Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          WniV6KeWxPUA+aaqmDw4cAAhCRsC5jQ5nx5MiSYvmcA=
Subject key identifier:   D4:E1:8F:B4:D0:20:74:13:DF:FF:B0:71:C1:BB:3E:75:68:E0:2A:46
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       019FAB63878432E10470B9FC897D1DEC86CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          1493
Signing time:             Wed 29 Jul 2026 01:00:54 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:54 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:54 +0000
Files and hashes:         1: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (hash: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM=)
                          2: 3En9ZxdA_9Y7YbhdHSy_ozRVcts.roa (hash: PrZc7gBh863UgF6RDKYSJvpsQyp10e+OlGmMtcslKPQ=)
                          3: E1V1b19ox-LvuRijY9UoK0y3Irs.roa (hash: xEI2Rqw0cuhBI9GdkvhH+W/MRGZrUkysKcXYuHoCxrU=)
                          4: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: N/cRkgNTAqr79vEZiF6u5u3ZtdK6hS1JiAYQRSmF7Bc=)
                          5: cIdg71qg6R6Cf1UwQuGnxjPwBGI.roa (hash: jMe0CR6Aea2kIdpRXkGxQhJEmosKzZ2QbxS6+Je/390=)
                          6: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (hash: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:87:84:32:e1:04:70:b9:fc:89:7d:1d:ec:86:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Jul 29 01:00:54 2026 GMT
            Not After : Jul 30 01:00:54 2026 GMT
        Subject: CN=d4e18fb4d0207413dfffb071c1bb3e7568e02a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:4b:23:02:69:f5:3a:82:93:2c:cc:9c:b4:
                    6e:48:17:56:5d:a9:58:67:e7:ec:9b:9d:c5:96:c2:
                    0b:02:1a:12:94:88:23:d7:07:8a:9a:0f:cf:fb:f5:
                    13:f4:af:87:38:1d:35:75:ef:8c:8b:67:b9:07:01:
                    d3:61:bd:de:c5:4d:1c:c9:29:2c:cc:58:c2:34:54:
                    ca:50:d2:47:ad:6c:4e:c5:22:4f:f8:c8:a9:b2:aa:
                    4d:6e:42:9a:45:cf:62:2d:53:a8:b5:f6:bb:5f:db:
                    76:f6:03:1e:18:c7:a5:64:ae:e4:03:14:f0:8f:3f:
                    0b:a7:51:5e:8f:21:3b:be:81:24:02:47:96:ce:10:
                    cd:96:a1:10:b5:4d:fd:22:5f:f5:ec:bc:b2:4d:d6:
                    65:e1:43:a5:0f:97:40:74:47:61:2a:1b:7a:95:1a:
                    47:4b:20:0a:35:d7:ed:26:23:ae:6b:cb:40:20:a2:
                    91:a8:96:ee:55:28:4a:43:ac:28:7c:ce:c0:4f:c7:
                    e4:09:d7:90:e4:ac:c1:1f:38:b0:fb:bc:b8:2f:65:
                    65:b0:51:1e:16:01:0d:a3:50:9a:3a:cf:33:b0:9e:
                    da:d9:e5:c8:5e:4e:e9:fa:04:81:3e:06:92:e5:4f:
                    b6:27:f6:ce:30:28:07:65:f8:25:12:2b:f9:25:b9:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E1:8F:B4:D0:20:74:13:DF:FF:B0:71:C1:BB:3E:75:68:E0:2A:46
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d1:1b:26:9b:c1:5c:82:a0:47:4b:b7:02:41:07:f8:ae:1c:
         db:1c:bf:09:7d:20:d7:94:88:6b:53:11:5c:d2:dc:ac:53:0a:
         c6:27:7d:42:53:70:37:9c:92:b9:6f:5b:23:f3:23:96:66:af:
         be:96:2d:aa:0d:27:92:1d:82:c0:b9:04:a1:1e:27:6c:13:96:
         a5:fd:8a:6d:b3:3c:26:7f:8f:96:06:4a:c7:2f:64:c7:08:f6:
         72:89:3b:3c:dc:1e:4d:1a:7a:c3:fb:45:75:37:b2:9f:cd:bf:
         ae:93:17:71:e5:17:db:ab:66:02:c8:34:eb:65:f7:48:9c:14:
         99:3d:53:be:b3:43:8d:40:1f:df:b6:d3:8b:bd:f9:3c:64:70:
         7f:f0:c3:cd:35:07:f1:e6:e0:98:d3:c4:3e:41:75:45:4a:1f:
         b4:42:46:07:b8:4e:3d:22:aa:44:64:e2:8f:ab:a3:ea:b2:4c:
         44:d9:3e:0c:3b:b1:f7:19:c5:16:dd:7e:f8:fe:5d:62:d2:81:
         af:ee:9b:5d:1c:43:98:f4:93:de:4b:7a:a0:3f:fc:ef:d8:7a:
         0e:da:44:02:b6:b8:2b:9f:83:32:16:3f:a7:c8:07:10:3c:f8:
         6e:b5:db:ab:94:5f:72:ee:e2:60:0d:27:12:c5:44:a4:3e:38:
         dc:fb:91:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:40:30 2026 by rpki-client