Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File:                     PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier:          T9AHR8KcRDM6FS2KgtFsoPq6xRp4Iqcxs1ctA95ZXnE=
Subject key identifier:   19:7E:D4:64:73:1E:0B:D1:E8:36:A9:B8:52:4A:DE:51:10:AC:8E:79
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer:       /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial:       019F92490B1979700F0AB46013264CCCD47E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number:          07CC
Signing time:             Fri 24 Jul 2026 04:01:28 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:28 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:28 +0000
Files and hashes:         1: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: danvgcsxu6E57YlRnPsx/tpZqajONoHw8gfuymV88zQ=)
                          2: ymE5Pc8e6QWHOxlrawdscg3hba0.roa (hash: FR/m/K23gzt9WTvqKJ25/MJlgHD/0x10UFRx1gKHX48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:49:0b:19:79:70:0f:0a:b4:60:13:26:4c:cc:d4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
        Validity
            Not Before: Jul 24 04:01:28 2026 GMT
            Not After : Jul 25 04:01:28 2026 GMT
        Subject: CN=197ed464731e0bd1e836a9b8524ade5110ac8e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:77:f1:78:80:57:14:07:7b:ff:88:b1:98:f2:
                    73:ca:12:2d:6d:84:48:15:67:66:3f:4c:30:eb:a1:
                    a9:2e:68:d0:bb:2a:61:06:c7:46:b6:e9:28:e6:9a:
                    05:cb:fa:4f:c4:70:2c:4f:6e:61:31:29:f4:c9:00:
                    a5:b1:18:12:a7:01:06:8c:97:12:aa:f1:fe:15:76:
                    3d:ab:11:94:cf:7e:fc:d9:e7:01:7b:82:33:85:26:
                    5e:cc:8f:0e:4a:e7:8d:97:fe:59:36:9f:e3:36:dd:
                    27:f3:9e:8f:96:36:33:7d:36:5a:70:ea:7d:2f:f7:
                    32:a3:5e:25:d2:71:c4:f9:52:e8:a5:d2:f4:ec:06:
                    f4:3f:e3:45:43:5c:e8:58:99:0c:fc:33:8d:1c:81:
                    13:ad:4a:9f:20:9f:88:b4:76:82:92:62:77:74:f0:
                    7f:26:7a:87:14:f3:09:a3:da:6f:8c:fe:ed:7f:2c:
                    76:3e:44:76:00:f8:0a:11:d9:a8:da:23:cb:0c:3b:
                    a2:37:41:f6:39:7e:99:47:f3:d8:fa:93:c0:52:c1:
                    55:12:53:ae:fa:b8:4d:7d:8f:27:c3:09:98:c2:7d:
                    5e:b9:a1:37:22:00:c1:65:1b:43:68:cd:2b:10:8d:
                    98:56:b9:89:54:59:ba:d4:5d:91:52:4b:08:47:1d:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7E:D4:64:73:1E:0B:D1:E8:36:A9:B8:52:4A:DE:51:10:AC:8E:79
            X509v3 Authority Key Identifier:
                keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:08:8c:19:3e:bd:73:ea:ee:fe:13:7a:ac:6e:b5:2a:c0:20:
         03:b8:e5:41:68:59:70:6f:13:4a:12:ac:d1:c9:39:eb:43:03:
         f5:fb:42:9a:17:1c:00:9c:3d:bc:a4:65:cd:01:dd:1f:81:25:
         f1:bb:41:5f:2f:d9:a8:b9:34:f6:ff:94:cc:b0:f9:e3:be:ec:
         3f:af:15:be:52:5d:32:8b:8d:90:fb:6a:9c:5d:79:e0:64:a6:
         8b:07:1d:8b:db:87:c5:4b:37:d6:7d:9d:5e:47:60:34:46:4a:
         cc:e8:bc:3c:ab:9b:f5:7c:90:c7:57:94:a1:89:9f:8a:12:b7:
         4b:2a:a1:62:3e:06:0a:b4:8d:f8:06:40:6d:d4:17:14:2e:05:
         1c:96:cf:39:41:d1:6d:7f:b8:7d:66:1d:05:f3:a6:68:79:14:
         09:5e:4e:35:19:38:e7:bd:a5:02:fe:30:c4:cc:38:43:d5:55:
         ff:80:16:39:f8:c8:b5:e8:8e:19:9c:5f:0b:8f:7b:cd:c2:c4:
         13:89:8a:55:0e:cd:6f:0c:c7:41:78:3d:70:44:62:03:87:97:
         6a:b3:28:0d:23:38:f7:2a:5e:06:21:98:2e:7f:d4:9d:b3:58:
         29:fe:a4:69:9a:ce:bd:56:29:d1:fa:5b:63:92:f2:62:bb:b1:
         41:11:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:43:37 2026 by rpki-client