Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File:                     PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier:          rN3BZmdyceO+BxgTTdZD++5bjJBMFe65qZHb7F02D8Y=
Subject key identifier:   B4:A8:40:70:84:A3:80:86:93:8C:25:14:41:A1:06:A3:98:BF:A5:D3
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer:       /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial:       019FAB2C787494698FEC0D9E174347F6E60A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number:          044D
Signing time:             Wed 29 Jul 2026 00:00:46 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:46 +0000
Files and hashes:         1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: YHf3xWYh3TQEUQ7EN+HfLBG6XbBmafpgBM04OBA2qfE=)
                          2: ZPNFN2SHGEuug7dR3f_5NaqBcYE.roa (hash: 5bnWerfmM11w3yKXSNQNnqjZF9M1e+6+t1oBrlPcPjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:78:74:94:69:8f:ec:0d:9e:17:43:47:f6:e6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
        Validity
            Not Before: Jul 29 00:00:46 2026 GMT
            Not After : Jul 30 00:00:46 2026 GMT
        Subject: CN=b4a8407084a38086938c251441a106a398bfa5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:a2:41:06:2f:b5:f8:bb:30:ae:ed:0b:0d:
                    27:0f:40:57:17:f3:db:6d:11:f6:4c:b4:c7:81:16:
                    39:6e:b6:1b:39:eb:46:43:bb:1e:bd:d9:a4:0b:da:
                    0c:d2:57:76:e0:98:5e:66:c6:47:64:aa:1e:c9:b8:
                    81:eb:00:bc:11:b6:e3:a6:3a:37:05:cc:00:93:6f:
                    25:8f:89:08:43:1a:85:a5:a0:aa:8a:19:6f:b0:37:
                    db:8e:15:58:9f:a9:74:15:a8:ed:c3:97:e1:f2:0e:
                    eb:2f:d9:a2:c2:a2:89:53:d2:1d:b6:a3:70:68:53:
                    80:75:f8:8e:2b:aa:8e:4c:ef:bd:b9:c7:36:1b:cb:
                    f7:d8:a8:56:e8:42:e3:d8:22:ef:91:b6:24:70:a5:
                    b9:bd:68:86:ee:6b:48:d0:02:97:51:9b:4c:ae:a0:
                    de:42:2f:da:4a:df:3f:66:d1:ef:02:f3:6d:10:dc:
                    b5:88:19:79:30:65:a7:e5:3b:5a:a5:f8:3e:28:34:
                    0e:fe:ca:82:4e:47:c9:b5:d0:4d:1a:be:82:3a:d8:
                    0e:29:ee:e0:d8:31:34:62:23:ca:87:7c:a5:6e:f5:
                    a4:4d:ff:f6:53:63:23:12:13:66:90:ec:23:42:00:
                    fe:96:5f:29:ce:39:12:b7:dd:79:d5:d3:d9:b6:28:
                    f8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A8:40:70:84:A3:80:86:93:8C:25:14:41:A1:06:A3:98:BF:A5:D3
            X509v3 Authority Key Identifier:
                keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:39:12:30:56:1e:5e:0e:c4:3d:54:2b:a3:e7:82:bc:4d:e1:
         27:19:30:ad:6c:3e:a5:17:0f:90:4b:0d:b9:3c:67:ea:e8:b3:
         c4:ab:e5:25:25:6e:68:3d:eb:47:76:9d:8c:15:c7:ed:41:7e:
         0c:64:38:09:54:db:64:a6:cc:85:6f:38:47:96:88:26:a0:d0:
         48:3c:ab:5e:18:66:80:b2:8e:34:2e:32:be:d7:fa:a7:c7:fe:
         eb:dc:0e:83:f6:d7:75:5f:02:92:9c:1e:35:fd:52:fe:ae:c3:
         52:ca:61:56:35:6e:87:d7:0c:65:f5:55:2f:95:d2:09:c1:fd:
         92:44:d3:da:28:75:b3:45:8f:4f:9e:c8:45:2b:18:ef:ee:e5:
         fa:c4:f8:8d:04:38:f8:34:27:1a:68:7d:04:70:02:6a:70:4d:
         cb:29:c7:3a:1e:fb:58:42:e0:c4:5c:ea:b1:76:5a:3f:12:e0:
         8b:9b:89:31:e1:b5:f3:a9:39:47:4a:82:4c:e5:00:a4:97:5c:
         5c:7d:63:49:1e:42:98:a5:c5:c8:00:e7:b6:13:19:86:3a:5e:
         f4:5c:c4:48:46:29:65:d4:62:77:94:29:33:b6:8e:f3:73:47:
         67:9d:66:9e:38:65:88:0c:79:e0:5a:9e:02:53:bf:f8:00:96:
         55:e2:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:22:23 2026 by rpki-client