Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          pWgYJAWCdgChWYlUuUI0TFQAPakj+wg7f6RQ5Z/r/bM=
Subject key identifier:   55:87:E2:46:D7:7E:5A:CE:C1:42:50:D4:1D:53:31:75:C5:6D:E5:F4
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       019DB16B77BA7511C5ECE38DCC057A41762A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          138D
Signing time:             Tue 21 Apr 2026 19:01:43 +0000
Manifest this update:     Tue 21 Apr 2026 19:01:43 +0000
Manifest next update:     Wed 22 Apr 2026 19:01:43 +0000
Files and hashes:         1: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (hash: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM=)
                          2: 3En9ZxdA_9Y7YbhdHSy_ozRVcts.roa (hash: PrZc7gBh863UgF6RDKYSJvpsQyp10e+OlGmMtcslKPQ=)
                          3: E1V1b19ox-LvuRijY9UoK0y3Irs.roa (hash: xEI2Rqw0cuhBI9GdkvhH+W/MRGZrUkysKcXYuHoCxrU=)
                          4: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: qntVN7+xmEViZc2rwfUzbXWizbCynsOMAG1L9NXVkME=)
                          5: cIdg71qg6R6Cf1UwQuGnxjPwBGI.roa (hash: jMe0CR6Aea2kIdpRXkGxQhJEmosKzZ2QbxS6+Je/390=)
                          6: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (hash: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 19:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b1:6b:77:ba:75:11:c5:ec:e3:8d:cc:05:7a:41:76:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Apr 21 19:01:43 2026 GMT
            Not After : Apr 22 19:01:43 2026 GMT
        Subject: CN=5587e246d77e5acec14250d41d533175c56de5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:06:2f:ce:66:88:5f:ab:c4:47:c2:8e:d4:
                    70:90:3a:1e:d3:06:8b:1b:36:a8:a4:7d:ea:b0:56:
                    34:2d:90:b3:4a:82:45:74:dd:2f:94:18:c5:68:7f:
                    c2:30:3c:ab:cc:7d:17:7d:c6:72:b2:41:48:5d:4c:
                    2c:38:2e:f5:52:88:fd:8f:f7:e9:b8:5a:c5:4c:db:
                    45:f5:80:eb:61:3f:f2:81:d4:96:6b:a4:b7:18:8a:
                    73:45:67:74:7c:9a:e7:36:05:f9:d0:01:ce:61:f5:
                    f8:69:27:24:0c:e2:42:be:f5:95:55:cb:f0:89:45:
                    69:67:f8:62:94:28:0f:56:72:04:9d:b5:3b:af:e8:
                    39:1e:5b:5e:47:b9:af:c5:11:c2:f1:b8:a7:14:fd:
                    80:f4:60:dd:b3:58:9b:dd:79:d8:71:4e:89:87:19:
                    e8:57:aa:0a:c0:15:83:85:45:14:77:18:6b:78:a7:
                    01:15:fc:5e:66:d9:9d:e3:ca:cb:d2:af:7c:74:45:
                    37:94:ec:56:f7:0d:df:98:b4:6b:cc:c9:95:49:27:
                    e5:65:ed:85:7e:32:8a:ee:87:b0:08:84:ee:62:8d:
                    dd:ec:5c:8c:1f:15:69:10:f6:df:d0:d6:e0:a0:96:
                    bb:93:99:b1:b1:7d:de:0e:61:5f:8f:3f:cb:cd:63:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:87:E2:46:D7:7E:5A:CE:C1:42:50:D4:1D:53:31:75:C5:6D:E5:F4
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2c:fb:d2:73:84:b2:9e:5a:d3:6f:85:94:55:9a:76:46:f8:
         20:f2:e1:66:b9:ec:33:de:79:0e:b2:d8:46:10:76:e3:0d:35:
         b9:fd:de:52:83:a0:59:91:e5:b4:f0:f1:7d:1b:84:e9:6a:9e:
         3c:04:c1:cd:8e:af:36:de:90:db:2b:62:8d:4c:d2:a7:5b:6b:
         3a:65:77:1d:da:11:9d:da:89:97:c8:78:45:ee:2d:42:75:09:
         85:24:63:26:17:06:0a:54:cb:4f:1c:b7:96:5b:c7:3d:48:bf:
         7a:06:4f:4c:c7:e8:53:d8:33:81:c5:55:85:ca:e1:a7:10:48:
         cb:17:3f:e2:6b:af:aa:9c:4f:f7:83:9a:50:b0:e1:78:35:1f:
         1e:cf:4b:6c:95:26:eb:13:eb:36:cc:4d:df:0e:fe:78:e4:9b:
         dd:0c:55:f6:63:46:42:6d:fb:4a:8d:6d:b5:bf:cc:0b:78:4f:
         bb:4c:53:28:e0:80:37:4c:61:77:7e:9b:bf:b4:26:f3:a9:6b:
         84:48:35:c5:3c:f7:b8:19:a7:41:fd:43:90:44:31:b1:e5:34:
         f0:56:e1:96:e0:2c:95:9a:43:62:2d:6d:56:8e:49:42:45:95:
         60:a6:3a:b3:e6:87:5f:48:93:45:8c:1b:cc:77:13:87:b4:a3:
         8b:26:b2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:27:17 2026 by rpki-client