Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File:                     pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier:          K+T9xa4E+1aGfZPYD4MTgD/9dsAePnd6Am/WUSkx+Ug=
Subject key identifier:   9C:E3:36:D1:92:CD:99:E6:70:C6:3F:E2:C1:73:71:3C:10:E9:23:3C
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer:       /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial:       019FAC0810F4EC19C130D1E9AD1244F72FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number:          19E5
Signing time:             Wed 29 Jul 2026 04:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:37 +0000
Files and hashes:         1: KeBHh_EXoo6vxPcJVgCWPFy_Qck.roa (hash: Lb6JJsVM1wJrwKLdOhRrqdN+kt/BOWmpYchxNlLSv+A=)
                          2: RgbTxSuQRNXFVhZjHsG1yRfbDcY.roa (hash: QEQTGxs8uKOEp8JVm8z26NyHbZ3CIT8Ts2wlZUqrfqw=)
                          3: fc-z64p9INgXqSlpt0wgmjnDjcM.roa (hash: iAvsJsJGvYYjjk6ye/5/KN/cmvlNuk2vjqxHBnhTILY=)
                          4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: jOKXJqelRQDOu7bNvfMH03/LCYGmUFQQ7I8l3A/EMGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:10:f4:ec:19:c1:30:d1:e9:ad:12:44:f7:2f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
        Validity
            Not Before: Jul 29 04:00:37 2026 GMT
            Not After : Jul 30 04:00:37 2026 GMT
        Subject: CN=9ce336d192cd99e670c63fe2c173713c10e9233c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:a9:aa:b6:86:60:c9:5f:99:7e:5f:91:1c:
                    29:f0:d5:74:9c:23:05:41:ff:8f:a4:b8:fa:e6:fb:
                    8d:53:73:4e:fa:5c:0b:ad:50:66:98:82:48:0b:03:
                    56:cc:7d:97:74:f3:2a:e9:41:62:81:58:2f:fa:fa:
                    11:69:d1:fc:7f:3b:fd:2f:25:d6:d6:1e:f7:07:b2:
                    69:31:e2:79:02:dc:1b:69:c5:34:1c:66:c0:87:54:
                    6a:87:6f:ee:b2:68:02:f8:ac:ba:c3:59:e7:d3:46:
                    1d:39:65:4a:53:1e:8b:cf:89:ed:72:5e:97:84:fd:
                    cb:ac:db:e6:97:a7:22:37:7c:3f:ba:b6:e0:a2:cc:
                    5a:08:70:75:08:54:38:e5:43:32:d7:d1:ea:26:bd:
                    05:b1:71:60:2e:14:9b:e9:82:0e:3c:22:14:fe:14:
                    e0:fd:a9:99:d5:5b:ce:dd:2b:28:01:49:ba:f2:e9:
                    56:5e:24:09:58:bf:ce:25:37:3c:fe:9d:38:db:8f:
                    b9:71:16:2e:cc:ed:d6:76:32:af:61:01:df:8c:23:
                    b6:aa:6b:dd:ba:c7:28:35:50:8a:d5:b2:3c:36:a8:
                    31:f3:1f:99:9c:8f:dd:39:04:47:02:f6:b5:18:75:
                    d3:64:45:45:9d:e4:8d:92:99:fb:13:69:3b:45:f7:
                    e0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E3:36:D1:92:CD:99:E6:70:C6:3F:E2:C1:73:71:3C:10:E9:23:3C
            X509v3 Authority Key Identifier:
                keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:15:16:67:ff:6d:f5:ec:0f:9b:3e:97:a6:a2:48:54:7a:f5:
         ef:50:37:f5:d8:03:d2:10:3d:d5:df:9a:fd:67:09:8c:d3:92:
         2c:62:3f:34:f6:a7:c3:2e:42:2c:5d:19:cb:a6:37:49:c6:95:
         d1:1b:84:91:ae:58:76:63:10:9b:89:55:15:d6:df:e5:3e:4c:
         98:9d:6b:f6:94:7f:12:85:40:6f:fd:16:68:97:aa:f7:c0:d0:
         06:c6:aa:eb:5c:4d:0a:8f:b3:1f:b2:ed:3e:53:ab:d4:68:c9:
         29:00:4f:2f:17:89:1b:0a:ff:d1:db:52:07:96:69:d4:a2:cb:
         d0:82:56:53:53:62:7d:ca:eb:64:a4:f2:0d:e2:3f:c7:5a:46:
         74:84:d7:18:0c:5c:0e:45:e5:52:34:3c:c6:03:09:61:31:67:
         81:dc:8f:6e:e8:e9:22:80:30:7b:8f:a6:23:aa:d9:e9:6e:65:
         c0:45:99:df:aa:24:e3:68:f0:71:e8:a6:0d:cc:f6:26:63:39:
         dd:fe:f5:82:2f:f7:e8:90:de:b5:38:4d:3a:5b:a3:db:1f:aa:
         9f:2f:b0:13:db:e6:65:c0:f1:39:4b:2a:64:97:8c:5e:06:90:
         73:53:d1:85:44:7d:09:70:24:ed:1f:6f:b5:3f:96:8e:59:46:
         c7:9f:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:46:21 2026 by rpki-client