Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          JTBkNbTq/o44XU+I1C94J01IK6KbYs4jhI9Yo4M1lMA=
Subject key identifier:   BD:77:A4:0D:B5:6A:10:14:2D:BF:F6:68:2E:90:0C:0A:B7:44:32:53
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       019F90FE77EDB1FB984255021327432AC5BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          1483
Signing time:             Thu 23 Jul 2026 22:00:23 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:23 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:23 +0000
Files and hashes:         1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
                          2: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
                          3: o_KgOnMxvvekvBuPyEEYSnKNWEc.roa (hash: mk2PcWlp1oVsxXXBvuzmUNaWlANp8uf/qu/yWtEPDuk=)
                          4: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: 7KNw0OrPTbqj2xA/wpYNFpeRhgA/R/5OWcj31tz1ofM=)
                          5: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
                          6: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:77:ed:b1:fb:98:42:55:02:13:27:43:2a:c5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Jul 23 22:00:23 2026 GMT
            Not After : Jul 24 22:00:23 2026 GMT
        Subject: CN=bd77a40db56a10142dbff6682e900c0ab7443253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:85:64:7b:76:45:3b:1d:0c:07:f3:f4:e6:
                    e7:61:65:b4:f4:c3:8a:bf:75:f3:ba:12:18:e7:cb:
                    c0:e2:6a:de:de:f8:cb:be:3e:2c:f8:e2:c0:54:91:
                    30:df:c5:e3:58:0c:9b:9c:9d:78:b2:1a:9a:2d:f9:
                    e1:be:76:b2:4b:ca:13:90:63:95:7e:60:b5:a1:59:
                    b0:40:35:9a:ca:c2:b8:57:4b:d5:7b:d0:44:36:7b:
                    d8:b4:9b:0c:1b:0f:d0:6e:ca:e4:af:7e:5d:31:69:
                    6d:d1:0e:e0:6b:29:f2:09:af:8b:d3:6d:37:2c:b1:
                    c5:63:98:ac:c2:f4:a1:21:1a:70:f3:06:a7:05:d3:
                    dd:a0:8c:57:30:77:36:e2:8c:28:57:68:fc:59:85:
                    53:5d:e7:07:5b:62:59:69:e8:01:46:85:5b:df:30:
                    b3:b5:80:68:ad:d6:13:24:d1:45:12:dc:8d:73:7c:
                    0d:8c:40:b7:c1:26:dd:a2:91:0e:77:9c:14:80:70:
                    0e:24:f5:23:86:6e:be:37:05:5a:74:3d:2c:a0:80:
                    22:21:9c:ac:1d:2f:ab:46:55:70:bd:5c:fe:d0:85:
                    9e:94:c8:6f:3f:e2:82:04:83:ea:f0:ec:35:68:25:
                    ee:4d:60:77:96:2d:fc:d6:9a:7d:0c:63:ec:b2:58:
                    22:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:77:A4:0D:B5:6A:10:14:2D:BF:F6:68:2E:90:0C:0A:B7:44:32:53
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:41:bc:4b:00:75:1d:d6:69:b7:b4:ce:6c:1f:a1:50:a0:ac:
         2c:da:37:c0:a9:53:33:7d:5d:d4:54:8a:e1:69:8c:14:bf:b1:
         c2:86:2d:59:74:b0:87:cb:9b:bb:5d:d2:99:6b:d9:fb:4a:48:
         b5:71:bb:ae:02:7e:f0:5f:64:eb:3e:d6:de:1d:4a:e0:da:dc:
         a6:91:2a:83:4e:57:d9:13:e2:77:62:fb:a9:4b:5e:68:46:24:
         00:c6:66:68:28:40:dc:a4:48:65:ab:cf:71:1c:6a:df:60:55:
         3c:4d:20:2f:b4:c1:ae:ae:00:e9:2c:2e:6f:86:4a:11:00:b5:
         fa:51:7d:05:e5:98:17:c0:b3:4a:31:26:ec:71:6b:4e:29:2e:
         b8:83:09:7d:19:13:c1:82:f0:6b:f5:7e:2d:21:5d:18:de:19:
         0a:ca:d1:e8:0d:03:3a:a0:c4:6e:5d:5b:3f:9e:58:04:32:95:
         64:79:eb:31:5c:53:87:76:95:2b:57:ba:56:02:eb:79:1e:75:
         a8:4c:cf:84:fa:1f:f5:c1:52:9d:33:76:8f:d1:a0:80:35:62:
         45:3d:88:07:95:c2:5a:f0:b3:a3:02:2c:08:6a:b0:7e:7b:6b:
         cb:1b:82:6c:88:cb:87:00:bf:b3:69:0a:3d:54:f1:1c:c4:82:
         00:cd:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:28:00 2026 by rpki-client