Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
File:                     PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json)
Hash identifier:          l5zHY7IYcvF/S7bDxipMFv9MYjBCPTxNGoPHKvQso1k=
Subject key identifier:   C4:8D:27:D0:2A:15:A7:5F:22:6E:75:8C:DB:E7:B6:1A:5E:D2:25:20
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Certificate issuer:       /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial:       019FAD521A1439DEF9660FECBECE5D8849DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 10:01:06 +0000
Manifest this update:     Wed 29 Jul 2026 10:01:06 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:06 +0000
Files and hashes:         1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: kYlS9W90ha6lvMDADhzJSI/uV4tO9SBSlbNTbeh9kKE=)
                          2: sCE1yodUvj9BdJNK5llFZ8BEDYY.roa (hash: 3/B6MniV1srlZK4xMEp39gTJz673XIWVDanm60XM8zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:52:1a:14:39:de:f9:66:0f:ec:be:ce:5d:88:49:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
        Validity
            Not Before: Jul 29 10:01:06 2026 GMT
            Not After : Jul 30 10:01:06 2026 GMT
        Subject: CN=c48d27d02a15a75f226e758cdbe7b61a5ed22520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:ba:57:f9:a6:2c:bd:47:e0:fb:de:d5:42:
                    a6:8e:4a:c8:7c:77:a1:af:ab:98:7e:3f:4e:42:d7:
                    d2:03:a0:3c:82:a2:04:db:64:8b:25:9e:61:71:90:
                    76:c9:36:30:9e:30:b0:12:b7:c7:88:c3:54:80:20:
                    e0:4f:d6:f4:17:a2:87:5d:03:7a:bd:d3:88:15:57:
                    2b:64:a9:ed:0e:c7:c2:f1:a4:85:ab:c1:7c:12:83:
                    87:99:a2:cf:bb:32:b6:df:9c:75:d7:58:0c:1a:06:
                    2d:00:96:a4:83:50:db:8d:51:11:a9:5c:39:06:d5:
                    a7:69:cb:fd:7d:56:af:49:a2:28:71:d2:07:1c:5a:
                    81:64:86:7e:b8:a7:2f:9f:13:b3:3f:cf:6f:2a:7e:
                    b1:49:4b:4d:17:4e:9c:f9:c7:28:5d:58:15:0e:11:
                    7a:bc:4b:d1:5e:23:d6:c6:9a:80:d8:38:56:53:14:
                    80:46:03:93:6c:af:e4:66:e5:79:3e:76:93:61:3a:
                    1e:cc:14:e6:d6:8b:b5:87:dc:c9:37:68:b6:a7:e3:
                    b5:bd:5b:1c:7c:c6:75:f9:de:b5:88:8e:82:87:29:
                    1a:56:85:09:25:82:c5:0a:93:81:3b:c4:8f:7f:04:
                    61:94:96:cd:0a:5f:e8:9a:aa:16:f4:e5:72:43:d8:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8D:27:D0:2A:15:A7:5F:22:6E:75:8C:DB:E7:B6:1A:5E:D2:25:20
            X509v3 Authority Key Identifier:
                keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:dd:1b:b6:27:64:cc:56:86:1c:53:21:c0:37:bd:95:5f:0c:
         70:3b:39:6f:89:33:44:8d:37:8d:df:e9:d3:3d:7f:d4:5e:9a:
         07:7f:f9:a0:5b:3e:5d:23:58:94:23:99:60:e9:58:4c:a6:ad:
         a0:16:e5:5e:c7:28:ba:a4:ca:0b:eb:1e:f2:dd:29:a6:b5:2a:
         64:53:30:77:78:eb:1a:43:a5:02:b3:19:b3:e2:a1:9e:eb:c8:
         63:a2:2e:78:82:85:05:1c:6f:2f:45:fa:1c:7e:ae:14:25:93:
         92:88:cc:7f:0a:f0:75:97:ca:be:5e:1e:ad:0d:3d:00:06:ab:
         43:89:d9:6e:50:4d:17:26:18:ee:79:f5:6c:94:e6:44:04:97:
         f1:f3:fb:5b:2b:85:7e:b0:d0:98:d7:59:4b:3b:a8:a5:db:8f:
         0d:d3:63:ac:27:59:53:4f:f2:7f:aa:f9:5b:1d:f0:4b:1e:8b:
         42:ee:ee:c0:cb:16:e5:54:d7:85:d0:bf:32:fe:3a:f6:18:fc:
         18:9d:55:a0:30:09:4d:cd:60:2c:93:fd:e4:1e:62:b1:69:cc:
         e8:94:96:4d:d8:8f:a6:50:07:4f:38:88:92:6f:03:cc:87:2e:
         b2:c4:6e:1c:61:71:f6:26:ff:9a:90:b6:c4:5f:18:fb:2d:04:
         4e:fb:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:27:55 2026 by rpki-client