Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File:                     pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier:          /ab/x65iSibHwSFNwiMBA5Mz4XECJ24GJOIdPCMTa9g=
Subject key identifier:   51:4F:0C:D0:95:EE:35:65:69:D1:DA:56:F8:87:89:7D:9A:45:77:5C
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer:       /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial:       019FAD51812D9A366A6A0AF2C539FD2D57A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number:          03F8
Signing time:             Wed 29 Jul 2026 10:00:27 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:27 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:27 +0000
Files and hashes:         1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
                          2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: 1Qcifq11W22U+pYOWpQYrHDlZQ0S503D6uZ+YdLwWxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:81:2d:9a:36:6a:6a:0a:f2:c5:39:fd:2d:57:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
        Validity
            Not Before: Jul 29 10:00:27 2026 GMT
            Not After : Jul 30 10:00:27 2026 GMT
        Subject: CN=514f0cd095ee356569d1da56f887897d9a45775c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:88:1d:bb:31:e1:06:c2:c3:98:99:39:8b:
                    29:09:a2:4f:1d:29:7c:30:c5:83:3b:6d:ab:b0:0a:
                    99:a7:c9:8b:5d:b0:68:a2:e6:e2:ee:50:90:fb:0e:
                    ef:d3:fa:b2:0e:ee:a8:74:a8:27:c5:a8:50:fa:71:
                    21:e3:56:60:ec:8a:61:c8:47:36:7d:c9:af:f6:f0:
                    be:ed:6a:c8:97:32:ff:40:68:ef:06:d1:98:33:46:
                    82:e3:75:4d:51:a8:3c:e4:c3:bf:c1:52:75:77:60:
                    cb:f6:c6:a3:f8:5b:26:a0:47:62:8c:ad:e2:6c:97:
                    90:3c:1e:5b:b2:ff:ea:1b:af:32:e3:33:dd:b1:ff:
                    ec:bb:f8:3c:04:fc:c3:3b:27:49:37:86:dc:6f:57:
                    6f:4c:f8:b0:f1:21:60:12:50:a4:27:57:ff:2e:be:
                    08:c6:98:d2:2a:06:1a:86:e0:87:cb:ed:e8:9b:40:
                    22:eb:9c:73:6e:5c:76:3e:c5:87:44:5b:d6:d4:ce:
                    95:bd:c6:04:36:f6:3e:f3:9d:b7:12:ae:69:ab:7c:
                    ae:59:fa:b5:67:32:1d:20:09:e3:aa:21:78:07:53:
                    3f:b8:a1:8f:5c:14:0a:a8:82:aa:bb:0a:c5:26:74:
                    dd:43:61:59:ea:76:ed:88:43:c3:ba:79:b7:65:a7:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4F:0C:D0:95:EE:35:65:69:D1:DA:56:F8:87:89:7D:9A:45:77:5C
            X509v3 Authority Key Identifier:
                keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:00:b1:f9:59:8d:29:bc:0f:ba:ce:1f:34:3d:37:5a:8c:ce:
         45:9d:89:75:f9:a6:ba:d0:c7:da:1c:d7:cf:70:24:a8:87:2f:
         26:35:b9:0e:5a:b0:b0:36:39:f3:d5:74:33:9b:de:e1:6f:5c:
         70:b2:0b:7c:0b:30:86:06:50:b3:d6:e6:ee:2e:ad:e8:76:3b:
         8e:89:0a:f8:bb:2e:ce:2d:38:e2:76:23:69:2c:19:c9:12:0b:
         c3:7a:41:8b:d6:4c:02:48:a8:55:7c:69:88:76:ed:29:2e:e1:
         6b:22:69:08:36:10:af:60:80:fa:88:d6:64:c0:0e:d1:0a:8b:
         a1:ef:a4:6a:bd:ba:8e:a2:f7:0d:47:13:24:7a:9a:82:cf:ee:
         a4:52:fc:5f:37:de:41:56:4d:40:f3:01:a6:8d:17:32:a8:8d:
         61:2d:99:8d:b2:be:46:03:46:41:02:18:70:4e:7d:67:85:64:
         9a:62:ec:d5:fb:d6:2a:ed:73:4b:a5:05:8b:3a:67:c5:11:d2:
         93:ea:73:8a:21:89:99:1e:29:a3:24:d1:c3:6a:bb:0f:5b:77:
         70:b8:cd:88:0a:e4:b5:36:3e:f7:82:49:0b:a5:de:c2:f6:73:
         01:1b:b2:6e:fb:b3:ef:77:10:bb:b1:ad:e5:0f:64:be:1c:cd:
         a9:b5:88:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:13:00 2026 by rpki-client