Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File:                     Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier:          1K8N1TtBFF6K9Kj5NvvL2FCpJpvQpt72vC7QzjRL/dI=
Subject key identifier:   30:24:02:E7:82:A7:34:10:1D:59:1A:03:91:22:FC:BA:3D:67:0F:5B
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer:       /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial:       019F867B40C13253E22CD55D63F465168902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number:          1656
Signing time:             Tue 21 Jul 2026 21:00:52 +0000
Manifest this update:     Tue 21 Jul 2026 21:00:52 +0000
Manifest next update:     Wed 22 Jul 2026 21:00:52 +0000
Files and hashes:         1: N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa (hash: 3TxHIvizHgvT9zapL1jqZMumyRmsqmWLMCRlhTI/E5A=)
                          2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: DHk2qnXlFxftf796nWrwpfjJ5L+JNB2nWtlDsVR217w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:7b:40:c1:32:53:e2:2c:d5:5d:63:f4:65:16:89:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
        Validity
            Not Before: Jul 21 21:00:52 2026 GMT
            Not After : Jul 22 21:00:52 2026 GMT
        Subject: CN=302402e782a734101d591a039122fcba3d670f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cf:be:cd:04:a1:5d:87:32:75:65:28:69:52:
                    b6:9b:4e:e7:15:1d:b0:f3:3f:28:81:df:13:0d:00:
                    70:97:e8:de:e5:b1:2e:d6:8a:7f:77:9d:69:d4:28:
                    65:3c:cb:66:3d:ea:79:48:ba:30:e7:10:e8:1b:c6:
                    e9:1e:7f:1d:36:f2:91:cf:47:67:78:3e:df:6f:fb:
                    9a:1d:70:16:59:37:c2:46:34:6d:f2:c4:cb:56:f2:
                    fe:6b:0a:5e:93:e5:63:d8:70:4a:fa:0e:69:70:16:
                    3e:0a:40:09:e5:5a:b5:f1:5e:5d:b3:98:23:5f:c8:
                    61:6a:18:53:56:f0:08:88:bd:17:40:48:a7:7d:95:
                    2e:b1:17:dd:c0:4c:bb:b8:4a:e0:a1:ed:da:4b:41:
                    4b:67:c1:58:97:52:71:57:20:e6:11:c4:f2:73:f4:
                    8f:80:14:f4:bc:6e:9f:27:64:6f:f0:72:5f:64:c8:
                    23:fb:ef:b3:b4:bf:df:84:f4:c9:d3:03:21:bd:a9:
                    1f:f7:72:68:5e:a6:e1:97:60:c3:d6:34:9d:01:4d:
                    b7:0c:6c:e4:f4:dd:5f:eb:42:52:18:cb:9d:75:5f:
                    e0:95:ab:f5:85:fb:30:af:96:50:e4:e5:f5:18:1c:
                    ea:31:ff:03:0b:f9:ab:d2:08:73:2b:70:b1:ab:55:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:24:02:E7:82:A7:34:10:1D:59:1A:03:91:22:FC:BA:3D:67:0F:5B
            X509v3 Authority Key Identifier:
                keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:96:52:6d:a5:cd:c7:a5:90:07:90:6d:c2:8d:8b:e1:71:7c:
         c6:83:35:1a:29:99:50:b3:b8:d0:8a:19:56:9a:dc:06:32:e0:
         a4:eb:48:87:ab:45:0c:6d:76:b6:ec:b8:c7:7a:75:48:1a:e8:
         e8:73:d3:8c:db:8c:cf:61:03:5b:02:f8:8b:66:77:be:95:bb:
         36:1e:28:4a:a4:b7:64:f6:54:ae:7c:42:9f:ef:b7:05:ba:44:
         5f:1f:4a:63:a8:65:fc:22:fe:a8:1c:e3:ad:b4:6c:7d:08:b2:
         cb:de:a6:90:74:ef:56:e1:df:83:c6:ea:1e:79:f6:12:14:10:
         5f:88:e2:00:16:c8:22:c6:72:4c:80:87:d1:ec:46:60:6f:de:
         c9:80:c5:37:18:8e:80:0c:14:64:bc:60:52:9d:21:d5:7d:19:
         6a:5d:56:dd:26:32:1c:16:31:2d:44:be:10:4c:c2:78:af:09:
         de:af:28:82:67:39:a8:09:2d:9b:7d:f3:13:69:87:d5:c5:7b:
         ef:6f:17:fb:a5:09:7d:13:9d:73:e6:aa:db:1f:0e:0c:97:2d:
         94:33:44:27:56:8d:d2:33:4e:7c:80:1c:cf:6d:43:0a:c7:1e:
         ed:fb:61:3a:ce:b5:b1:b8:5c:00:62:bc:ef:0d:77:08:6f:89:
         e5:6c:4b:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ge0DBMlPiLNVdY/RlFokCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZGVlMGFlODgzNDcwNTA4ODgwNTA0NGJlNzVjNzQwM2Ix
ZGM3ZTIwHhcNMjYwNzIxMjEwMDUyWhcNMjYwNzIyMjEwMDUyWjAzMTEwLwYDVQQD
EygzMDI0MDJlNzgyYTczNDEwMWQ1OTFhMDM5MTIyZmNiYTNkNjcwZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM++zQShXYcydWUoaVK2m07nFR2w
8z8ogd8TDQBwl+je5bEu1op/d51p1ChlPMtmPep5SLow5xDoG8bpHn8dNvKRz0dn
eD7fb/uaHXAWWTfCRjRt8sTLVvL+awpek+Vj2HBK+g5pcBY+CkAJ5Vq18V5ds5gj
X8hhahhTVvAIiL0XQEinfZUusRfdwEy7uErgoe3aS0FLZ8FYl1JxVyDmEcTyc/SP
gBT0vG6fJ2Rv8HJfZMgj+++ztL/fhPTJ0wMhvakf93JoXqbhl2DD1jSdAU23DGzk
9N1f60JSGMuddV/glav1hfswr5ZQ5OX1GBzqMf8DC/mr0ghzK3Cxq1UYjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAkAueCpzQQHVkaA5Ei/Lo9Zw9bMB8GA1UdIwQY
MBaAFD7e4K6INHBQiIBQRL51x0A7HcfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUt
NzlhYjQ4ZDgzYmFiLzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81MTRjZjQtMTI2Yi00Y2M1LWI0ZDUtNzlhYjQ4ZDgzYmFi
LzEvUHQ3Z3JvZzBjRkNJZ0ZCRXZuWEhRRHNkeC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpZSbaXN
x6WQB5Btwo2L4XF8xoM1GimZULO40IoZVprcBjLgpOtIh6tFDG12tuy4x3p1SBro
6HPTjNuMz2EDWwL4i2Z3vpW7Nh4oSqS3ZPZUrnxCn++3BbpEXx9KY6hl/CL+qBzj
rbRsfQiyy96mkHTvVuHfg8bqHnn2EhQQX4jiABbIIsZyTICH0exGYG/eyYDFNxiO
gAwUZLxgUp0h1X0Zal1W3SYyHBYxLUS+EEzCeK8J3q8ogmc5qAktm33zE2mH1cV7
728X+6UJfROdc+aq2x8ODJctlDNEJ1aN0jNOfIAcz21DCsce7fthOs61sbhcAGK8
7w13CG+J5WxLBg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:47 2026 by rpki-client