Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          RNu8O3j9JIGYZ57TOFIhp+O/xYs5KI90tZaytyCf0E0=
Subject key identifier:   B7:33:42:52:E6:DE:96:56:57:1B:EC:C4:02:EF:56:6D:E8:A5:81:D1
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       019FA975117A77B30F5A84D91FA7E6F87D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          1492
Signing time:             Tue 28 Jul 2026 16:00:49 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:49 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:49 +0000
Files and hashes:         1: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (hash: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM=)
                          2: 3En9ZxdA_9Y7YbhdHSy_ozRVcts.roa (hash: PrZc7gBh863UgF6RDKYSJvpsQyp10e+OlGmMtcslKPQ=)
                          3: E1V1b19ox-LvuRijY9UoK0y3Irs.roa (hash: xEI2Rqw0cuhBI9GdkvhH+W/MRGZrUkysKcXYuHoCxrU=)
                          4: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: SWXZFAUhFX+60zW0pQMIrClNfFLdedrOxQp9CmppDAA=)
                          5: cIdg71qg6R6Cf1UwQuGnxjPwBGI.roa (hash: jMe0CR6Aea2kIdpRXkGxQhJEmosKzZ2QbxS6+Je/390=)
                          6: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (hash: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:11:7a:77:b3:0f:5a:84:d9:1f:a7:e6:f8:7d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Jul 28 16:00:49 2026 GMT
            Not After : Jul 29 16:00:49 2026 GMT
        Subject: CN=b7334252e6de9656571becc402ef566de8a581d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:05:b0:56:10:93:4e:00:9b:8d:42:cb:81:
                    be:c5:24:da:55:4f:e5:fc:7e:b3:de:35:3b:7d:0b:
                    f9:72:6c:ff:7e:0d:d3:d4:8d:5e:6d:5e:54:bd:af:
                    4d:6c:c2:a3:67:8f:5c:dd:34:c9:85:68:77:c8:9b:
                    af:4b:ca:eb:e9:d1:bc:63:6d:0e:12:8c:f9:aa:d7:
                    3f:c0:01:e7:e6:9a:21:a2:a9:fa:cf:7a:fc:c4:e0:
                    7c:1f:c1:91:8b:9e:d1:d8:a5:7b:31:4d:ab:bf:e0:
                    99:75:cd:67:3e:1c:b3:f3:4a:99:6f:c7:6b:eb:21:
                    01:b2:5b:5b:be:5c:3c:12:27:30:72:4b:10:f6:25:
                    b1:ca:42:1a:31:77:12:4c:ad:55:e2:b6:e0:af:6d:
                    d3:51:f9:f8:db:d1:31:54:0f:b2:8a:16:45:f7:41:
                    c7:56:42:2a:7a:55:a1:a3:d7:f7:47:9b:00:f3:94:
                    42:84:f5:7e:41:1f:08:26:74:fc:43:56:b8:42:40:
                    26:5e:c1:ee:2a:2d:90:71:bb:dd:1b:0b:06:7f:eb:
                    b9:db:6c:4b:fb:83:3d:4e:a5:f8:8f:d7:3b:71:bb:
                    de:43:b0:90:b8:4a:ab:b8:61:b6:2d:85:0a:6c:98:
                    4e:b1:e7:4e:3d:ae:b7:a1:a5:9a:c1:bc:44:cf:0b:
                    2f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:33:42:52:E6:DE:96:56:57:1B:EC:C4:02:EF:56:6D:E8:A5:81:D1
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:37:4e:ab:c5:21:35:b1:b0:df:ee:0b:81:96:34:52:d9:39:
         a0:6f:d0:af:e6:1e:52:6f:2e:12:27:c8:e3:65:1a:54:ac:dc:
         20:40:f6:70:f1:cc:3a:18:9b:9c:d0:6a:47:6f:c4:b5:ab:0f:
         a5:6c:be:e0:e7:b2:16:8a:82:18:7d:db:f2:8a:ce:a4:04:5e:
         08:86:e6:1f:6d:f9:b7:1d:e3:7c:ab:66:73:5d:bb:c2:cd:96:
         d3:36:f4:db:5b:2a:b9:9b:ec:87:49:dc:24:8a:f3:a9:53:f7:
         fa:62:f4:ce:78:09:7e:e2:76:e1:cf:39:83:9c:22:5f:ad:eb:
         f4:ec:ef:0d:9b:30:d5:01:4b:3d:0b:1f:df:e9:5e:69:83:0a:
         90:a0:ff:45:a2:ea:f5:a0:0d:8a:55:36:e6:2a:be:77:95:be:
         b8:87:30:a1:ca:98:62:99:e4:0c:f6:da:a1:73:ad:81:67:72:
         c7:30:10:25:0a:a5:07:61:39:62:b1:e1:38:b8:fc:d3:f6:20:
         41:aa:37:1f:19:d4:db:29:77:77:1f:85:05:51:91:d5:09:c7:
         e0:ca:f6:30:bd:17:5b:ca:51:f7:87:03:50:96:f2:cc:7b:8a:
         e9:50:ba:fc:af:1d:fb:36:d4:9d:32:97:8a:91:a9:23:1b:d3:
         12:21:a3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:38:15 2026 by rpki-client