Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File:                     PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier:          IVEnbBGxRkUoLspKqeeZbmzl0jrHruW1v95gsLqFAqM=
Subject key identifier:   A5:39:F5:D1:E9:3A:32:59:FB:A6:80:7C:A5:49:D1:CA:58:D8:73:C9
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer:       /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial:       019FA2CE48FE0C954BB04C68D23F258D5B6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number:          030C
Signing time:             Mon 27 Jul 2026 09:00:55 +0000
Manifest this update:     Mon 27 Jul 2026 09:00:55 +0000
Manifest next update:     Tue 28 Jul 2026 09:00:55 +0000
Files and hashes:         1: 52gTPJdQN2IyRsgf9iKgbNid4cI.roa (hash: 5lE63bjKcJ3503lnep/t29RA6BQhkuc041jpBZfJLfo=)
                          2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: G4/it2AmIWbObZiSqqS69dtg0vnQtpbH/jbSP0/amfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:48:fe:0c:95:4b:b0:4c:68:d2:3f:25:8d:5b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
        Validity
            Not Before: Jul 27 09:00:55 2026 GMT
            Not After : Jul 28 09:00:55 2026 GMT
        Subject: CN=a539f5d1e93a3259fba6807ca549d1ca58d873c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:df:71:97:83:e4:2e:31:ac:cf:45:86:27:
                    2c:cf:7a:76:5a:43:4e:9a:49:37:45:8a:fc:6a:84:
                    62:21:2d:ed:e1:de:00:04:bd:74:44:94:87:d4:9a:
                    56:37:69:c2:20:6c:12:9c:01:3e:00:49:51:af:d4:
                    e3:47:9d:79:62:a9:1d:07:18:66:54:a1:8f:6a:f1:
                    6b:db:8b:07:b5:a9:be:10:ac:75:1e:0e:b2:8c:95:
                    b8:e1:a5:f3:4c:e4:54:e8:97:13:a3:26:38:7e:89:
                    64:17:f4:c3:09:bb:b8:66:b9:93:50:bd:b0:f8:0c:
                    ed:65:59:e5:71:52:13:c2:bd:0b:04:5b:ed:b3:49:
                    83:db:51:e1:a6:c4:b6:3c:88:ed:c9:31:60:35:20:
                    46:b6:ae:a6:27:9b:2f:a2:71:3c:27:bf:cd:9d:d3:
                    67:e6:a0:aa:ba:57:64:ab:1d:d8:0d:11:3d:78:76:
                    98:08:83:2a:1f:93:6e:ad:82:22:11:af:61:29:de:
                    14:03:cd:8f:be:ea:95:c7:12:64:af:8a:48:5c:5f:
                    b8:c9:5b:f1:34:1b:c4:7c:e0:c3:2c:bc:d8:db:1a:
                    eb:a4:19:2b:f9:36:fd:35:11:29:de:0a:25:b2:62:
                    c2:ab:35:26:5a:6d:df:94:c4:ff:86:4b:2b:7c:50:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:39:F5:D1:E9:3A:32:59:FB:A6:80:7C:A5:49:D1:CA:58:D8:73:C9
            X509v3 Authority Key Identifier:
                keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:dc:75:bc:d9:2f:7b:dd:69:0b:46:93:3c:0d:11:cb:60:
         97:47:42:5a:69:2f:9b:0a:59:86:8e:d0:0c:a9:e5:57:3b:11:
         e7:0f:90:58:ae:30:f5:a1:5a:2e:fd:78:51:9c:36:db:ba:bf:
         78:69:ff:08:fd:54:d7:3b:e2:8d:c4:7d:5e:d8:46:a0:6f:85:
         b9:00:2c:e8:2c:14:e7:42:fe:7c:2d:34:e2:39:b8:c2:d0:23:
         cc:89:e1:2b:2d:15:d2:77:9f:73:1b:61:8b:45:de:92:b1:9f:
         d7:89:86:c2:7d:24:e1:19:ec:e8:3c:ad:c5:06:72:e7:1d:e0:
         f0:05:9d:c1:ec:5b:f0:ad:23:fa:3f:7c:bf:9a:fb:61:2e:f9:
         2a:e9:b7:1a:25:8e:e0:31:73:f9:8a:a5:8a:dc:7d:2c:4c:04:
         02:c6:98:db:78:ed:fc:03:a7:ad:67:23:54:65:b1:a8:ea:b5:
         af:08:06:6f:25:fa:18:be:42:1a:ee:da:7f:50:d8:a5:66:54:
         2f:84:8d:fa:fa:45:54:da:e7:9d:f7:23:df:24:ba:1a:a9:ac:
         25:15:5f:f3:9b:8a:45:c0:78:d5:a0:0c:2f:b2:b7:d5:9b:e0:
         ab:6c:81:15:89:d6:92:78:d5:eb:d3:d2:97:3e:9d:62:e7:b1:
         6e:5f:f4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:25:57 2026 by rpki-client