Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File:                     pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier:          CWOYkxtlNj45Z7RiaZuOJFUaYq52ingrVn5xrS7pHCM=
Subject key identifier:   AE:1C:E2:9A:07:6F:BE:55:12:11:55:B8:0E:F2:AF:F2:EF:7B:5E:FA
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer:       /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial:       019FA11643D68CA4C5E28185A0DCE5A78646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number:          19EE
Signing time:             Mon 27 Jul 2026 01:00:18 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:18 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:18 +0000
Files and hashes:         1: 1ZJlssHe1cqgH6uhHrvZ5q1B_44.roa (hash: a7NHnkscG6OzvwBm8NXSANt6871rXlNEhgTw4CrzMQc=)
                          2: MH0ePkGiqUNJj92Th9uz7ESBLuY.roa (hash: zEMC++4x++17MQ2QaYX26EoR6rGR9XCEMskuWanLEDo=)
                          3: TL6-YQoL6bM9YzZkFooupL9SKZc.roa (hash: fDKbKxnCCglM7bDeEH0JDX6y2HKlL0aR2oegXj3HyjY=)
                          4: ZSy9I3udyb1w0usAvKavWUhYUuM.roa (hash: NjrlIizcsmC5vnXJgYJk87Yv2k+U89uwtXh718Ex2Oo=)
                          5: lilRXnQbhAs_T-urB33KZ2t0KZQ.roa (hash: U6hwfDfpC6+pNA9h6WSEbMtCWXO/blanxBm4f8SHiVE=)
                          6: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: ROZdqPUZhB4nHnZQ2jZ0KuuI04I94IzLYKLr30fVQw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:43:d6:8c:a4:c5:e2:81:85:a0:dc:e5:a7:86:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
        Validity
            Not Before: Jul 27 01:00:18 2026 GMT
            Not After : Jul 28 01:00:18 2026 GMT
        Subject: CN=ae1ce29a076fbe55121155b80ef2aff2ef7b5efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:88:51:76:73:a1:3b:33:13:03:af:94:9c:
                    b7:5f:17:70:da:1f:83:b5:12:34:98:b0:f2:9f:18:
                    db:12:99:17:ea:bc:97:75:48:b8:5f:22:b7:a1:68:
                    54:05:01:58:75:db:5a:76:db:19:31:78:16:b8:9f:
                    c0:fd:41:57:2f:ac:12:8b:6c:0d:01:0e:bb:81:f5:
                    7f:76:de:80:25:9b:b1:f2:09:87:94:d5:e4:e7:fb:
                    03:3b:92:bf:41:e6:4e:c7:5f:5f:c3:a8:3d:64:02:
                    03:ac:56:f0:d1:2d:9b:5d:4d:8e:e3:69:52:55:b9:
                    bc:bf:39:77:e2:3d:e4:8b:42:7f:f9:9d:b4:f5:be:
                    29:69:48:1d:a6:d3:34:d2:5f:a5:d8:d4:f3:dc:55:
                    1d:6e:6c:a3:39:9f:40:d3:fb:e6:71:71:c1:86:76:
                    e8:9d:64:ce:e9:83:7b:31:ae:e9:6d:04:14:03:93:
                    02:9b:2a:50:e6:41:6e:67:b7:ba:51:a7:f5:3a:f9:
                    22:7a:70:b4:9e:ea:61:08:a0:ca:d6:bd:90:bc:9e:
                    e3:d6:c4:73:94:fd:77:0d:db:97:6a:4c:3a:8d:f8:
                    f4:10:7a:90:c3:95:0a:58:9e:28:1a:dd:d3:a2:96:
                    b0:14:c1:24:b4:c4:ad:6b:8f:af:ca:0d:cb:fd:25:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1C:E2:9A:07:6F:BE:55:12:11:55:B8:0E:F2:AF:F2:EF:7B:5E:FA
            X509v3 Authority Key Identifier:
                keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bc:82:41:b4:1f:10:be:31:11:0a:8c:ad:77:22:ff:88:ce:
         8d:9a:42:f4:c7:e7:06:5a:71:85:be:e0:90:5a:3d:a1:61:5f:
         f5:0a:63:23:fc:89:a0:ce:13:21:42:ad:18:6a:46:49:a9:b2:
         d5:59:26:b3:2f:6c:eb:79:23:6d:44:7c:f2:94:03:39:c0:2f:
         49:64:1e:f5:67:3b:6e:ab:f3:3e:10:a6:6a:77:8f:24:94:07:
         24:cc:cc:8d:b1:9f:a6:9e:bd:93:92:22:53:82:3c:95:f3:0b:
         86:75:ff:cc:5c:60:dc:06:a0:b3:cb:3e:31:1c:2f:00:12:a0:
         6b:96:76:40:9b:80:0a:9e:24:4e:56:3a:c3:ce:5b:61:92:41:
         a8:a6:5e:83:df:b6:49:53:26:7d:ed:c4:ed:dc:dc:16:e9:55:
         21:8e:dc:8f:53:3f:a4:c3:16:ea:fe:93:82:8e:ed:cb:dc:22:
         29:20:09:a9:e6:4d:3e:ce:c1:5d:72:39:f0:d7:ba:b6:20:1b:
         f9:94:cd:fc:61:92:ea:18:46:cd:ed:f8:bc:b5:75:55:17:bf:
         9b:56:44:b4:cb:b9:11:cb:9d:8d:6e:2b:7c:2a:f8:53:d5:31:
         ff:d3:1e:d5:95:bd:26:74:25:74:5d:7a:9d:a9:bb:55:e6:30:
         66:12:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:05 2026 by rpki-client