Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
File:                     PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json)
Hash identifier:          lljYW/cb0tK29p2KNlgJy3M8YvnzEcMlEAXUkMmGMHo=
Subject key identifier:   C4:FE:4F:FD:A6:F1:FF:0B:21:5C:DE:57:92:27:78:10:E9:85:D1:01
Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
Certificate issuer:       /CN=3d639fa4eddc162df3659e721d247ff338962f68
Certificate serial:       019F92B650AAB9BCACF8BE8F1C0681CCD90E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
Manifest number:          029D
Signing time:             Fri 24 Jul 2026 06:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:49 +0000
Files and hashes:         1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: ODaDMnZjw01m0aU89KVU4nrQ3ykIsGKA5Em2U1Epyng=)
                          2: SSbCIFUzoJnAufFAmpn4-eL0evQ.roa (hash: xLYQWvxW9OI7//jHrJrCiY97JsgcAmDpELt0HCZDcTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:50:aa:b9:bc:ac:f8:be:8f:1c:06:81:cc:d9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68
        Validity
            Not Before: Jul 24 06:00:49 2026 GMT
            Not After : Jul 25 06:00:49 2026 GMT
        Subject: CN=c4fe4ffda6f1ff0b215cde5792277810e985d101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:0e:5d:08:9a:cb:5a:c5:a9:9c:f0:c8:33:
                    17:52:5b:62:10:85:79:03:de:15:af:9b:fa:27:ce:
                    82:83:28:b8:b9:27:72:2f:b5:29:cf:84:f9:3e:85:
                    52:84:b0:2d:31:d9:93:d6:29:8d:77:b9:d9:4a:40:
                    87:1e:a4:bf:51:d2:85:25:ab:37:00:05:6a:b6:0f:
                    7f:ff:a5:19:c3:f7:02:31:3c:65:62:dd:b0:f9:49:
                    9a:cd:35:c5:46:9d:fd:99:ba:bc:33:21:f9:dd:2b:
                    b9:c9:af:0c:6e:08:c8:d6:93:d0:96:69:2c:26:07:
                    07:3c:90:73:7b:ff:f3:a4:f4:dd:6e:9c:ef:cb:3d:
                    0f:f7:b7:93:24:df:e9:0a:93:b2:ca:08:b5:7c:b6:
                    d1:44:86:25:13:0e:8f:55:b0:23:72:07:b8:1c:a8:
                    1e:ed:78:b9:d4:aa:2a:18:9a:9e:f6:a6:88:65:98:
                    bd:17:34:49:ea:1d:ec:1c:4f:17:13:4a:6b:28:1d:
                    12:09:00:98:6d:b9:11:6a:1d:c2:ce:b2:37:c8:42:
                    8e:f9:03:5f:60:0f:20:a9:70:6f:11:52:d9:38:c5:
                    34:a1:17:1e:ef:44:81:26:58:8a:6f:63:86:81:87:
                    be:91:21:f6:ed:0d:b0:d4:4b:29:0f:8a:a8:aa:0f:
                    1f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FE:4F:FD:A6:F1:FF:0B:21:5C:DE:57:92:27:78:10:E9:85:D1:01
            X509v3 Authority Key Identifier:
                keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:43:6d:26:fe:2c:b4:3e:05:8c:b6:32:ac:d1:44:79:db:5c:
         a0:b6:a3:7e:70:ab:d2:f0:bc:00:1e:9d:dd:ec:a1:0f:aa:3c:
         dc:b9:ab:e4:da:1f:4b:b8:62:c9:8f:ba:1a:e8:eb:aa:2d:5f:
         63:2c:47:e9:de:69:e7:61:71:12:42:21:9e:f8:4f:50:b7:66:
         47:03:3a:bb:6f:31:a8:12:2b:5c:66:ce:99:fc:6a:ce:6b:a4:
         13:39:60:36:3a:4b:af:59:76:ca:3b:51:77:dd:e0:5a:ff:1d:
         c2:ec:20:35:17:50:4d:83:c7:10:4b:9e:16:70:21:b1:2a:9f:
         41:2b:df:ca:ef:50:88:97:f7:e5:73:ec:62:3e:49:f6:6c:18:
         84:54:2f:67:bf:09:5b:f1:c9:7f:25:27:9f:2c:d8:e9:5b:df:
         38:bb:cd:c0:c4:3c:27:f3:68:47:5e:f4:6b:47:f6:85:48:0f:
         fc:5c:c5:d9:5f:69:69:07:27:e7:eb:8e:5b:cb:2c:b6:3f:b6:
         f1:07:57:c3:59:21:55:d7:d7:95:0a:69:51:b8:14:d6:06:64:
         fa:bc:28:1a:bc:cc:89:48:15:c7:cb:46:ca:3d:f6:ee:9a:df:
         01:e8:df:73:3c:6e:fa:84:18:b5:82:c0:d9:ac:ef:5e:d6:4b:
         42:43:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:21 2026 by rpki-client