Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File:                     pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier:          k72ULucDGCHfRyzHTYU7hC3QG/OeiyJbCFyQTtV4mDw=
Subject key identifier:   AB:62:22:A7:DD:E3:0E:E1:68:2F:9A:B7:FF:F2:2B:19:1E:2E:1C:EA
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer:       /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial:       019F8FEC1CDEE34DFAC6D1B6A44B689E9EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number:          1188
Signing time:             Thu 23 Jul 2026 17:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:43 +0000
Files and hashes:         1: C0X3hB3u8LAMqfro5qGT2MbslXM.roa (hash: ONmV+DcOhO6LmIL71sUACRCSy2jq2kSbueB6GNTC6Cg=)
                          2: I9LHF-RZZYWSxcstDpnevIA6riE.roa (hash: vYLGIUfFYxCx7fMsQHhbZTUJyamMIn1ZfEPepnwBTW8=)
                          3: M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa (hash: xe4YBSaFNrSAbOu74w58XW4Su4kogyqAQm6dN9suUj4=)
                          4: Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa (hash: GYIQ4Ob+P9w6WB9ban+5wDqvxTPLde9MDUHrhHDgOIc=)
                          5: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: Ku6WW/fVh1mBTFIInED/KxJa0u+OtTeeK/jrycugN74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:1c:de:e3:4d:fa:c6:d1:b6:a4:4b:68:9e:9e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
        Validity
            Not Before: Jul 23 17:00:43 2026 GMT
            Not After : Jul 24 17:00:43 2026 GMT
        Subject: CN=ab6222a7dde30ee1682f9ab7fff22b191e2e1cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:66:c6:6f:e2:e4:da:66:46:3a:e2:7f:3a:
                    c0:bb:cf:be:c8:93:30:cc:ca:97:9e:c8:2f:52:6f:
                    84:ea:7f:3a:d1:d4:07:f8:0c:f5:31:36:9c:37:3f:
                    b2:5d:84:3b:6e:df:3e:fe:95:03:55:84:0b:bf:2a:
                    ba:c8:52:ea:76:69:3f:35:b5:9c:24:5e:76:1d:47:
                    b6:93:18:63:da:bb:f2:d4:f5:ab:bb:ec:e7:a7:01:
                    61:48:78:f6:81:53:09:ae:84:45:d0:1e:58:f9:55:
                    bc:90:4f:9e:fb:93:de:8c:48:88:70:c0:de:4e:88:
                    1e:eb:89:12:45:52:86:79:16:95:21:9d:ae:73:f1:
                    46:e1:f7:9d:25:7a:4f:8f:ac:65:35:d1:b2:6a:62:
                    96:73:01:a9:3c:12:b7:6b:ac:5b:ec:d4:17:95:2f:
                    97:05:60:0b:b4:e3:8e:19:ec:c3:90:af:fb:be:f2:
                    ef:15:4b:cb:8b:29:c5:2a:66:d0:34:f2:a7:36:59:
                    83:9f:4f:cb:ba:cb:e3:51:c7:e6:0a:46:88:2f:91:
                    dd:ca:87:e6:ac:e8:e2:d9:d8:47:05:35:04:89:a4:
                    fd:b5:b0:c5:18:c2:d2:ad:d1:68:c4:0c:33:a3:a2:
                    ab:b7:c2:ca:70:ac:e4:22:67:89:eb:aa:13:63:d4:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:62:22:A7:DD:E3:0E:E1:68:2F:9A:B7:FF:F2:2B:19:1E:2E:1C:EA
            X509v3 Authority Key Identifier:
                keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:13:7b:57:ef:27:53:dd:5f:2f:1b:df:16:5c:09:2c:ff:4d:
         92:07:e2:05:6a:40:e4:15:0f:58:0f:54:87:72:fe:60:96:50:
         67:39:bf:e6:3c:4d:c3:38:36:bb:9c:44:68:67:fa:ee:2f:91:
         32:80:28:8d:0a:78:31:81:c0:57:f5:a0:41:76:cb:0f:c6:3c:
         a7:7f:37:1b:81:42:f0:7b:08:54:f6:e7:37:70:24:68:d4:a1:
         cf:97:81:20:3d:a6:54:aa:63:e9:f8:c1:11:1f:b2:03:c2:39:
         6b:e9:6c:db:bd:ec:bc:3b:e2:2c:44:c7:b8:1f:1a:23:28:ef:
         5d:f7:eb:32:75:92:b7:d5:02:55:fe:71:c4:34:31:1c:59:91:
         bf:2a:5d:1c:eb:b4:ca:29:be:95:41:6e:fd:ca:c3:2e:aa:be:
         dd:3c:8d:b8:8c:8d:e7:13:5d:85:73:b5:3b:06:13:ed:04:14:
         ef:86:53:9b:c8:c3:24:68:ce:63:c9:58:22:44:23:2d:74:36:
         e3:62:c0:5e:a8:7e:eb:71:97:9f:7f:e3:f7:df:65:84:ce:10:
         f7:33:ec:3b:45:5d:85:63:94:82:c6:df:fa:e6:c5:7b:9c:70:
         79:87:be:5d:02:b6:38:07:36:7c:3e:65:fe:e0:6c:b9:a7:85:
         10:b7:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:14 2026 by rpki-client