Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
File:                     p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json)
Hash identifier:          KutUIhNLoJIHrXyOyUm3BNiwkm2iFG3te86Gs80O6/c=
Subject key identifier:   3E:38:53:88:EA:95:AC:07:9E:F7:3B:98:8D:F3:3C:EE:7C:8E:03:E6
Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
Certificate issuer:       /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Certificate serial:       019F93FFFF3F99D78E52311EB30E877E4485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
Manifest number:          07DF
Signing time:             Fri 24 Jul 2026 12:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:55 +0000
Files and hashes:         1: SdRMQSisA3A52kvZfTcOqIZi7WM.roa (hash: FjVPIrI7M5sGkygChCHAIE+8f/f2VPSzrAXNL/N59yU=)
                          2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: rEfKtMvcEf5Z9YmmDrJ4XTQeLdg/U2LKahmpj6TOv/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:ff:3f:99:d7:8e:52:31:1e:b3:0e:87:7e:44:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
        Validity
            Not Before: Jul 24 12:00:55 2026 GMT
            Not After : Jul 25 12:00:55 2026 GMT
        Subject: CN=3e385388ea95ac079ef73b988df33cee7c8e03e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:ce:6e:19:29:a1:5e:1b:a9:18:8e:57:40:
                    07:48:5a:0d:cf:7c:2b:94:cc:c8:3d:14:57:95:5d:
                    ea:7a:28:99:bf:f2:dd:1a:e3:e1:56:a6:e8:64:34:
                    6d:fb:f4:6c:04:6f:ca:cc:1f:f7:d9:eb:ad:d6:b0:
                    72:c5:12:a5:51:51:ee:36:18:08:fd:db:53:0b:14:
                    e5:a1:28:78:14:08:b8:3c:74:0a:3c:b0:76:30:71:
                    74:c5:39:d2:5c:b6:73:93:2d:c9:f0:26:0d:f3:c0:
                    44:d3:5c:46:7a:14:72:0e:20:fe:9d:7e:6d:76:09:
                    c6:b5:63:e3:19:db:70:a9:09:fa:f4:c4:63:8c:38:
                    61:2d:54:d3:08:2f:fc:90:f7:4d:a1:9d:6d:1e:00:
                    d0:8b:de:1b:42:c9:02:30:86:9c:57:44:c5:02:a7:
                    16:56:7b:38:20:de:ed:6e:0f:d3:9e:b2:bd:15:21:
                    61:80:d3:eb:e7:32:66:21:6a:31:c9:23:26:1d:7d:
                    57:02:1b:a7:cd:a1:47:fc:cc:8d:84:0f:a5:6d:d5:
                    87:46:52:10:bd:18:28:5c:c9:45:11:9b:13:99:d6:
                    df:15:38:cb:42:a6:f9:ee:ec:e6:a1:00:c9:d7:ea:
                    b5:a6:1d:6f:a1:33:82:5e:00:82:49:21:47:dc:75:
                    62:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:38:53:88:EA:95:AC:07:9E:F7:3B:98:8D:F3:3C:EE:7C:8E:03:E6
            X509v3 Authority Key Identifier:
                keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:2d:f5:35:b7:28:89:e7:c7:34:97:ae:df:07:4b:f6:d4:9b:
         61:86:42:90:1d:64:79:73:99:d5:26:77:99:ec:86:70:fa:e2:
         f7:d9:97:04:28:a3:e3:42:bb:f2:1f:13:e0:0a:ea:fc:c8:94:
         83:11:f4:85:58:71:f3:7a:83:2f:b0:b0:77:1a:ac:d7:25:c8:
         de:a9:9b:df:cf:c2:9f:4a:d2:ee:96:c9:b7:bc:ca:14:57:20:
         a5:59:7e:d6:b8:c0:17:c7:f6:c4:87:a3:c2:4d:8e:6b:20:90:
         76:ef:6f:01:3a:29:a8:e3:16:74:35:22:be:96:e9:a1:dc:0d:
         68:40:d2:e6:f8:fe:6f:09:b4:63:18:9b:ea:55:7a:fc:e7:18:
         54:2e:23:9c:08:89:a4:ce:c9:37:41:e0:bd:e8:ac:b9:91:4f:
         2a:68:6e:4d:05:ee:32:bf:42:20:19:f5:58:69:d3:f8:1a:d0:
         44:91:0b:c5:77:09:5f:cd:21:cd:79:5d:1e:bd:83:62:cc:3c:
         67:3f:c7:0f:b7:31:51:81:ba:77:8a:ab:a5:ec:e3:27:d7:57:
         e0:b9:33:f4:0b:8b:95:85:76:00:73:b5:48:15:03:49:0f:85:
         17:cf:32:e1:fe:f3:83:48:d7:f9:04:92:bb:c5:9d:d4:9f:e8:
         b3:18:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:48 2026 by rpki-client