Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File:                     P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier:          bTKth5QeVhPF5q0VTZdMcgRVkSB8COWnFYzWA/u/Eh0=
Subject key identifier:   45:4B:24:DE:5A:81:54:FF:07:61:AA:F2:B9:7F:0A:40:22:A6:BB:CA
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer:       /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial:       019F84FAA574D3E1A3E1BC886DE9C32FFD7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number:          05B1
Signing time:             Tue 21 Jul 2026 14:00:46 +0000
Manifest this update:     Tue 21 Jul 2026 14:00:46 +0000
Manifest next update:     Wed 22 Jul 2026 14:00:46 +0000
Files and hashes:         1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
                          2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
                          3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: d0Lcv0f0Hqek5tV4vfoognpXgmMZONW+36imcsPoU4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:fa:a5:74:d3:e1:a3:e1:bc:88:6d:e9:c3:2f:fd:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
        Validity
            Not Before: Jul 21 14:00:46 2026 GMT
            Not After : Jul 22 14:00:46 2026 GMT
        Subject: CN=454b24de5a8154ff0761aaf2b97f0a4022a6bbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:c5:98:e1:0d:0c:86:9d:a0:ea:68:49:d3:
                    50:c7:65:09:55:35:f9:3c:82:46:d7:f5:ec:8b:f4:
                    5a:98:9d:d4:9f:b2:b3:4a:27:21:44:69:00:b7:0d:
                    55:ab:f7:0f:c0:56:f7:82:92:ca:38:25:55:47:5f:
                    ce:88:13:75:c7:3d:c5:04:01:83:a1:a0:fe:15:3f:
                    1d:c0:e5:4a:61:7d:a9:14:11:a7:26:4f:4c:47:aa:
                    86:a8:dd:fc:00:00:91:a9:8d:64:58:10:3b:41:44:
                    57:0b:f4:0d:80:bc:66:0f:14:d8:e4:22:ae:b1:88:
                    eb:4c:12:7d:72:b0:bc:15:fd:60:c3:63:80:80:ba:
                    4b:52:94:53:7b:bb:fe:42:b1:b9:17:e2:5a:f1:84:
                    5c:d4:de:b6:81:c6:20:43:4a:8e:c0:4f:a2:34:d1:
                    e3:c9:28:07:dd:6d:47:51:42:12:b9:cc:75:8d:76:
                    ba:f0:e6:b5:9c:40:d3:5d:e2:f6:a4:ee:78:53:da:
                    ca:16:71:8a:07:ef:e3:60:70:7f:fa:f5:f7:7f:1f:
                    c9:cb:5b:34:a9:37:6e:9a:18:17:e6:20:9e:47:a8:
                    95:e7:c1:c4:3e:5c:a0:f4:5d:e0:62:0e:d6:6a:f2:
                    08:56:53:3f:57:5e:4c:2d:74:74:16:fa:c8:66:92:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4B:24:DE:5A:81:54:FF:07:61:AA:F2:B9:7F:0A:40:22:A6:BB:CA
            X509v3 Authority Key Identifier:
                keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:46:9a:4c:a4:45:6c:40:4e:c2:a1:9e:16:7d:61:44:54:e3:
         fa:c8:0b:36:4f:f9:64:2f:15:e1:3f:3c:06:85:85:36:e0:97:
         24:72:94:e4:7c:2d:0b:e9:c0:18:d5:e7:8f:8d:51:ee:f8:e6:
         6b:37:ca:de:75:18:42:22:6c:d0:05:df:50:1d:65:d4:35:73:
         93:7a:2f:12:11:81:9c:61:db:57:d0:80:9a:58:bf:d6:e3:42:
         bc:21:9c:05:c5:c0:c9:c0:1a:82:59:10:be:b2:e7:9a:7f:6d:
         28:b7:68:30:f0:47:53:41:b0:38:93:9b:18:bc:4c:d9:fa:e3:
         26:98:66:dd:33:d4:00:fa:48:b8:f4:28:32:f9:58:92:9c:8c:
         ee:c8:6f:43:db:f9:27:38:8b:04:7f:a6:d8:ee:1a:da:5e:15:
         a4:97:2e:f9:49:f4:e7:b0:76:9e:6c:5c:2d:a1:35:76:93:8d:
         39:5b:06:2b:e6:12:a8:db:52:f9:2a:f2:28:35:17:7f:09:30:
         7d:d8:a1:b4:10:10:85:8f:1b:0f:68:89:c2:a6:19:8d:e9:8b:
         5d:a3:db:17:4a:9e:b1:e8:a1:03:3b:7f:2c:fc:13:df:5c:f0:
         94:74:91:83:80:7c:73:b0:e2:e5:e9:74:26:dd:52:f0:1c:15:
         cb:ec:85:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:46:36 2026 by rpki-client