Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File:                     pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier:          1E+5LLITjInqaJh/6yvd4IQj0oDt3jGor2Up/jVqdwg=
Subject key identifier:   1C:03:D5:55:AB:77:33:72:41:8A:21:41:F5:78:58:CD:ED:BD:DA:28
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer:       /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial:       019FAA19E8DACC4D0ECD7D4683D85B959366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number:          19D7
Signing time:             Tue 28 Jul 2026 19:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:52 +0000
Files and hashes:         1: IwmQjZUfdYPhFC1XFVEaDl2crNc.roa (hash: GjZxnW1gzHRN+UqmaVQ0ZwFiCbXVNJT18u7noxRI/WE=)
                          2: gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa (hash: A/ZwZg8++NTunxUO1oyToOusbEjGDF79YcXv8xOqsQM=)
                          3: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: i/4FVmA6CDVmAN0KHtNVNxJ3HoEFPNBDknHp2SKAxNQ=)
                          4: qhrFDF2N9P-DSl7QdTShxOTMpGA.roa (hash: Su+QNGIdR5cFHBOaO84honpjK8HUibgIUYb7+1xR83U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:e8:da:cc:4d:0e:cd:7d:46:83:d8:5b:95:93:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
        Validity
            Not Before: Jul 28 19:00:52 2026 GMT
            Not After : Jul 29 19:00:52 2026 GMT
        Subject: CN=1c03d555ab773372418a2141f57858cdedbdda28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:07:91:96:d2:e3:34:78:13:2a:6d:31:d6:93:
                    a3:6b:12:6a:61:46:47:9b:57:df:c8:bb:1b:1d:d5:
                    c4:68:ab:15:b1:04:53:05:19:04:13:25:d6:3c:79:
                    19:1e:84:5a:ed:f9:78:e9:20:ab:19:07:02:02:00:
                    0d:a3:c0:cd:ca:24:77:cf:f8:7c:49:68:d0:5b:0e:
                    00:b5:ed:ad:2f:ff:28:fc:97:86:33:a8:6f:ab:e2:
                    b6:1d:68:41:fa:07:23:20:81:4a:82:f9:b2:8d:83:
                    2e:df:41:31:d0:fa:e8:65:db:b9:dc:a3:f5:c2:ba:
                    b8:b5:85:8e:77:90:da:2b:79:f9:78:b8:f3:7c:5d:
                    b9:8f:97:72:84:74:b3:f3:9d:b7:20:98:87:43:2a:
                    59:2c:bc:a7:c9:c7:c5:92:be:2f:08:70:59:26:da:
                    a8:23:56:0b:af:cf:d2:69:e3:de:45:1f:c7:5b:4e:
                    66:c2:34:1b:0a:2d:65:e8:88:e9:e7:53:41:1c:3a:
                    32:4f:cc:8d:a1:7e:c4:b4:7e:12:6c:3c:0f:c6:0a:
                    c5:31:8b:ae:3c:88:ed:66:12:f8:0a:c7:2f:e6:3c:
                    b7:1f:87:90:a3:e3:09:53:90:92:a9:da:b3:60:e7:
                    c6:1f:e4:d5:a1:be:07:a5:c3:e4:97:56:81:4f:d9:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:03:D5:55:AB:77:33:72:41:8A:21:41:F5:78:58:CD:ED:BD:DA:28
            X509v3 Authority Key Identifier:
                keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:18:6a:f1:4f:25:85:9c:01:a4:5c:8b:d5:db:a5:a3:6a:f8:
         b4:96:d5:84:f7:c6:3b:f7:08:97:e3:f0:a0:e2:11:3c:82:b6:
         7f:84:ad:29:08:cb:e0:b4:29:54:83:7a:be:2c:e5:88:ac:54:
         ee:8f:29:0d:03:f0:22:e8:30:24:2a:7e:6c:1f:8d:6d:d8:e0:
         76:3b:af:48:0c:b2:1e:a2:a9:d3:32:d1:c4:30:5a:fb:1b:3f:
         e0:f1:94:b3:fb:c3:74:e6:c1:8a:68:b3:bc:44:48:29:db:1a:
         ab:4c:36:cd:3b:6d:69:0e:8a:8c:c9:88:8d:a3:dc:32:95:08:
         04:90:49:96:43:15:44:9f:fd:28:62:ef:ce:2b:83:53:b3:e6:
         fe:6b:97:16:21:f1:74:65:34:c3:bd:29:7e:aa:d1:9f:56:a1:
         91:48:0b:0e:43:bc:e6:ab:f9:99:22:60:de:ad:98:41:b9:2b:
         3f:93:0e:d3:bd:23:32:d5:02:52:6c:10:d9:b3:30:dd:81:db:
         fe:87:3b:67:01:8b:3b:40:fd:d5:78:cc:c7:78:a8:1f:e2:26:
         88:19:43:cf:1e:7c:25:f0:7c:55:98:6c:f5:e8:2e:d1:91:02:
         25:c1:3a:40:cc:1f:62:19:c6:ec:01:ee:67:91:c3:63:1b:3b:
         51:ff:92:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGejazE0OzX1Gg9hblZNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MzM3MjVjZDVkZDkxY2YxOTBhYjNhOTk1MjZlODk4MzU3
ODU2ZWYwHhcNMjYwNzI4MTkwMDUyWhcNMjYwNzI5MTkwMDUyWjAzMTEwLwYDVQQD
EygxYzAzZDU1NWFiNzczMzcyNDE4YTIxNDFmNTc4NThjZGVkYmRkYTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyweRltLjNHgTKm0x1pOjaxJqYUZH
m1ffyLsbHdXEaKsVsQRTBRkEEyXWPHkZHoRa7fl46SCrGQcCAgANo8DNyiR3z/h8
SWjQWw4Ate2tL/8o/JeGM6hvq+K2HWhB+gcjIIFKgvmyjYMu30Ex0ProZdu53KP1
wrq4tYWOd5DaK3n5eLjzfF25j5dyhHSz8523IJiHQypZLLynycfFkr4vCHBZJtqo
I1YLr8/SaePeRR/HW05mwjQbCi1l6Ijp51NBHDoyT8yNoX7EtH4SbDwPxgrFMYuu
PIjtZhL4Cscv5jy3H4eQo+MJU5CSqdqzYOfGH+TVob4HpcPkl1aBT9kl8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwD1VWrdzNyQYohQfV4WM3tvdooMB8GA1UdIwQY
MBaAFKYzclzV3ZHPGQqzqZUm6Jg1eFbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAt
YzBiODEzYjRlYzdlLzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAtYzBiODEzYjRlYzdl
LzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRhq8U8l
hZwBpFyL1dulo2r4tJbVhPfGO/cIl+PwoOIRPIK2f4StKQjL4LQpVIN6vizliKxU
7o8pDQPwIugwJCp+bB+NbdjgdjuvSAyyHqKp0zLRxDBa+xs/4PGUs/vDdObBimiz
vERIKdsaq0w2zTttaQ6KjMmIjaPcMpUIBJBJlkMVRJ/9KGLvziuDU7Pm/muXFiHx
dGU0w70pfqrRn1ahkUgLDkO85qv5mSJg3q2YQbkrP5MO070jMtUCUmwQ2bMw3YHb
/oc7ZwGLO0D91XjMx3ioH+ImiBlDzx58JfB8VZhs9egu0ZECJcE6QMwfYhnG7AHu
Z5HDYxs7Uf+Sjg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:25 2026 by rpki-client