Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File:                     Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier:          taAlBSudVY4kX9D09GQR/a70vKP6dUszkS9gv/pMe8I=
Subject key identifier:   F3:1C:C7:5E:8C:91:37:B4:41:D8:68:5B:AF:F1:4F:76:BD:81:3E:D0
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer:       /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial:       01A06E39A20E9AF62C41B1B81A54A35DF580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number:          16CE
Signing time:             Fri 04 Sep 2026 21:01:05 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:05 +0000
Manifest next update:     Sat 05 Sep 2026 21:01:05 +0000
Files and hashes:         1: N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa (hash: 3TxHIvizHgvT9zapL1jqZMumyRmsqmWLMCRlhTI/E5A=)
                          2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: CxiY/wE3QpNLIoaWoK+lKNpWh7HzdE8VsQSwxeOdStM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:a2:0e:9a:f6:2c:41:b1:b8:1a:54:a3:5d:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
        Validity
            Not Before: Sep  4 21:01:05 2026 GMT
            Not After : Sep  5 21:01:05 2026 GMT
        Subject: CN=f31cc75e8c9137b441d8685baff14f76bd813ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1d:0f:e3:72:8a:d5:cc:08:64:33:93:2d:33:
                    d6:0f:2d:de:dc:c0:71:ef:36:37:0e:e1:57:14:58:
                    9d:5d:ab:f2:32:7f:d7:f8:f5:f8:d5:95:d7:2d:28:
                    c9:65:a0:2e:ac:63:ee:67:26:fb:ab:85:29:1f:09:
                    78:78:fa:41:03:9a:6b:68:e5:52:a0:aa:43:95:4f:
                    c3:ae:ae:b4:89:7e:30:24:e8:0e:bd:63:fa:ef:eb:
                    57:0e:e5:28:2b:29:d7:f4:f7:0c:0d:4c:0e:82:99:
                    5e:09:84:cd:1b:cb:a3:f8:01:25:72:a8:8d:c0:ed:
                    f6:31:4d:7a:d0:a0:9f:7e:5d:7a:44:a2:9a:8e:d6:
                    13:e0:92:9c:33:10:c8:6d:b8:fb:c7:a6:41:c6:9a:
                    20:ec:34:f0:6e:a1:cc:cb:d9:44:77:63:9b:f7:c2:
                    a9:b1:b1:41:a8:ac:44:27:63:f8:eb:ed:d0:21:95:
                    af:6b:c2:a9:99:06:fe:89:66:c8:f4:0d:a4:69:71:
                    1f:a3:30:c6:66:a4:28:2b:69:f2:8b:c7:00:f9:db:
                    79:f3:c6:c5:9d:5c:5e:c0:20:17:a7:12:18:f1:ee:
                    26:7b:7b:77:4a:f1:c2:97:7f:e3:69:c1:83:cd:6c:
                    a7:ad:20:af:2e:fd:f6:7e:a2:63:a4:92:9d:f0:b3:
                    10:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1C:C7:5E:8C:91:37:B4:41:D8:68:5B:AF:F1:4F:76:BD:81:3E:D0
            X509v3 Authority Key Identifier:
                keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:53:38:1a:be:fa:b6:ff:b0:37:4f:6a:fc:63:ad:76:2c:3a:
         e4:a4:cd:22:43:cf:bb:25:3d:82:b1:5e:12:f2:39:f2:b1:96:
         de:1e:7e:fd:c0:8c:cb:f1:92:bf:9d:15:e4:41:23:a4:f4:01:
         81:1c:de:67:72:6d:db:97:2f:df:50:4a:8a:f9:09:b4:19:76:
         6b:d1:96:8e:64:40:ab:06:5f:f3:00:47:50:35:67:f3:a2:31:
         e7:75:73:d8:d0:f8:96:f6:3b:3a:26:4d:00:d8:e2:60:06:13:
         c8:bc:cf:d5:12:05:05:90:03:00:f8:4f:fc:42:d8:c2:63:b1:
         08:47:8b:89:91:12:8d:82:63:ac:ed:be:4c:d0:0f:e9:6a:4f:
         7e:06:b2:6d:27:5b:de:d2:b3:91:1d:64:46:c3:bc:7e:a5:ff:
         8c:f6:b4:89:05:1a:ac:da:bd:bb:c7:f6:d0:f7:89:1d:9f:ff:
         6a:b2:24:a3:f0:1b:35:fe:ad:3b:4b:ab:f9:ae:aa:ac:a9:9a:
         91:0d:d5:0a:43:49:a9:0c:31:71:04:2c:e6:a7:11:69:b5:4d:
         78:08:d9:98:37:aa:19:a8:8a:19:f9:14:28:e9:ab:b9:87:4e:
         35:d8:a6:8d:db:39:02:e2:f9:d4:63:99:79:12:78:cb:5b:6b:
         84:b7:45:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:34:14 2026 by rpki-client