Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File:                     pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier:          mu7zLQZzLfytD/JkUozDMs6M5+hVYq1/yyu2Q+tniFM=
Subject key identifier:   07:75:7A:6D:2B:4A:D3:EA:B1:75:B2:9F:7F:58:C7:72:4B:9A:61:D7
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer:       /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial:       019F97A65B727DB4BEC92B7CD4F75E52818C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number:          19D9
Signing time:             Sat 25 Jul 2026 05:01:29 +0000
Manifest this update:     Sat 25 Jul 2026 05:01:29 +0000
Manifest next update:     Sun 26 Jul 2026 05:01:29 +0000
Files and hashes:         1: TL500Z-6T-7L1kCKyJkxIIwcmCk.roa (hash: fv4oTQeIG0/EExduN0eNUVDTgf8VT1d+3jIw3CZjXgs=)
                          2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: GCn6VLS11meCmTuE7rATbfDNKFZJ+uSdftTAtmuaTJg=)
                          3: rH2xQm1yZYhZ2-CQbPVxR42hkEY.roa (hash: tRmw4GuuOtR3fTCdBAPG+ooWgyE/tLfoP6z+CynsJ88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:97:a6:5b:72:7d:b4:be:c9:2b:7c:d4:f7:5e:52:81:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
        Validity
            Not Before: Jul 25 05:01:29 2026 GMT
            Not After : Jul 26 05:01:29 2026 GMT
        Subject: CN=07757a6d2b4ad3eab175b29f7f58c7724b9a61d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f8:b5:98:50:fe:04:da:01:4d:97:02:dc:a5:
                    6f:20:6b:06:83:ba:7b:43:4b:75:44:6a:18:25:75:
                    25:19:e2:9f:c9:76:31:87:23:dc:16:b9:b7:ac:e8:
                    d2:76:90:8c:0f:57:ce:37:37:ce:55:6d:70:89:25:
                    c0:38:ef:ec:82:7e:15:65:3b:0c:2e:1b:86:34:c3:
                    11:d0:06:73:48:5b:8a:ed:2a:9d:11:2d:40:4d:40:
                    e7:32:e6:7e:c5:c2:4a:58:16:17:7b:a4:77:a6:5d:
                    ae:ae:4c:1a:53:8e:92:7b:46:8c:eb:b4:5b:ee:ba:
                    ef:7f:49:42:06:07:11:ab:fe:8d:ce:75:38:2f:be:
                    ef:81:e7:05:51:ba:e8:8c:e9:ce:d1:6e:32:08:42:
                    e4:0e:02:a8:ac:80:2b:30:65:b6:1d:8d:4b:95:4f:
                    f2:8e:d3:2d:4b:40:6d:cc:59:74:ad:50:e7:bc:6b:
                    dc:63:38:0f:43:c8:72:5a:a9:53:2d:ba:9d:89:0c:
                    fa:d7:6b:93:7d:a9:9e:2f:a9:2f:32:20:9b:16:2c:
                    99:3b:d4:ea:7d:b5:62:51:8a:46:3f:22:db:b8:a5:
                    38:bb:ee:5f:da:64:7e:bd:6c:f1:74:62:19:a7:74:
                    c0:14:9f:28:ca:9b:4e:2d:b3:be:36:94:01:c5:6a:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:75:7A:6D:2B:4A:D3:EA:B1:75:B2:9F:7F:58:C7:72:4B:9A:61:D7
            X509v3 Authority Key Identifier:
                keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:42:8a:49:1c:e2:0c:e0:ed:ac:d6:11:b4:b2:68:e7:7a:9d:
         d2:a1:e6:98:8a:f8:97:5a:7e:9f:8f:c4:74:fc:ef:d7:2f:f6:
         f1:2d:d7:07:94:0e:a2:14:3b:13:48:ca:33:7b:d5:3b:90:9a:
         1c:8e:d9:c8:66:ba:45:6a:97:9e:04:04:da:04:19:67:10:99:
         c7:b6:73:07:cd:d9:36:28:86:0d:81:7a:e9:18:42:d0:47:bd:
         d9:ff:7c:d2:46:28:68:75:fa:9c:2a:a8:6d:97:21:7e:30:08:
         e5:e7:a1:f2:63:a2:f3:9c:19:bc:d0:c7:a1:41:d9:86:ac:a6:
         34:d0:2b:cb:ff:9c:a6:57:01:b9:38:06:1e:ec:6d:86:ba:cb:
         7d:d0:4b:dd:84:a6:23:39:de:5a:2f:e9:94:7d:a7:b1:dc:51:
         19:f8:b0:41:a5:24:50:1d:55:2b:fc:59:fd:db:0e:70:92:00:
         a6:bf:f0:f5:0e:ea:fc:5b:c0:46:4f:e8:32:4d:c8:85:f1:3a:
         2c:94:58:dc:61:58:ac:95:fd:53:15:9a:92:44:3c:b9:14:cd:
         f1:ec:09:98:62:1e:77:9d:e6:b9:29:ae:6a:77:f5:fc:fc:33:
         93:85:58:38:02:4e:16:4a:00:90:17:2e:1c:24:a9:5c:4d:e0:
         1e:e7:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 08:34:00 2026 by rpki-client