Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
File:                     P1oa6clM3jczsUz3HS5FAjYCG-c.mft (raw, json)
Hash identifier:          FuX+nzVL+2hSysxCxEl1bG9i7Ug1jgNlD4sQWfWny1A=
Subject key identifier:   5B:F9:3B:30:BE:A1:97:34:25:8C:D1:6C:88:16:27:A9:53:93:FC:47
Authority key identifier: 3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
Certificate issuer:       /CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Certificate serial:       019F916D13EE4A176808390F54EEC5C0F8A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:01:12 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:12 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:12 +0000
Files and hashes:         1: 5tvg6R-aNFHAmDm8hsBhHIkdM_o.roa (hash: oPbe4w173UuB1VDOYJqEbd8iNWC/h8MGEf5qvBqUZd0=)
                          2: P1oa6clM3jczsUz3HS5FAjYCG-c.crl (hash: StUbK3SGUDZVe9sXPAaSrzZdp8lQZbb/ChvlUHgThmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:13:ee:4a:17:68:08:39:0f:54:ee:c5:c0:f8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
        Validity
            Not Before: Jul 24 00:01:12 2026 GMT
            Not After : Jul 25 00:01:12 2026 GMT
        Subject: CN=5bf93b30bea19734258cd16c881627a95393fc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:de:c0:ee:a9:bd:8d:4e:49:65:b9:8f:bd:75:
                    0b:ed:b8:b3:ed:c1:35:63:2c:33:85:d8:e5:c8:8a:
                    6e:84:7d:65:f1:20:89:22:e6:a7:e2:dd:24:a2:49:
                    0a:06:39:bf:f5:e4:83:95:0d:7b:03:d3:2c:3d:fe:
                    99:ca:19:32:b1:4f:a0:11:45:ab:43:c6:4f:16:78:
                    37:46:64:5e:db:84:b5:61:68:3a:fd:8c:a7:fa:42:
                    06:05:29:0f:c8:e2:41:a5:43:92:24:fd:1f:ed:7f:
                    ad:0f:73:c8:be:22:f1:c6:56:16:33:bd:23:f7:67:
                    38:4e:7a:15:94:6d:d2:35:e7:92:74:9f:93:81:75:
                    6c:f0:75:9d:94:60:00:23:97:57:ac:ee:1e:26:ee:
                    24:6c:24:03:29:6d:91:71:94:12:12:37:9e:3f:70:
                    50:8c:ad:b6:f2:26:0a:31:b3:5d:12:f8:53:51:9b:
                    5b:ad:0f:c4:33:03:72:c5:56:e3:81:4f:19:e9:1f:
                    6e:54:cb:1d:fd:54:34:bb:32:c2:fd:80:eb:72:73:
                    80:0e:0e:c0:9e:d9:6b:44:af:17:b5:90:6e:46:eb:
                    94:5b:8a:e6:66:34:7e:39:a7:c3:6d:63:0a:1f:80:
                    39:71:88:71:ff:54:67:03:2b:64:bb:8a:06:5b:ee:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F9:3B:30:BE:A1:97:34:25:8C:D1:6C:88:16:27:A9:53:93:FC:47
            X509v3 Authority Key Identifier:
                keyid:3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:af:24:e5:39:b4:97:7c:2f:6d:20:88:61:43:55:04:6d:d0:
         cf:1d:f5:0f:b2:42:a5:94:58:28:e5:ca:92:90:51:00:e5:e3:
         9b:4f:f7:67:af:3f:68:b3:f8:de:e0:d1:db:01:7a:ce:b8:3f:
         ba:3d:79:d5:29:da:ff:0f:02:ee:15:b7:52:f6:3d:0a:56:58:
         d8:e0:ed:c0:92:91:a8:05:c1:cc:9f:66:ff:d7:6b:e2:44:27:
         19:a2:b1:f5:ba:0c:9d:3b:31:90:2d:43:9e:4c:d3:86:36:77:
         7c:bd:43:38:ae:76:e6:17:a2:35:57:09:82:d2:82:10:4d:48:
         fe:17:43:fd:c6:c6:a7:e1:26:7c:fb:f8:a8:cd:92:a4:9f:f4:
         8f:e8:77:0f:17:d4:e2:2f:21:ad:e5:93:7a:8c:14:21:03:f4:
         da:b6:8c:1a:0c:0c:de:fc:95:dc:e0:8d:2a:a0:08:ad:50:32:
         3e:64:2b:15:65:31:ac:ff:72:c8:ba:a3:96:a6:f3:36:cd:14:
         0d:ac:55:30:fe:3c:86:4e:a6:a8:f9:5c:d5:db:c9:77:d3:3e:
         5d:b3:08:f2:c6:ee:14:19:c9:82:49:d9:a3:4c:98:cf:31:99:
         0f:ca:cb:c8:e8:3b:6e:0d:d4:1c:30:b3:7b:e0:fe:e2:9f:e6:
         8b:52:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:39 2026 by rpki-client