Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File:                     PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier:          xVaxC7yCXsL28+fCXdV1YVtCnaEgkjtLI/gpipsf1kU=
Subject key identifier:   30:34:6E:6A:5B:8F:8D:70:1C:A2:42:2C:8F:74:47:C3:9B:88:0C:8A
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer:       /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial:       019FAAF59531AC3B3559C615F89C63394531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number:          17A5
Signing time:             Tue 28 Jul 2026 23:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:48 +0000
Files and hashes:         1: 9JqUzmhn979MzWUxIBT2RPIOS8A.roa (hash: rkzdzZw7cy8e5NHHoY93mCGwkkZGsYaobB+ZGaI78YQ=)
                          2: K0vidJ7tM2mKOKZRaF9LzxYTcOY.roa (hash: j1Pyv97hL7TS1MOu3SXdm7zFyMsZ0tV3SkgI1mKBoHI=)
                          3: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: vIvsbOfgnHWf+wNB5rpvXgNmbZN+Oldrc1JVrck7xgM=)
                          4: Vh01heQZwiiV-5U2YWUI9ETdNp0.roa (hash: NerAxUNFCszCX2X5F5Gpmh7sivfYufWqTOLrM/cv+gM=)
                          5: tMuTjVPYB4qy8Lzty-HvMfNIyHg.roa (hash: 2UYLL/RMvv9f6KttdupVfDP+HWvUuHhv7cOVMA+gdLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:95:31:ac:3b:35:59:c6:15:f8:9c:63:39:45:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
        Validity
            Not Before: Jul 28 23:00:48 2026 GMT
            Not After : Jul 29 23:00:48 2026 GMT
        Subject: CN=30346e6a5b8f8d701ca2422c8f7447c39b880c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:71:54:3a:6f:b1:14:a8:55:f1:0c:e9:28:
                    c6:39:8f:8e:e8:6a:86:49:6b:e8:32:87:03:29:2d:
                    08:2d:5a:f0:69:ee:7e:59:83:ff:de:d5:88:10:02:
                    67:bc:0d:e0:5f:b8:50:b9:b2:9e:37:7a:fb:3b:c7:
                    c6:1f:e9:59:25:36:3e:8a:8e:91:9a:65:3b:7a:d6:
                    67:98:0b:94:54:95:29:34:56:0c:11:ca:73:81:3d:
                    4d:00:cc:fd:82:19:3f:5f:c1:11:12:9f:32:cb:71:
                    99:13:45:05:ab:c5:b4:5f:49:0d:35:c5:57:d7:c9:
                    54:71:fe:1d:30:aa:3b:ab:0a:eb:8e:c6:2d:9c:b9:
                    f6:a2:cb:d7:d0:4d:d3:03:fc:48:b1:07:ff:74:72:
                    9c:85:ce:48:96:27:50:7c:7d:0d:a0:18:53:09:41:
                    63:cf:75:99:91:6a:35:3c:80:74:59:b8:8d:c0:a8:
                    26:21:2f:42:ab:69:9c:bc:0c:e4:6d:16:e1:dd:a4:
                    0c:56:a5:65:4a:b5:10:e4:79:46:5b:4e:90:fe:61:
                    6f:8b:3d:25:bb:22:0d:39:5e:c4:0d:b4:03:fa:2c:
                    d6:5e:36:5c:4d:33:79:0e:2a:fa:e9:00:05:e2:19:
                    ee:b8:64:58:49:7d:33:52:d3:fa:5f:ce:15:5c:3f:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:34:6E:6A:5B:8F:8D:70:1C:A2:42:2C:8F:74:47:C3:9B:88:0C:8A
            X509v3 Authority Key Identifier:
                keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:69:1f:dc:33:19:91:d1:a3:b9:58:f8:51:a0:64:3e:92:
         ac:e8:a8:4a:10:ec:94:53:9b:20:53:ea:b8:e1:b4:6c:34:c0:
         bf:cf:fa:4d:57:6a:88:6d:38:8f:dd:b3:d7:9c:3d:06:c0:3d:
         67:dd:30:ea:55:a2:96:8c:98:e7:49:c2:a9:9c:d3:46:bf:33:
         15:e2:4a:b5:5d:6c:97:b9:d2:7b:9f:e3:84:72:83:81:d0:ce:
         dd:b0:0f:12:0b:2d:bc:e1:82:9a:51:72:c7:46:97:00:6a:87:
         18:74:2e:91:5c:d9:30:0a:57:3b:0b:2c:28:c2:42:f9:fb:a7:
         99:67:18:14:e3:94:19:71:6d:9f:49:ef:33:89:1b:75:0b:cd:
         b7:3b:56:fd:d0:4a:4a:c0:f4:6e:49:9a:29:0b:15:1c:b4:32:
         77:7c:58:1c:5e:60:fd:ca:b3:5f:5e:31:2b:59:af:58:8e:b8:
         d8:ce:ec:bc:95:08:a3:cd:05:a8:16:dd:60:94:1a:b2:2d:1a:
         09:7e:af:e2:9b:70:42:38:37:18:8d:3f:88:44:0a:c8:89:85:
         2a:56:8d:cd:39:e3:c9:cc:7b:ba:22:26:98:79:40:4e:bf:5e:
         ae:d7:3f:a5:f7:aa:7d:15:07:f1:80:52:d2:e6:14:da:59:9c:
         42:74:bc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:44 2026 by rpki-client