Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
File:                     pdjtUEgIIjS3KoK2E2ydILA27nA.mft (raw, json)
Hash identifier:          rUWQrXNGs/QbxajIgeUWGRBEXvEZpUWZbg7W/WnpkHc=
Subject key identifier:   55:FD:BA:BD:5D:54:0E:46:9E:26:91:B7:B5:37:5F:42:CF:09:80:F0
Authority key identifier: A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
Certificate issuer:       /CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Certificate serial:       019FAC76939653804EFDEE10791649917CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:19 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:19 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:19 +0000
Files and hashes:         1: pdjtUEgIIjS3KoK2E2ydILA27nA.crl (hash: AnnGn25beSk7RDfmK+NQ9quDL4L3RLkN79SgNpkYUp8=)
                          2: zgZHSMsyHtY73_v_FBr0Pr71LZs.roa (hash: j0pWXsbudMoLAPQKtP3pWE8UBPeMCQBek4SG6sjP7H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:93:96:53:80:4e:fd:ee:10:79:16:49:91:7c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
        Validity
            Not Before: Jul 29 06:01:19 2026 GMT
            Not After : Jul 30 06:01:19 2026 GMT
        Subject: CN=55fdbabd5d540e469e2691b7b5375f42cf0980f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:98:c9:df:da:63:35:ac:97:06:fc:e5:90:
                    e5:08:fe:59:97:a0:95:0b:23:2a:5f:40:92:91:1d:
                    ac:3a:a7:69:db:3c:08:1e:54:ff:fb:44:b5:cc:78:
                    f7:06:a4:da:96:e0:23:47:ff:10:2b:4d:5c:4e:1a:
                    af:df:93:83:f9:0b:11:d2:83:e8:c7:2d:ff:1d:26:
                    92:15:95:df:39:6d:89:bc:e4:2c:88:03:e3:10:a5:
                    77:e4:56:3b:95:fd:dd:2d:88:2a:86:93:a9:73:8a:
                    bb:08:3e:88:71:8a:b6:37:c7:05:a4:ec:1c:e8:ea:
                    b9:98:8d:c9:d9:8b:f3:72:3b:57:6c:c8:c9:e2:93:
                    18:05:a4:c2:00:d0:af:af:21:32:b2:32:0d:5d:d4:
                    94:d0:7e:fe:24:00:8d:9c:08:85:56:60:e6:36:4d:
                    d5:b2:24:c4:b8:8b:8a:a0:2c:f3:c7:ac:16:d9:04:
                    ce:3a:d2:7f:16:89:2f:de:08:a1:6e:8b:1f:11:43:
                    b5:f3:40:84:42:f1:f1:0f:3e:d0:f0:20:86:47:3b:
                    75:81:94:db:a2:81:bf:df:0f:5b:ec:cb:dd:f7:41:
                    bb:70:65:68:2a:9e:c9:59:f8:1b:66:c4:3c:57:ac:
                    40:f2:d9:47:02:a1:03:4e:19:99:51:79:f9:06:51:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FD:BA:BD:5D:54:0E:46:9E:26:91:B7:B5:37:5F:42:CF:09:80:F0
            X509v3 Authority Key Identifier:
                keyid:A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c4:fe:6f:ab:69:c6:b7:65:2b:96:9b:86:ff:72:a0:ee:bb:
         01:2b:20:ea:02:bd:5b:98:d5:92:ea:9b:6f:8d:16:89:f9:38:
         06:ca:84:15:28:8e:ca:eb:fb:9d:6e:6e:55:30:68:9e:d5:88:
         28:ba:a1:eb:bd:61:d9:0d:10:77:07:ba:d0:5e:ee:eb:6f:5f:
         95:48:f6:02:c0:54:ff:96:f4:e6:0c:4f:d6:19:25:a5:1c:9e:
         86:c2:93:c6:3b:34:e0:11:73:6d:09:2a:30:bd:bb:c2:68:ef:
         ea:1b:75:c5:83:a4:75:c8:c5:13:93:a6:81:8e:f5:cb:dd:ba:
         39:0b:0a:94:9e:36:c8:e4:00:9d:7b:c6:46:ac:e1:b2:f2:69:
         82:21:83:a5:50:7d:5e:6a:22:02:f2:33:51:80:d4:4f:0f:37:
         cb:7f:47:d0:c2:40:e5:e9:6d:c4:44:26:6e:57:4c:37:66:90:
         aa:55:86:b9:83:53:96:44:15:ca:25:a6:a6:f6:f9:4a:00:69:
         f3:79:27:ef:27:8b:98:2e:41:29:78:ef:1d:71:96:84:25:95:
         c1:3b:32:af:8b:35:9d:b8:f6:2f:7f:9f:42:d9:86:3f:84:f7:
         09:24:1b:89:b6:1c:95:90:b0:3d:11:07:24:18:37:e3:ef:27:
         7a:1a:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:59 2026 by rpki-client