Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
File:                     5PKoZiAvS4y8MzgtboLYHYlkyA4.mft (raw, json)
Hash identifier:          le8c6EXN8WDXSi6tchdBC/3SRos0RqLNE+4j/sUnxFA=
Subject key identifier:   07:D6:C1:82:6A:98:24:24:07:E5:6D:F3:A9:B4:DF:9F:3E:45:DA:01
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Certificate issuer:       /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial:       019F9135DD57BB59DFEBAD95EF5EAA642396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
Manifest number:          19D0
Signing time:             Thu 23 Jul 2026 23:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:54 +0000
Files and hashes:         1: 0w4XcBQywwl1teApjX6VHSPuvgg.roa (hash: /EcXOS7UzKKs89buMydMe2QfoMOWxkfJCW82u93ztaw=)
                          2: 5PKoZiAvS4y8MzgtboLYHYlkyA4.crl (hash: E3oaIA9LpVNI1wcMdjNXH61Anz+ae2kOwpVkq1jYX9I=)
                          3: av_HZf6EAwlDsvNiqOK233RQvoM.roa (hash: GY5qM+O2sWQRx1EcDLewr4LGFVQxjYE9jkUci4HJmic=)
                          4: ullWMQMNWNs2m-qavM2ZaH0wLLY.asa (hash: Hs+EUjaBHhmBRRhyoMI5LyzKTqwRJd2HGRT6RAN80K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:dd:57:bb:59:df:eb:ad:95:ef:5e:aa:64:23:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
        Validity
            Not Before: Jul 23 23:00:54 2026 GMT
            Not After : Jul 24 23:00:54 2026 GMT
        Subject: CN=07d6c1826a98242407e56df3a9b4df9f3e45da01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:4e:20:46:4b:07:96:ea:1f:78:1a:10:48:
                    19:87:9f:e0:36:2c:d8:38:63:32:6b:a1:fe:44:35:
                    41:37:b1:05:ff:a6:a7:01:99:02:57:0f:99:09:7f:
                    07:f2:c1:44:99:49:5a:b4:a9:9e:a1:28:76:11:06:
                    45:40:b5:51:0d:6c:1d:db:47:7f:90:43:cc:92:a4:
                    2b:45:56:04:c5:57:08:5f:26:26:9d:f5:bf:9d:e0:
                    65:13:96:27:fc:31:00:95:28:d2:f4:34:f9:6c:55:
                    69:23:be:59:6c:5a:a6:c4:25:5b:6c:d4:91:8b:fe:
                    d4:3f:e4:e3:e6:98:0d:ae:e3:d2:20:4e:37:0a:5c:
                    31:3c:38:e2:2d:4a:9e:64:f3:64:35:41:e2:e8:bf:
                    9e:d4:85:21:8c:39:98:34:a7:90:2d:2c:53:76:e2:
                    56:b6:96:65:51:fe:50:55:75:a7:a9:1d:df:a0:8a:
                    be:c8:61:a3:47:ad:54:31:6a:34:6d:67:ad:ec:0a:
                    a6:2d:6b:3c:05:11:ca:b4:f9:84:27:fb:fe:ac:e0:
                    a7:c0:b8:45:5c:11:67:1b:56:e3:f8:d8:65:ff:46:
                    f2:27:00:02:5c:30:ef:18:2d:55:4c:e6:d8:e6:7b:
                    0b:6c:54:12:d1:d4:bc:02:cd:fe:ed:b1:8d:98:5b:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D6:C1:82:6A:98:24:24:07:E5:6D:F3:A9:B4:DF:9F:3E:45:DA:01
            X509v3 Authority Key Identifier:
                keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9a:fb:77:c8:c9:41:3b:8c:e0:ec:16:43:4b:f8:9c:4a:7f:
         d4:5b:fe:25:0b:bb:31:c0:44:68:d9:7b:e9:07:33:c8:16:39:
         55:ad:89:fc:15:ce:7b:49:be:cc:13:98:6d:ed:67:4f:23:49:
         71:4c:75:d8:f8:bd:a0:5f:bb:46:56:54:f5:6b:80:2f:bd:68:
         3a:da:84:78:be:a9:2e:ab:03:b5:df:04:a7:59:4a:5e:e4:a0:
         4c:04:95:41:ed:ae:2c:ce:3e:c4:58:06:dc:06:5b:00:fc:33:
         d2:47:98:a3:85:5e:c9:dd:50:1f:07:21:26:9b:33:5b:27:96:
         ff:b7:e3:84:40:53:93:fe:ed:e9:10:fd:69:99:ae:37:36:d6:
         2e:9f:4d:56:5f:cf:41:16:d1:f0:8d:e1:30:38:7b:08:a2:d6:
         3a:41:e4:ad:97:cc:ac:2d:77:a5:4c:ba:44:b5:f5:0e:78:09:
         20:a8:e3:f1:1b:da:80:ab:32:ff:bf:4c:68:b3:21:39:8d:35:
         2f:1c:92:9f:38:35:1e:f0:03:ea:55:d2:da:57:1f:2f:ca:7e:
         7f:20:cd:e2:8a:f0:0a:d7:a2:0a:81:df:be:35:14:07:b2:bd:
         7f:eb:14:83:ff:19:92:2b:17:32:5f:b0:43:df:3c:5c:31:fc:
         5f:29:e3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:53:42 2026 by rpki-client