Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
File:                     pdSlpdFMijuMuU0ctGwNbiocSEc.mft (raw, json)
Hash identifier:          1k1PufmdrP++FVJ6wW5QbBt3/c7iUyXgQeahOV9Hh0I=
Subject key identifier:   C7:56:B9:96:E5:C4:A1:F8:99:63:28:9A:E7:57:54:92:82:12:99:0A
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Certificate issuer:       /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial:       019FAAF523244CA7205BA08401EC48C04273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
Manifest number:          19DB
Signing time:             Tue 28 Jul 2026 23:00:19 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:19 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:19 +0000
Files and hashes:         1: 9R0cNh7tpRGDeQddrrwgSyExnk4.roa (hash: PqbwlQKDPSasGMUXgw1wOQWlaHSoiKJ6p6YuOnnchI8=)
                          2: Q9Nt9gX8DHi90LT4tMlOZ0m6IJo.roa (hash: UYO/NtK9AfbvXNvm3O/IQCzfg04aFD89bh7YW2P92Vk=)
                          3: pdSlpdFMijuMuU0ctGwNbiocSEc.crl (hash: gmUabjWgP82I5wVEqsbwP+EweLe8Wp/bbyGNHcWr6SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:23:24:4c:a7:20:5b:a0:84:01:ec:48:c0:42:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
        Validity
            Not Before: Jul 28 23:00:19 2026 GMT
            Not After : Jul 29 23:00:19 2026 GMT
        Subject: CN=c756b996e5c4a1f89963289ae75754928212990a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:0d:bf:68:ee:37:1e:95:25:3b:02:6e:7f:
                    7f:a4:ad:06:d0:4f:7e:3a:e2:b9:4e:37:d9:a1:e1:
                    99:3a:27:cb:e8:4e:67:7f:2b:db:ce:07:4b:e7:9a:
                    b4:e9:6a:98:54:7b:6d:89:32:06:83:9e:de:74:02:
                    22:50:a4:d3:41:11:d2:f4:7b:29:aa:3d:52:75:67:
                    99:ab:a6:88:70:aa:52:7a:19:cb:4f:47:bb:b9:84:
                    17:a3:1d:c6:e7:97:10:18:ad:ec:ad:d8:a8:ef:c4:
                    a5:75:8b:b4:38:7b:57:65:5b:ab:e3:36:e1:cf:ca:
                    89:aa:c6:47:0e:e3:60:d6:7f:78:3f:57:00:8e:3b:
                    f9:f4:02:0e:18:53:08:4d:f4:13:3f:93:fc:b1:63:
                    32:4d:1f:dc:e8:04:a1:d2:eb:d2:1a:8e:02:7b:7d:
                    5e:e7:4e:26:68:72:5d:6a:2e:6e:74:a1:b7:4c:3a:
                    b8:00:3c:90:cf:e8:f7:14:b1:16:53:5a:c5:4e:2c:
                    23:b0:00:16:23:06:d9:88:95:e2:00:4b:ff:c4:c8:
                    a1:b8:80:56:4c:89:65:61:ed:af:d2:7c:67:f2:d6:
                    ca:4f:7b:73:5f:6a:81:29:c2:c5:ac:fe:57:2d:cc:
                    b3:de:d7:ae:4d:b2:f9:85:96:f4:28:ae:79:88:f1:
                    b1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:B9:96:E5:C4:A1:F8:99:63:28:9A:E7:57:54:92:82:12:99:0A
            X509v3 Authority Key Identifier:
                keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:17:21:59:47:64:6d:45:ba:f6:5f:96:9d:f6:ee:b2:79:e8:
         d9:b1:75:01:b1:59:4f:37:14:50:b3:25:ec:2f:c7:9f:b8:c3:
         71:0b:5c:50:d8:46:e7:f5:f0:02:01:2c:01:10:1f:f0:50:f3:
         e1:fe:e8:03:67:f8:a1:0a:39:14:7e:99:72:b1:50:ce:89:d1:
         4f:48:75:45:a7:72:72:09:f8:56:0f:be:cc:06:3a:af:1c:25:
         9b:33:4c:dc:86:39:49:6b:f9:ff:ac:bf:f8:51:1a:79:49:bc:
         36:60:64:d8:cc:46:73:70:ac:cc:13:6b:d2:66:87:11:81:c7:
         75:9c:67:ae:72:0d:67:1c:32:76:08:7d:b0:ec:d2:72:40:b8:
         fb:a3:6c:15:7e:cb:bf:65:d3:65:e4:0a:9b:aa:c7:a1:a6:66:
         35:36:18:c3:ff:aa:e7:98:17:9b:93:be:4c:b8:a4:68:bd:56:
         89:f9:c2:3d:86:e0:af:5d:8c:8d:b6:27:15:73:d5:45:8d:c7:
         95:67:72:02:70:12:14:bf:08:7f:04:6e:d5:88:d2:6b:ab:dd:
         16:cb:2d:d6:db:7e:1a:69:54:17:0e:19:a8:2e:c8:2b:17:10:
         94:9b:e6:50:6f:de:ca:ae:20:6d:fc:1c:87:15:1e:03:d8:0d:
         c8:9a:b1:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9SMkTKcgW6CEAexIwEJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDRhNWE1ZDE0YzhhM2I4Y2I5NGQxY2I0NmMwZDZlMmEx
YzQ4NDcwHhcNMjYwNzI4MjMwMDE5WhcNMjYwNzI5MjMwMDE5WjAzMTEwLwYDVQQD
EyhjNzU2Yjk5NmU1YzRhMWY4OTk2MzI4OWFlNzU3NTQ5MjgyMTI5OTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo34Nv2juNx6VJTsCbn9/pK0G0E9+
OuK5TjfZoeGZOifL6E5nfyvbzgdL55q06WqYVHttiTIGg57edAIiUKTTQRHS9Hsp
qj1SdWeZq6aIcKpSehnLT0e7uYQXox3G55cQGK3srdio78SldYu0OHtXZVur4zbh
z8qJqsZHDuNg1n94P1cAjjv59AIOGFMITfQTP5P8sWMyTR/c6ASh0uvSGo4Ce31e
504maHJdai5udKG3TDq4ADyQz+j3FLEWU1rFTiwjsAAWIwbZiJXiAEv/xMihuIBW
TIllYe2v0nxn8tbKT3tzX2qBKcLFrP5XLcyz3teuTbL5hZb0KK55iPGxgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdWuZblxKH4mWMomudXVJKCEpkKMB8GA1UdIwQY
MBaAFKXUpaXRTIo7jLlNHLRsDW4qHEhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTIt
MjJjMDhkY2JmNTcyLzEvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTItMjJjMDhkY2JmNTcy
LzEvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhchWUdk
bUW69l+Wnfbusnno2bF1AbFZTzcUULMl7C/Hn7jDcQtcUNhG5/XwAgEsARAf8FDz
4f7oA2f4oQo5FH6ZcrFQzonRT0h1Radycgn4Vg++zAY6rxwlmzNM3IY5SWv5/6y/
+FEaeUm8NmBk2MxGc3CszBNr0maHEYHHdZxnrnINZxwydgh9sOzSckC4+6NsFX7L
v2XTZeQKm6rHoaZmNTYYw/+q55gXm5O+TLikaL1WifnCPYbgr12MjbYnFXPVRY3H
lWdyAnASFL8IfwRu1YjSa6vdFsst1tt+GmlUFw4ZqC7IKxcQlJvmUG/eyq4gbfwc
hxUeA9gNyJqxfQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:11 2026 by rpki-client