Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File:                     pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier:          AG9tnGUqP5zXuzecKudeHVeIX2sqzqjGJ7eoDq/uQyY=
Subject key identifier:   C3:AF:6A:BD:5F:2E:DD:C8:36:FE:24:E4:09:80:B6:77:9D:8B:AC:56
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer:       /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial:       019F9211B912BAE6798BC815831907999C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number:          03AD
Signing time:             Fri 24 Jul 2026 03:01:02 +0000
Manifest this update:     Fri 24 Jul 2026 03:01:02 +0000
Manifest next update:     Sat 25 Jul 2026 03:01:02 +0000
Files and hashes:         1: lha0ZmedDVL5ojeX6XufkbgdzDc.roa (hash: aql9eZoUUBsK6RGXxorryRAzls71w3x+Yu3C3M/JeMA=)
                          2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: NozEnws4BmUbhuXieFK/by472zm2bFgwX1KbAksN8KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:b9:12:ba:e6:79:8b:c8:15:83:19:07:99:9c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
        Validity
            Not Before: Jul 24 03:01:02 2026 GMT
            Not After : Jul 25 03:01:02 2026 GMT
        Subject: CN=c3af6abd5f2eddc836fe24e40980b6779d8bac56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:6f:58:73:88:c7:ed:2c:5f:22:16:f5:58:
                    73:7c:35:15:74:c2:e0:ae:a5:29:b4:d9:57:ff:bb:
                    12:b8:56:83:6d:4a:4e:aa:63:8b:cd:d0:0e:49:52:
                    23:7d:26:6c:e4:ed:a2:aa:dd:f9:d0:18:d1:47:2c:
                    5f:d5:84:a6:78:d2:7d:a4:c8:d8:57:58:30:d9:11:
                    78:4a:f1:f0:57:65:2a:3b:d6:1e:62:80:e3:3a:51:
                    bd:5a:f8:4e:80:c8:a4:b5:8e:06:fd:b5:90:0a:e1:
                    6b:19:b1:bc:f5:d8:4d:55:67:e7:c2:94:af:8c:53:
                    c6:b5:04:bd:7c:be:38:21:86:17:18:5b:99:e1:dc:
                    b0:7b:bc:82:cc:6d:f2:4d:15:96:10:be:06:46:8c:
                    a2:6c:88:c2:ed:34:60:1a:b4:de:9c:52:ef:b5:6f:
                    43:10:fb:21:04:5b:94:38:df:84:00:72:6d:5f:82:
                    84:78:fe:5f:d8:41:35:ef:05:65:37:dc:e9:6f:05:
                    be:61:09:f9:d0:c9:a6:5c:81:ad:8d:51:ce:4c:42:
                    cd:67:ff:02:67:3a:dc:a4:ef:d2:6f:3a:5e:91:4b:
                    5a:e2:f1:cf:9b:4a:07:eb:db:6b:86:0b:39:a6:62:
                    b7:72:3b:2b:c2:b0:6c:74:0c:53:a3:06:b5:be:9a:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AF:6A:BD:5F:2E:DD:C8:36:FE:24:E4:09:80:B6:77:9D:8B:AC:56
            X509v3 Authority Key Identifier:
                keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c4:36:dd:2d:db:7e:3a:22:98:ab:f8:6a:6b:2d:aa:0d:7b:
         4a:6f:68:2b:c7:0b:ab:5b:19:c0:2f:97:94:04:7b:a2:03:73:
         e9:50:7b:27:7e:8a:fd:75:bb:17:f5:d2:25:21:c5:40:b8:db:
         42:57:de:ac:5d:c3:91:a7:31:65:6d:aa:0a:c3:cb:86:d5:7e:
         f9:9b:28:2c:83:9c:89:6e:34:c3:77:a8:33:ea:11:90:92:d6:
         91:76:e8:77:4b:98:6a:07:11:2b:5b:b0:06:2c:9d:61:39:ce:
         69:a4:56:13:ec:5e:f8:d0:e5:c1:05:f0:60:ef:b6:0f:65:a8:
         17:d3:85:9a:65:42:80:71:fe:96:83:2a:4e:a7:68:5f:88:f6:
         ec:ea:bb:fd:aa:b4:56:b0:fb:e8:5f:99:df:42:e9:c7:7c:6a:
         11:f4:86:b8:48:ff:98:d4:58:eb:5f:ab:f9:fc:d1:89:21:5d:
         f1:a7:17:4c:a9:33:41:b7:18:b3:a4:9b:8c:d2:61:f9:7b:8c:
         f3:87:05:7e:25:24:75:b3:01:57:ce:5e:f5:a1:90:8a:c3:d1:
         5f:f6:9a:ac:df:8e:cb:a4:53:ef:b2:95:c7:53:9a:8d:14:df:
         c7:be:23:96:fa:65:5c:a9:59:4e:8f:d7:16:48:bf:cd:04:6c:
         90:4c:7e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:18 2026 by rpki-client