Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File:                     P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier:          Ewjj8qgFEap9XSer1q5oUWbtMWg39U6bHTbgqTgQG8Y=
Subject key identifier:   AE:C4:00:15:9A:4D:6B:08:E3:57:64:1E:B1:D9:72:C2:2C:1B:2A:B5
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer:       /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial:       019FA33C59E182B916E74D511FC48B88BE4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number:          19B7
Signing time:             Mon 27 Jul 2026 11:01:09 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:09 +0000
Manifest next update:     Tue 28 Jul 2026 11:01:09 +0000
Files and hashes:         1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: 7nTkd9XBJ9sUBiv4n/IUwsUMnAhTexSTL18UARfTmjI=)
                          2: fH_gcKdAIP3uBlIddsjG_0qsj3E.roa (hash: L4lQAURP1ERgbM6Iiwl8JhlSrJdP31F20qdbJNDofes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:59:e1:82:b9:16:e7:4d:51:1f:c4:8b:88:be:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
        Validity
            Not Before: Jul 27 11:01:09 2026 GMT
            Not After : Jul 28 11:01:09 2026 GMT
        Subject: CN=aec400159a4d6b08e357641eb1d972c22c1b2ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:4d:0b:2c:0c:d5:a7:42:cb:27:05:42:b8:
                    53:55:07:e5:87:87:1f:67:ca:8e:68:d5:a1:9a:06:
                    9d:f5:73:a3:29:32:52:cc:2d:9b:ef:6c:17:40:08:
                    23:1a:98:15:ab:25:28:18:9d:52:2b:a6:0f:b3:84:
                    90:1f:80:3d:ee:9f:82:49:e6:68:0f:ef:fd:f7:1f:
                    7a:43:6f:b1:55:00:c9:c0:49:08:d3:c8:0e:e5:df:
                    10:eb:bb:ff:65:dd:0d:1a:a5:19:4f:12:26:3a:b5:
                    74:4a:7f:6b:a3:d0:b0:d8:1d:90:35:22:01:53:c2:
                    7a:48:b5:e5:59:b3:49:3e:ea:98:1d:ba:4e:74:16:
                    e4:e9:5d:7c:44:2a:c2:12:04:fb:11:15:84:54:83:
                    c3:8d:b6:ca:d4:17:45:2b:1c:fb:1d:7a:d6:29:22:
                    95:5a:9e:09:39:96:0d:2f:60:7a:5d:32:fc:d7:77:
                    45:dd:88:6f:bb:0b:21:69:6a:18:a3:f1:3a:29:2f:
                    f6:88:21:24:ce:60:82:8a:2b:fa:96:17:6c:8c:f0:
                    3a:fb:9c:32:f7:63:cb:75:1a:e6:34:c2:18:66:bb:
                    28:73:a4:db:89:ad:61:a3:f1:dc:ec:f9:f7:fb:ea:
                    65:2d:08:23:b0:82:b9:c5:f2:55:77:c4:e6:87:ea:
                    e5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C4:00:15:9A:4D:6B:08:E3:57:64:1E:B1:D9:72:C2:2C:1B:2A:B5
            X509v3 Authority Key Identifier:
                keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:5b:e0:09:18:4a:bf:41:7b:97:6d:3d:b9:b1:e5:25:11:
         7a:b3:a2:b8:c0:fc:2b:b3:b3:73:27:83:8e:e9:83:b3:2b:83:
         f5:8c:66:6e:de:ec:a6:fc:c4:b3:6e:14:b4:80:cb:a9:85:26:
         f5:a3:02:a1:51:f4:11:f9:4d:ce:1c:12:ff:8c:d4:38:7d:da:
         1a:9b:48:2e:ca:d3:57:c5:d4:2b:3c:07:ad:e1:b4:74:ed:1e:
         00:07:70:16:47:90:87:60:cf:e7:2e:1a:6f:38:48:73:2b:73:
         04:09:8b:9b:37:e7:36:a5:86:f5:3b:0a:25:33:2c:fc:88:ef:
         87:5a:ec:d5:bc:a3:d5:bc:0d:76:57:cd:0f:8b:ae:45:aa:7b:
         0e:04:cf:e5:76:37:75:5c:6d:37:19:c3:cf:b3:06:b6:77:67:
         e4:81:7c:90:59:b6:76:c9:d5:8a:31:6b:01:de:8e:b3:f1:dc:
         84:0d:9c:6d:6f:c5:49:12:46:54:92:4c:2e:de:16:de:63:5a:
         0a:08:55:a2:55:16:c9:f9:fb:22:29:2c:e5:1c:7b:5e:6a:3e:
         3a:35:b6:bf:82:79:ed:d0:50:eb:28:2b:e1:e4:a9:df:75:f9:
         9f:5b:36:5c:9b:08:f4:3c:3a:eb:67:7c:bf:9a:0a:c1:4e:ff:
         60:6b:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:19:33 2026 by rpki-client