Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File:                     P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier:          X0t04Mk/m/W2k/W376O7eMPzbF39q3QSxtVOPb0BZqg=
Subject key identifier:   B2:34:AD:0B:8C:D2:09:CB:30:49:91:49:DD:60:C6:BB:4D:B7:62:36
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer:       /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial:       019F905A0AA85E75BD182BA94F7B46EDCDF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number:          13FD
Signing time:             Thu 23 Jul 2026 19:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:47 +0000
Files and hashes:         1: N4Y10Ua1e6-XUNgoamRd4hJuHM0.roa (hash: u/ttBIhtxAmlNbTBEOD7s6FeOeykOPEDDbaJasWKOp8=)
                          2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: +R7au+5w7N30O730pgjosji33ZJBV8h4UVJARLUzpOk=)
                          3: P7s6SkBNrB3yuV7739uVskU8ZG8.roa (hash: ZmJidlTbaMdMKLRXvEzc/VS03klVrtlteUmPhSejjJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:0a:a8:5e:75:bd:18:2b:a9:4f:7b:46:ed:cd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
        Validity
            Not Before: Jul 23 19:00:47 2026 GMT
            Not After : Jul 24 19:00:47 2026 GMT
        Subject: CN=b234ad0b8cd209cb30499149dd60c6bb4db76236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:cb:6e:e4:aa:cb:55:d6:f7:fc:19:a9:6c:
                    52:e5:f6:42:30:3b:86:43:3d:a8:b3:53:10:45:69:
                    92:77:ec:76:d6:1e:e0:f1:1c:3a:67:2c:8e:d5:23:
                    bb:10:ce:92:03:7b:e0:e2:57:37:be:0f:4c:55:63:
                    1b:85:4e:ef:d2:9c:89:d7:91:7e:a3:61:b9:6a:4c:
                    46:f5:f2:e9:89:dc:f5:dc:2e:e9:08:6c:d6:d5:c4:
                    a8:64:07:1d:2d:c7:76:7c:61:96:a7:d2:07:95:4b:
                    e1:38:63:aa:6c:11:12:f9:e4:14:42:5c:5d:05:6b:
                    43:ac:64:27:9a:ef:28:46:12:73:ef:79:f7:68:23:
                    d1:95:f7:4b:c3:f5:6e:81:21:3e:ba:88:50:6c:39:
                    f2:fd:0f:2d:30:da:5a:a3:88:9b:5b:ee:75:1a:af:
                    62:a3:09:bd:9b:31:85:25:f2:eb:52:0e:49:53:07:
                    f7:5c:6b:ef:93:31:96:82:7a:f3:18:2c:09:82:93:
                    b5:bb:12:4c:2a:74:11:b9:81:99:96:6f:dd:fb:40:
                    6a:44:14:d5:12:9b:2a:03:90:2a:53:91:49:82:55:
                    e8:f9:b2:bf:d6:98:ce:2b:01:22:6f:a8:d8:03:a0:
                    54:9f:18:89:11:05:1c:1f:2a:09:00:5c:ce:77:58:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:34:AD:0B:8C:D2:09:CB:30:49:91:49:DD:60:C6:BB:4D:B7:62:36
            X509v3 Authority Key Identifier:
                keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e3:6d:4b:da:5d:02:f2:28:02:6c:bc:bf:35:19:e9:45:ed:
         18:f1:fe:43:d3:cf:b4:60:8c:a5:ca:42:09:73:7f:32:0c:c2:
         e1:a3:52:6d:3b:77:96:51:9c:20:48:96:8c:60:c1:32:35:3a:
         5a:39:2e:6a:a5:29:b0:9b:53:91:c5:74:d8:18:af:3b:f0:35:
         62:73:7e:03:93:0c:3f:9e:10:80:cc:5a:bc:12:7e:02:73:62:
         55:a1:68:f5:74:7e:92:ff:f0:03:17:cf:14:f3:e6:23:8c:6f:
         19:40:cb:87:c3:4f:90:52:ec:61:71:5d:01:97:8d:e8:d7:bb:
         ce:61:4d:28:4d:af:ac:cd:cd:8a:73:58:dd:23:59:8d:ae:64:
         da:d9:59:91:1f:85:d4:77:a1:e3:c5:94:6b:2a:37:d8:3e:3a:
         8b:54:2e:46:ad:a1:22:8a:c4:8f:6d:2d:e9:80:a0:b0:a1:45:
         2c:55:98:0f:8c:e0:3f:48:ab:94:98:a9:9e:a4:65:ad:f9:71:
         5f:d5:a1:14:ea:aa:e0:06:39:35:99:5b:2f:92:28:5d:85:0e:
         e4:19:70:08:10:0b:51:6e:7c:73:f1:32:53:39:cc:7a:3d:61:
         39:0a:a9:77:cc:32:24:eb:97:a4:b7:28:0e:a0:2e:84:a0:2c:
         71:ba:24:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:12:37 2026 by rpki-client