Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
File:                     pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft (raw, json)
Hash identifier:          7ETmKdcAx0G7WbzhrnSg4jLp962oJKyPcpiTIxYfq08=
Subject key identifier:   89:D3:EB:45:4B:BD:E9:18:08:6D:C2:BA:ED:E2:DB:C1:07:16:2D:DD
Authority key identifier: A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1
Certificate issuer:       /CN=a724383490a105bdc0d21597bfb1478ef04630b1
Certificate serial:       019F95B6EF5FAD183C3004F372F84611B4A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
Manifest number:          099A
Signing time:             Fri 24 Jul 2026 20:00:21 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:21 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:21 +0000
Files and hashes:         1: QQvg19RwajXD2HR6-dIlare9_Rk.roa (hash: NDZGZHbva25Eq3lCZo+AeGz2C0nVtEPW/31zQHhJYJ0=)
                          2: pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl (hash: DmfZpC3U9iNIOAlttz7tzdhWEb4/IiF9Xtp9Dp/Misc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b6:ef:5f:ad:18:3c:30:04:f3:72:f8:46:11:b4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a724383490a105bdc0d21597bfb1478ef04630b1
        Validity
            Not Before: Jul 24 20:00:21 2026 GMT
            Not After : Jul 25 20:00:21 2026 GMT
        Subject: CN=89d3eb454bbde918086dc2baede2dbc107162ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:0b:6d:00:2b:3a:c0:45:6b:3f:61:97:e7:
                    14:ec:89:39:f5:2b:d7:7d:f8:a3:d9:33:04:4d:41:
                    0a:7f:25:27:2c:9e:87:c6:8c:63:86:be:f0:dc:42:
                    d6:99:49:5a:3c:ed:ec:63:a2:9e:b5:b2:ca:fb:17:
                    4e:44:dd:b4:4a:e2:f4:17:60:0d:3b:db:ae:48:b1:
                    81:fb:82:cc:8f:0b:b8:f7:56:0f:53:2c:bf:b4:60:
                    72:53:a2:84:2b:4e:bc:e7:af:74:23:1e:3b:6b:9f:
                    47:c6:40:a2:4e:41:16:11:a8:6b:33:93:24:ae:2f:
                    b9:8c:5e:0a:98:13:fd:a9:61:f0:4c:3c:d5:2a:0f:
                    5c:fa:ee:c3:22:34:23:cf:37:61:40:cf:b3:0c:ad:
                    38:04:29:d8:ca:96:bd:c1:73:22:77:f5:6a:69:20:
                    2f:35:9f:00:08:e8:59:6a:a4:fa:ee:22:ad:a2:aa:
                    8f:33:76:af:1e:bd:76:92:33:7a:1d:c7:33:8c:24:
                    b6:f1:af:c8:ba:2d:50:97:ca:bd:ac:ca:3b:b7:6c:
                    73:de:29:80:12:fe:8f:d2:8d:5c:95:8a:78:61:16:
                    8d:95:0e:59:33:13:04:27:b5:31:9d:41:3a:25:84:
                    97:85:8c:c7:aa:95:9b:52:f3:6c:e5:21:a9:ef:e5:
                    9b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D3:EB:45:4B:BD:E9:18:08:6D:C2:BA:ED:E2:DB:C1:07:16:2D:DD
            X509v3 Authority Key Identifier:
                keyid:A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c9:1b:13:cc:32:ad:f5:20:eb:26:1f:aa:b1:95:5d:e1:54:
         da:06:4a:6d:a9:5c:db:5e:bb:cc:cb:9e:19:71:e3:d1:cf:86:
         e0:40:c2:65:ed:f0:3c:fe:36:70:4e:c9:9e:e3:9e:f7:9b:fa:
         5b:5c:57:bd:94:1e:cf:cd:8a:aa:f2:72:c7:2c:ec:ab:b3:cf:
         04:1d:99:8b:76:70:97:8e:45:07:f7:2f:58:69:df:92:0d:de:
         d1:4f:56:29:4e:3a:ee:65:4c:49:42:41:03:ad:84:4e:7e:86:
         42:f5:36:42:b5:e8:09:0a:ba:76:8f:ef:68:70:f8:63:0e:9b:
         5c:ee:6a:9e:88:ae:4a:be:b3:16:06:59:ff:c6:11:b1:db:af:
         d5:6b:da:e5:af:af:4f:93:ee:35:22:72:2f:6d:87:09:f0:72:
         4b:2f:00:dd:3f:42:fe:b9:59:3c:35:00:39:89:bc:e6:7b:95:
         68:2d:ba:92:bc:a5:7b:d7:7d:de:dd:bf:50:76:ce:45:cd:bc:
         7f:a0:c1:06:b5:3f:ae:50:50:15:42:ae:90:04:20:9b:70:bb:
         88:8c:aa:ce:57:25:7b:77:b7:e8:1c:c8:5b:45:40:d4:fa:de:
         c4:f7:c4:2f:e3:5b:e5:a9:b7:64:2f:34:7c:5c:9e:a4:47:fd:
         2c:59:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:14 2026 by rpki-client