Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File:                     P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier:          LDZhZfXXRHUdDKR008qO6xbL/shsrQrRfX6+pREhbUM=
Subject key identifier:   AD:09:FF:02:E0:51:71:46:B2:A4:5E:D8:18:5B:53:4E:FD:92:B8:21
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer:       /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial:       019FAB9AA566EA5D2C9B2211300DA919E14F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number:          15EB
Signing time:             Wed 29 Jul 2026 02:01:06 +0000
Manifest this update:     Wed 29 Jul 2026 02:01:06 +0000
Manifest next update:     Thu 30 Jul 2026 02:01:06 +0000
Files and hashes:         1: 3W2kBgMIvhcXUhUq2YtKk1xN_AU.roa (hash: CAsZ3C2TdySi/ZWvlReBuoW/T5KbXTvFwU9q/tZJ4e0=)
                          2: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: cU1OMnX/CSD/BCpALo+MCMlszeHdt3zVn7JvpC9so58=)
                          3: RbC01VwFxiZgBTALS-uMjRZzAhY.roa (hash: q9hSu3/IMM4HWr9vjCMGx9EywT+vVqNbYQnoN0MBA20=)
                          4: _FgKHiwZ54ey0goItnrxJYHRboo.roa (hash: sg5CvvnTfG2oD+toERRbafBqjfE3xSjzejxaJO1LxU8=)
                          5: gSlaPw018DNPuMxCsveqA8oQUsY.roa (hash: 0+yjCTwe2aAK7n4AkPNcQnffX1JuMjM0FZBSULYc1vQ=)
                          6: z2A2T1nq3TaPFhF11ccXgPg0K_M.roa (hash: FIAAHyPL1J0jzI8B5mvusigwqLIBDgZSTDh7qjXNzTM=)
                          7: zXZDjCl_wpe20vJI7Svnpaah_LM.roa (hash: Uex3ZzOS035SmbmtX2k6Jvjfz1dsWhh2Uu53J7YkHiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:a5:66:ea:5d:2c:9b:22:11:30:0d:a9:19:e1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
        Validity
            Not Before: Jul 29 02:01:06 2026 GMT
            Not After : Jul 30 02:01:06 2026 GMT
        Subject: CN=ad09ff02e0517146b2a45ed8185b534efd92b821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:5c:a5:54:0e:e5:4c:17:7a:3e:00:26:7a:
                    1a:2e:ab:c0:66:15:3c:40:70:ec:ba:e2:f9:9a:41:
                    0d:60:d9:1f:93:84:0b:e8:d5:ec:6c:bb:68:c1:36:
                    ce:69:0f:ab:56:18:10:55:59:88:db:d9:e4:fd:49:
                    f7:a0:14:3e:c1:46:3e:39:1a:63:47:c3:ff:71:d8:
                    2d:41:ce:15:c6:3e:d0:33:70:e9:35:03:27:65:b4:
                    dd:cf:88:44:6b:6f:8e:f7:6a:c1:32:66:11:9e:c4:
                    12:c9:f6:f6:83:1c:db:d8:00:57:c9:e9:fd:7b:b6:
                    80:79:f6:2a:02:d4:93:d4:be:a0:3e:7b:17:56:44:
                    25:0e:61:33:7f:a0:d5:66:fc:b1:d6:cc:76:97:e1:
                    74:f1:51:bb:56:53:53:e9:3d:d8:79:5c:e1:2c:52:
                    77:09:10:03:cd:81:93:8d:67:78:d9:8b:8b:56:71:
                    21:49:fa:18:4c:f1:da:9b:14:1b:cd:66:58:07:18:
                    0e:f4:83:8c:bd:9d:56:e0:f3:88:f9:b9:c6:3d:4e:
                    af:8d:37:e0:5a:99:fe:74:47:b1:0b:29:62:5c:21:
                    88:c0:53:ca:38:8f:e3:93:40:23:70:a0:0a:f9:72:
                    3b:50:f6:a4:d9:e4:c8:d1:e7:e2:e9:0a:ed:19:53:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:09:FF:02:E0:51:71:46:B2:A4:5E:D8:18:5B:53:4E:FD:92:B8:21
            X509v3 Authority Key Identifier:
                keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:51:93:d5:5d:16:5d:eb:ae:b2:ac:03:30:e1:1f:dd:88:fd:
         5e:c0:43:62:fb:db:46:9d:46:61:47:fc:59:52:30:2f:dc:e9:
         75:f9:8a:a3:bf:3a:a2:f2:3d:f2:6d:ab:7a:8e:9d:04:2e:ec:
         1e:ba:e5:9b:d2:cc:d2:b2:9a:69:96:b3:77:80:33:31:49:fa:
         1e:01:27:d5:3a:86:ca:41:51:15:33:b9:7c:5b:a8:d1:83:2c:
         e4:d8:23:c0:05:33:52:e0:ab:e7:04:43:4a:9a:53:4a:9e:d8:
         66:24:81:3c:cc:42:b1:7b:d3:f6:60:46:5a:24:36:6b:70:fb:
         cd:b9:ad:61:08:89:2b:ef:37:a3:aa:45:c0:65:22:b1:d7:ef:
         c4:41:c9:ce:8e:2e:79:7c:dd:22:69:35:f6:01:77:86:74:11:
         9c:72:c3:64:16:25:2d:5c:e9:a2:58:fb:44:eb:d2:c9:ff:c3:
         48:5d:4c:c5:bf:03:e7:3a:07:42:47:61:81:44:47:3a:7a:70:
         0e:15:46:e8:e9:dd:38:f4:1c:d5:2e:12:82:fe:d9:19:06:e4:
         8f:0b:9b:fe:9e:8e:a0:0d:88:f5:e9:d6:80:63:25:16:8d:ec:
         92:1a:e5:04:e6:b0:72:02:19:44:e4:b8:1a:cf:01:6b:b2:cf:
         e5:2a:67:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:43 2026 by rpki-client