Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File:                     pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier:          mVN6WAmoQieT+8IdP2W04VaWrjdTAlYNs2j6ce4szV0=
Subject key identifier:   76:B8:71:A8:25:5B:DF:01:72:DB:1E:B1:87:7E:AD:26:1D:A9:60:43
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer:       /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial:       019F71AAA75E16EC319ECD5C9B1C42C82772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number:          0F15
Signing time:             Fri 17 Jul 2026 20:00:36 +0000
Manifest this update:     Fri 17 Jul 2026 20:00:36 +0000
Manifest next update:     Sat 18 Jul 2026 20:00:36 +0000
Files and hashes:         1: VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa (hash: ZcSJ73xAFGVAh8eRMHYLBDppD5u63RXHyLpMLnO53qI=)
                          2: mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa (hash: jyMMr46dns8Qs3JvGsMvWCbFmVoKBoUCnfmLlBoBHdM=)
                          3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: VBacpGbzZSNe6HymvpMglacNKRfvuoWhEvVYDilrD98=)
                          4: vmahc-gH9xY8uloECYneObmRUwo.roa (hash: 6npTr2kUzSthDDmcUqv6TyudZTdNiJRtH1eH8fs3DyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:71:aa:a7:5e:16:ec:31:9e:cd:5c:9b:1c:42:c8:27:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
        Validity
            Not Before: Jul 17 20:00:36 2026 GMT
            Not After : Jul 18 20:00:36 2026 GMT
        Subject: CN=76b871a8255bdf0172db1eb1877ead261da96043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:aa:ab:3e:84:90:ad:31:81:11:40:a6:57:
                    89:26:bc:7d:31:61:1b:61:c7:a7:9e:82:5a:a1:8a:
                    47:2d:c0:f4:3a:8c:e8:22:f4:97:c4:ae:5f:f8:ff:
                    6a:8a:64:22:e0:56:52:3f:23:73:64:35:74:68:c8:
                    ef:a8:ba:52:6b:4f:cd:5c:e1:fe:03:0c:6c:be:0c:
                    f4:f6:76:01:4e:3f:13:75:ff:86:80:5a:65:1c:c3:
                    0b:91:ec:d7:b8:d8:e5:55:d9:b5:b0:d3:22:0f:12:
                    21:65:d2:bb:bb:16:3f:37:21:a2:c6:15:55:70:9e:
                    04:aa:b8:1f:3f:2a:1b:b9:a0:d5:a5:50:ff:b5:1d:
                    dc:15:35:d5:6c:12:10:28:70:f6:17:fe:29:a3:47:
                    e9:0d:ae:54:da:e9:82:ee:72:5f:05:52:f3:e5:25:
                    9c:02:72:f2:2d:8d:6f:16:d4:05:51:c7:32:3b:f7:
                    ca:2a:1b:31:18:c5:7d:89:39:0b:b7:fa:51:9a:44:
                    e3:21:45:86:3d:d8:10:81:a4:87:96:57:5f:24:a0:
                    13:2f:48:fa:dd:57:2d:a7:d0:cf:2b:02:19:9c:71:
                    b5:ba:97:1a:0d:64:da:76:9d:18:9c:53:0f:c7:78:
                    27:12:9f:56:6c:f8:ca:69:7e:4c:b3:4b:00:3a:6c:
                    07:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B8:71:A8:25:5B:DF:01:72:DB:1E:B1:87:7E:AD:26:1D:A9:60:43
            X509v3 Authority Key Identifier:
                keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2d:d4:83:86:14:30:86:70:33:f4:26:96:e0:d4:fd:ca:6d:
         13:03:ea:cf:fc:52:72:0d:bd:86:38:5c:5b:5c:c5:0e:cf:fe:
         09:1a:dc:3b:a1:13:17:e7:c3:f2:69:3f:31:56:17:fa:63:fe:
         0c:93:53:d3:2d:fb:89:cd:c6:85:7b:7f:96:2f:85:1c:19:1d:
         a2:d2:bc:78:9c:d5:48:e2:d3:d7:73:89:6b:17:50:ae:e6:5c:
         4d:f9:e8:b1:0f:92:3c:f0:2f:79:93:51:95:b5:c8:5c:99:c7:
         ef:c7:da:ec:f3:a6:59:1a:e2:65:96:24:6e:3b:d8:60:0a:02:
         98:c0:79:2f:d4:e7:08:8f:8f:ee:97:53:33:e9:96:2a:71:cc:
         c2:d5:bb:9c:c0:b1:c0:e4:be:89:4d:04:c7:4c:2d:88:b4:ee:
         ac:d2:a1:38:09:db:27:59:92:db:31:31:78:b5:12:d6:c1:75:
         94:48:26:46:88:f1:7f:e1:c0:00:22:49:fb:63:4e:20:83:4a:
         64:00:f9:e1:d6:e7:75:43:35:06:bc:88:98:40:4e:77:51:42:
         35:19:a8:e8:b8:bc:6c:d5:9d:81:c8:92:42:ae:64:99:1e:6c:
         b0:32:68:73:01:f6:6f:d0:cc:c3:fb:35:3b:15:97:6f:02:23:
         f0:a3:86:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:59:20 2026 by rpki-client