Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          1cc2Sc7E7xvTtr436S4A7GSf1cvywed5R9iHDK8WCqc=
Subject key identifier:   58:DF:D7:6B:62:40:2A:CD:4E:03:A2:26:E2:BC:1F:6B:35:A2:0F:2E
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       019F84C373585CB8EB6D8F70E5A5EAF89EAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          147F
Signing time:             Tue 21 Jul 2026 13:00:29 +0000
Manifest this update:     Tue 21 Jul 2026 13:00:29 +0000
Manifest next update:     Wed 22 Jul 2026 13:00:29 +0000
Files and hashes:         1: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (hash: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM=)
                          2: 3En9ZxdA_9Y7YbhdHSy_ozRVcts.roa (hash: PrZc7gBh863UgF6RDKYSJvpsQyp10e+OlGmMtcslKPQ=)
                          3: E1V1b19ox-LvuRijY9UoK0y3Irs.roa (hash: xEI2Rqw0cuhBI9GdkvhH+W/MRGZrUkysKcXYuHoCxrU=)
                          4: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: 1e6WHHEBu3epcABOV1OagZIZl3d/5EeYIFtlqmzgs74=)
                          5: cIdg71qg6R6Cf1UwQuGnxjPwBGI.roa (hash: jMe0CR6Aea2kIdpRXkGxQhJEmosKzZ2QbxS6+Je/390=)
                          6: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (hash: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c3:73:58:5c:b8:eb:6d:8f:70:e5:a5:ea:f8:9e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Jul 21 13:00:29 2026 GMT
            Not After : Jul 22 13:00:29 2026 GMT
        Subject: CN=58dfd76b62402acd4e03a226e2bc1f6b35a20f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:75:86:93:0d:b0:3e:cc:5a:df:0e:27:6d:
                    0b:75:2c:17:36:07:ac:33:64:78:fb:48:5a:87:1c:
                    c4:c3:32:06:a0:39:26:90:cb:de:8b:cc:81:24:01:
                    f6:a7:8f:c3:de:cc:30:d7:bf:4e:b4:12:91:a3:98:
                    f1:43:39:2e:b4:58:c7:c7:f1:82:a7:24:3d:3a:51:
                    15:61:2c:60:32:71:0b:6e:7d:95:39:25:07:54:ba:
                    64:77:f4:f0:db:e6:34:e5:be:5f:1a:60:bf:8b:97:
                    20:a1:13:7a:e7:04:11:3e:07:ba:b2:a6:79:d0:1c:
                    b3:cd:a4:b4:83:c6:51:f4:01:a0:40:b6:ec:37:a6:
                    a6:87:53:0e:00:95:bf:66:ca:18:fe:9d:42:07:86:
                    36:bd:19:e3:27:2d:e4:35:6c:29:ca:2b:b1:18:ef:
                    22:e9:6d:a7:2d:2a:63:e8:e0:f8:97:28:80:02:c4:
                    33:e1:aa:39:0e:99:78:d8:6b:1d:4a:42:6b:ab:72:
                    97:40:71:48:d8:0b:11:03:8e:2e:45:a0:9c:aa:e9:
                    0f:0f:8c:c9:88:8a:ba:25:1b:83:5c:cb:11:02:b9:
                    5d:15:05:48:26:de:0e:21:ff:60:ec:cf:d0:1f:a4:
                    8c:c1:8f:93:6e:1d:80:ad:f4:fd:91:77:9d:66:a1:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DF:D7:6B:62:40:2A:CD:4E:03:A2:26:E2:BC:1F:6B:35:A2:0F:2E
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:91:86:73:09:1a:3f:3f:92:8f:df:79:f8:0b:92:bf:97:
         b4:c5:5e:ba:31:27:2c:a8:54:4a:dc:54:4b:31:37:8b:20:ce:
         43:dc:60:15:91:cb:54:00:e0:74:6e:b0:84:68:5d:1d:dd:0a:
         00:70:fb:94:35:73:7c:c7:f9:be:9a:2a:94:19:ce:e2:bb:19:
         08:4d:39:da:28:d0:ae:50:2f:05:08:d4:f8:ea:dc:8d:ca:bd:
         a1:f9:54:e7:80:15:5b:1a:4a:e4:14:4e:b4:b8:e2:bd:aa:11:
         72:86:59:f1:64:ee:6d:d9:1f:63:d2:ab:f3:36:88:80:e3:e2:
         2d:1e:ac:ad:f7:51:bf:dd:97:64:2e:64:00:bb:f7:2a:94:6d:
         51:f9:bd:e3:00:17:03:00:a7:4b:ad:05:ff:79:74:4f:a4:0c:
         fa:c8:9d:67:43:2a:5a:be:62:3e:e8:90:92:d5:40:2b:7e:f2:
         88:c8:86:a0:07:8c:b7:71:8e:09:63:31:d7:30:f7:1f:b8:8a:
         df:12:1f:bf:25:1a:82:ac:89:02:10:23:81:a2:de:30:e9:3c:
         e7:2a:c3:9d:fd:b0:90:f7:3e:dc:a8:5b:9d:2f:7a:95:a7:a5:
         57:1a:44:e9:2e:40:df:13:1c:2e:0f:cd:bb:a9:49:cf:82:c4:
         0d:7d:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:54 2026 by rpki-client