Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File:                     pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier:          FE1eTTTAmN+sP0hI7l4kS+VOw/qmt5xlMHKJIio2jJg=
Subject key identifier:   EE:C3:26:CB:A3:EC:A3:A3:6D:64:C4:47:4A:22:98:4C:99:83:94:E9
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer:       /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial:       019FABD0D7173B105A5152B5BFBA1941B3F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number:          19D1
Signing time:             Wed 29 Jul 2026 03:00:18 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:18 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:18 +0000
Files and hashes:         1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
                          2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
                          3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: 9z1NQCEb0l33pi0/z/Lfkr2v7JisabnL1Tcl/lHTbCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d0:d7:17:3b:10:5a:51:52:b5:bf:ba:19:41:b3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
        Validity
            Not Before: Jul 29 03:00:18 2026 GMT
            Not After : Jul 30 03:00:18 2026 GMT
        Subject: CN=eec326cba3eca3a36d64c4474a22984c998394e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:a8:20:10:b1:9d:e9:1d:55:3d:17:d2:08:
                    d9:95:db:27:ed:42:27:44:e8:c7:9a:20:7f:84:3c:
                    dd:a1:8c:ce:4e:63:03:12:ae:15:55:6a:47:54:69:
                    8d:8d:d7:77:90:a4:fd:5c:88:da:6d:b0:db:57:01:
                    e9:9e:8d:04:f0:e0:3e:1c:e3:41:19:8f:c7:99:66:
                    63:62:1c:c6:ba:ea:b0:0e:94:8d:b7:70:11:a1:35:
                    b5:cd:42:f3:1d:77:a8:b1:3d:37:02:39:f5:82:ba:
                    2d:3d:42:93:3f:70:95:1b:9f:a1:26:19:b0:f1:3a:
                    27:4d:52:63:f6:15:91:df:99:6c:f6:b9:f7:6f:66:
                    41:07:c0:40:11:be:2d:46:e2:02:d4:64:66:ad:a6:
                    7e:37:43:21:e3:66:08:6d:92:3e:d4:8e:6b:78:87:
                    81:2d:6d:b2:c4:00:6b:64:94:2e:a9:34:ab:58:7d:
                    34:ec:8d:b6:e9:b2:0b:8d:2d:33:77:7d:d5:63:da:
                    08:1d:c5:2e:97:69:b3:78:8e:72:1e:13:f4:cf:86:
                    53:f6:0a:97:39:68:02:72:8c:a8:f7:bc:d7:63:81:
                    04:c5:8b:73:73:9d:d2:12:77:fc:38:51:9c:c9:ff:
                    9c:6e:fd:77:cd:68:80:ea:8b:36:61:99:56:f6:ca:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C3:26:CB:A3:EC:A3:A3:6D:64:C4:47:4A:22:98:4C:99:83:94:E9
            X509v3 Authority Key Identifier:
                keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:87:59:de:9b:f8:f8:74:7e:90:21:03:39:4e:52:b9:44:22:
         44:35:19:1d:23:ea:aa:b5:40:57:52:bf:08:2f:f5:21:83:be:
         44:5e:47:41:26:98:89:b5:12:24:9d:d7:f7:6c:34:95:f0:2f:
         17:39:70:af:0d:eb:ae:29:3f:0d:71:d6:12:e5:2b:55:49:e6:
         ee:71:59:48:a1:b2:8a:ec:4c:6b:5c:68:ad:35:60:a7:d7:c2:
         4e:97:26:f5:82:e1:cb:4f:80:54:a4:85:96:97:50:61:dd:1a:
         13:84:c3:3f:c5:ce:73:ca:fe:92:f2:1c:04:68:09:33:5e:77:
         a5:65:b0:4c:b3:8e:e0:0a:57:88:79:e7:4b:90:8b:5a:4a:6e:
         3e:25:8f:db:f8:e3:fc:62:98:98:11:9a:11:2e:b7:14:62:ec:
         9e:33:43:df:bc:7a:f7:dd:e7:84:5b:1e:30:53:b4:0f:b7:8e:
         61:e0:a1:de:85:44:9f:f1:59:f0:6a:84:7d:e9:69:8e:5a:85:
         0c:e7:69:d7:41:83:20:be:ae:04:58:02:82:5d:e4:3d:8c:4a:
         cf:1e:17:9c:28:1d:f3:c2:a2:fa:17:4e:23:1c:b0:c9:7e:79:
         b3:eb:14:b7:92:c5:14:4a:f7:a3:0b:9f:48:d2:3c:7a:9a:34:
         a6:d7:39:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:49 2026 by rpki-client