Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File:                     P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier:          Uv8amky1O6ytT1kGlPOmyJ+vNd5z9h2oYtjb2j/B/90=
Subject key identifier:   39:CB:C6:9F:36:DD:0B:97:D8:43:91:39:75:26:8E:38:3D:7C:20:58
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer:       /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial:       019F946D418DC5190F49764A3DC682C7EE5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number:          05B9
Signing time:             Fri 24 Jul 2026 14:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:15 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:15 +0000
Files and hashes:         1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
                          2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
                          3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: Kc1Fz2eZKi6/7YPIgxxcl1Mo+iVt7sqvQInJGmNJOfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:41:8d:c5:19:0f:49:76:4a:3d:c6:82:c7:ee:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
        Validity
            Not Before: Jul 24 14:00:15 2026 GMT
            Not After : Jul 25 14:00:15 2026 GMT
        Subject: CN=39cbc69f36dd0b97d843913975268e383d7c2058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:43:46:9f:a2:4a:eb:04:49:f3:b9:9c:98:
                    a2:bb:0c:53:89:37:3f:55:04:7d:61:ac:13:4c:c4:
                    17:cd:ae:02:1e:14:e8:91:ef:bf:12:1e:0f:33:3d:
                    a4:3e:b6:94:4f:a0:e2:18:32:df:4f:18:10:1a:c9:
                    e3:e8:ae:79:62:d7:d8:19:4d:d5:85:5e:6d:be:25:
                    d1:a0:c3:96:b5:1b:92:d6:9e:d7:9d:50:e7:0c:63:
                    b6:eb:1d:e1:ad:7c:27:3e:80:30:64:25:d0:97:6e:
                    5b:0f:68:80:a6:24:ab:51:83:8a:3e:3a:da:c4:16:
                    fb:1b:f9:5f:52:51:bf:cb:c3:e4:91:5a:f4:98:e4:
                    32:c7:8f:eb:30:5b:a4:a5:d9:31:92:6b:4b:d7:44:
                    74:df:4c:41:a7:f7:2a:62:7b:47:57:e0:03:9b:02:
                    cd:77:69:16:e0:92:41:8d:8a:b5:f2:62:3c:21:1d:
                    5d:31:2e:c9:6b:e1:b8:a2:01:00:4c:a6:d8:75:79:
                    34:af:3a:91:14:fc:f4:2f:7f:f7:02:20:61:09:f0:
                    f2:90:0f:f6:73:f6:be:c0:4b:76:f9:6c:07:42:69:
                    b3:50:3b:1f:84:2b:b2:ef:f9:14:78:ea:c3:ad:bd:
                    a9:2b:05:96:a6:93:a7:12:6d:42:41:7e:ea:2c:62:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CB:C6:9F:36:DD:0B:97:D8:43:91:39:75:26:8E:38:3D:7C:20:58
            X509v3 Authority Key Identifier:
                keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:15:8f:46:e6:b1:be:9a:8a:f3:90:84:68:67:11:8c:c6:20:
         09:b9:0f:56:6d:da:0d:ce:88:c8:88:62:3a:3f:80:52:4d:2b:
         ba:96:0b:53:21:d4:f7:3a:cc:02:7b:7f:ae:90:7c:45:3a:16:
         f0:52:e7:21:61:a4:14:61:0d:f7:fe:bb:0b:3f:7e:f1:2a:50:
         ce:fd:b8:df:04:8f:18:09:bc:fe:78:df:6f:54:ae:a4:8c:81:
         30:55:dd:a0:fb:4e:f5:65:0a:5a:fb:0b:25:62:75:d1:74:45:
         ad:c0:91:ae:e1:f5:86:22:0c:a4:21:df:b6:44:39:60:2b:73:
         da:1a:a2:b0:e9:83:3b:ad:85:f8:fb:c4:0b:40:94:40:d4:a9:
         05:1d:0d:4b:69:c3:1d:33:3b:02:6c:62:a0:c8:c7:02:5b:f0:
         76:1d:32:c4:d4:6e:62:20:b2:ef:e1:32:e4:27:40:eb:0f:94:
         b0:8b:4f:ef:d3:aa:44:d9:a2:12:60:d4:24:58:a7:00:aa:e7:
         58:c2:fc:96:4a:c9:5e:24:a1:39:f5:f5:e8:0f:03:d3:31:6c:
         e1:8e:d9:a6:38:ff:63:19:04:25:9b:05:03:33:e2:e1:f9:29:
         68:c7:d6:c9:cc:31:e0:bb:6e:cb:a8:60:54:9c:bb:fa:e4:c7:
         b6:bb:2f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:22 2026 by rpki-client