         bb:f6:d7:86:70:4d:aa:0e:61:a8:1e:ba:d3:95:ee:fd:96:cb:
         07:0b:0d:f4:a5:64:bf:8a:b1:b0:2d:a7:26:8c:eb:6b:d2:0c:
         90:d7:35:6f:cc:d5:9b:b0:34:3d:e3:f6:53:65:b9:b6:86:de:
         ac:fc:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:57 2026 by rpki-client