Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
File:                     P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft (raw, json)
Hash identifier:          9H5OUHaokEUB1+aVnW+Bt1Dr0k5snIEZj+TkGtVpzOg=
Subject key identifier:   B4:6C:48:FE:34:00:6E:AC:04:40:CD:69:0C:11:19:43:A8:85:48:EF
Authority key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
Certificate issuer:       /CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Certificate serial:       019F92B5E735418572B3C2FBEA1A6F881255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
Manifest number:          0289
Signing time:             Fri 24 Jul 2026 06:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:22 +0000
Files and hashes:         1: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl (hash: CxpVZMuafg2u07iaTs/eeEIYb5HgH0lDk5WtPjApqG8=)
                          2: wiCmzHMmJI0asghERNxqN-MynS0.roa (hash: bcmBxTUeR+yh0Zn1PK7SL7wVYZreCWWh7r4c30KwASE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:e7:35:41:85:72:b3:c2:fb:ea:1a:6f:88:12:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
        Validity
            Not Before: Jul 24 06:00:22 2026 GMT
            Not After : Jul 25 06:00:22 2026 GMT
        Subject: CN=b46c48fe34006eac0440cd690c111943a88548ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:b9:50:01:47:02:dd:4a:a7:62:48:06:c1:
                    af:7b:41:0f:25:d1:cb:88:b6:de:51:09:da:bb:7e:
                    b0:0c:1c:4e:3d:b1:d1:b7:ae:85:7a:79:43:be:b9:
                    81:fd:9c:b3:7b:06:16:e4:f5:c0:85:59:6f:82:71:
                    50:2f:90:17:fa:7b:ba:0e:8d:ca:a1:7d:e3:fe:bd:
                    d4:99:08:ef:bb:7d:9a:02:03:b0:1d:86:1c:4c:0d:
                    b9:3f:ca:af:d4:c3:b8:00:50:39:d8:23:6c:57:a8:
                    00:cb:bb:80:5c:96:a2:e9:2d:38:ab:bd:cd:85:05:
                    32:a9:e3:8e:af:fc:36:4a:e0:06:81:53:02:5e:09:
                    b7:16:8e:36:bd:d8:cb:51:1f:b6:b6:91:d5:f3:bc:
                    9f:ca:fe:1c:69:03:5a:58:69:97:9c:a2:0a:df:2f:
                    0e:6a:2b:89:4e:c4:fd:92:6e:aa:73:2d:47:d7:23:
                    7b:50:fc:02:e6:82:01:5c:a3:c0:d9:0b:a5:61:a5:
                    5f:4e:18:f5:20:7f:d3:51:20:e5:10:08:65:c1:fb:
                    13:f8:0e:2a:a4:20:fb:ca:c8:b7:72:ed:11:81:14:
                    08:18:88:1d:39:74:2b:80:d0:f3:3a:37:7f:ec:40:
                    82:6b:a0:27:d2:7c:ef:10:8a:29:a9:60:46:0d:7a:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6C:48:FE:34:00:6E:AC:04:40:CD:69:0C:11:19:43:A8:85:48:EF
            X509v3 Authority Key Identifier:
                keyid:3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:66:cb:fd:4f:d0:21:6e:3a:57:36:06:cc:1c:69:df:00:94:
         70:ef:2f:f2:0c:13:20:e9:84:b3:e5:74:ff:52:45:4a:c5:7f:
         71:6b:3a:98:41:02:6b:d1:d2:b8:f6:b7:00:70:1f:a5:2a:53:
         c9:f0:19:43:ea:3f:5f:f9:49:fd:b4:2f:68:a6:e0:62:51:cf:
         98:1e:0c:16:5d:59:15:a8:03:e4:b9:63:f1:64:28:21:25:b6:
         1b:bb:d2:dd:8e:dc:84:49:74:6c:de:85:bd:14:72:ca:eb:a6:
         99:10:51:e3:1c:06:bc:78:60:7f:c6:8f:65:af:c3:3b:c2:17:
         b7:14:9b:09:92:43:ad:a6:ef:ea:df:79:d7:90:00:a9:47:cd:
         0c:4f:d9:e7:9c:ee:f0:f0:62:ca:e0:f5:f6:5d:8e:39:15:49:
         97:40:8d:24:86:e4:f7:4c:82:36:24:74:52:ea:ff:1d:0c:27:
         2e:ef:e1:3d:df:b6:6c:15:67:ed:24:c0:ad:30:d3:ae:c5:1f:
         27:6e:c2:e3:79:fc:c7:56:fa:79:ea:22:37:ac:82:c0:0b:02:
         47:cc:8f:11:ab:b5:b0:26:a2:d9:cb:a8:4c:b4:ba:c8:44:1a:
         e3:74:74:36:be:0f:10:1f:f3:09:3b:eb:ea:ad:76:35:a2:6d:
         c7:74:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:28 2026 by rpki-client