Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
File:                     Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json)
Hash identifier:          EhyAEKhdYGDW6i/eF4mjIpmnz4D4VMIa8/fU0SnPXUQ=
Subject key identifier:   CE:D3:92:CD:8A:59:B0:E6:35:10:4F:D3:7A:CE:19:46:69:CE:DC:4A
Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Certificate issuer:       /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Certificate serial:       019FAC3EED354A896F5A6421177E3998BEDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
Manifest number:          08D3
Signing time:             Wed 29 Jul 2026 05:00:32 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:32 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:32 +0000
Files and hashes:         1: 9MMTJC9bSYJjm0yH2SR40mWxLt4.roa (hash: 911epWb1C+HTij7xHBBtK6BFbTtOQmcCGUfZtk4CgN0=)
                          2: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: g1AqntFxO57bXHPGP3RCkmoz9xC91E1k+roddDnMG7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:ed:35:4a:89:6f:5a:64:21:17:7e:39:98:be:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
        Validity
            Not Before: Jul 29 05:00:32 2026 GMT
            Not After : Jul 30 05:00:32 2026 GMT
        Subject: CN=ced392cd8a59b0e635104fd37ace194669cedc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:ad:ef:e6:54:3d:ab:59:e4:1e:14:f8:ff:
                    09:19:11:98:81:16:d1:43:1d:c8:90:84:90:0c:bf:
                    22:7c:ca:91:c1:71:13:e0:e6:b0:6b:d5:81:ac:1b:
                    3d:cc:e8:70:57:64:73:46:09:78:8f:a5:71:1b:43:
                    5b:d3:5f:66:f7:af:a2:e9:60:a1:8c:03:ee:85:f1:
                    44:d5:7c:72:8f:e2:19:6d:c8:e8:bb:10:7c:1e:7a:
                    0d:e0:f7:5b:4c:d1:d4:01:92:0f:af:fb:44:55:20:
                    58:15:31:c1:c6:40:8c:1e:31:0e:5e:62:9c:a4:11:
                    8e:44:00:a8:f7:a3:b7:9f:34:24:ca:10:a4:9a:0d:
                    d2:b2:8d:86:ba:cc:7b:bc:42:d5:a0:93:01:b1:af:
                    aa:9f:68:b1:09:3d:19:3e:8d:fd:ea:a8:a3:2f:33:
                    b2:6b:47:87:14:b0:83:22:6d:4e:94:89:0b:7f:96:
                    ec:cf:3a:ea:0c:e3:8d:1d:ea:1c:bc:e2:22:da:c3:
                    af:ce:18:1c:1c:0e:1e:bc:77:19:37:2c:3d:21:48:
                    71:4f:1e:b4:30:0a:5c:5f:5e:ce:fd:2a:3d:25:12:
                    af:a8:df:11:f8:88:fc:77:40:40:d4:40:f4:46:32:
                    e6:21:7a:53:fe:d5:3c:28:20:a0:d1:53:ce:a7:b7:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D3:92:CD:8A:59:B0:E6:35:10:4F:D3:7A:CE:19:46:69:CE:DC:4A
            X509v3 Authority Key Identifier:
                keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:92:3a:ef:a8:1d:a7:8f:b1:eb:1f:f8:16:bb:60:4f:c2:
         be:ca:23:c2:af:ce:95:d4:24:eb:27:46:50:d5:cc:f9:19:30:
         50:43:5d:07:44:ae:ed:c6:80:96:eb:86:58:79:9a:de:99:70:
         8a:89:fd:35:ab:e6:e8:2f:a8:ac:c8:08:10:db:51:13:9c:55:
         25:14:e7:bb:a0:88:b7:da:82:f0:aa:06:e9:ed:a5:57:26:2e:
         af:96:ee:0b:32:6f:f9:0f:fa:1b:b1:ef:0c:5c:7c:57:5d:06:
         06:fa:cd:4b:91:8c:c9:07:c5:40:77:55:8d:0a:7b:9b:41:d8:
         9c:63:33:31:95:2a:f4:68:06:a2:52:e3:2a:96:51:67:b2:aa:
         2e:f9:02:42:c5:02:b9:56:c8:90:f1:a1:5b:66:a9:6b:13:bf:
         82:c7:b0:03:aa:54:c4:64:f1:fb:6b:58:6c:13:dd:50:c0:7f:
         57:7b:e4:d2:cc:3e:eb:13:a4:f7:e9:3b:61:3b:13:88:bd:d8:
         34:bd:dd:c2:d2:4a:a7:db:23:cc:10:06:ac:44:48:ed:4f:55:
         62:ce:f5:92:0b:dc:87:41:b6:2c:0e:00:16:7e:0e:96:09:3d:
         9d:8d:eb:26:cf:b3:b3:92:10:7f:6e:07:d9:b0:78:d9:f6:f4:
         30:bf:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:14 2026 by rpki-client