Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
File:                     pPC-25eOGSjR6XDKLtlpNxGP_2g.mft (raw, json)
Hash identifier:          K+akBCNgynAyc+0MQSDS22KYvmzaadtG8C3aBDomR2I=
Subject key identifier:   62:C2:3B:88:63:A3:9E:4B:10:CD:9F:B4:85:9A:43:78:87:98:8C:EC
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Certificate issuer:       /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial:       019D9B50A39FB73EDB86B58868ED723CAEBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
Manifest number:          1244
Signing time:             Fri 17 Apr 2026 12:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:46 +0000
Files and hashes:         1: i0Opx7elnQLrytJFk1gVJFatVmw.roa (hash: NjWTI7Ls1hzUuifszjZ9jtLVnxuLMN8Y2bX/MbcavFE=)
                          2: pPC-25eOGSjR6XDKLtlpNxGP_2g.crl (hash: B1jyvxDMtE5utFbQ6A7k1w+DjVjdUfh/xjZKQ/MumvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:a3:9f:b7:3e:db:86:b5:88:68:ed:72:3c:ae:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
        Validity
            Not Before: Apr 17 12:00:46 2026 GMT
            Not After : Apr 18 12:00:46 2026 GMT
        Subject: CN=62c23b8863a39e4b10cd9fb4859a437887988cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:74:53:20:c0:4b:14:a0:07:07:3a:65:f4:
                    0f:70:80:91:40:09:3b:07:59:aa:c3:30:36:eb:38:
                    16:e8:2c:b4:92:e0:49:00:e5:24:18:05:a7:67:aa:
                    9b:10:8d:22:9e:19:88:0d:cf:fa:23:68:22:93:e2:
                    69:a8:b8:f9:4e:16:88:91:f7:7e:cb:5d:a2:51:b3:
                    f0:22:c2:23:ed:d2:db:17:72:1e:f8:e4:23:9a:ff:
                    e5:d7:eb:1f:e8:5d:a0:77:e0:9a:4d:d5:1c:1d:78:
                    bc:0d:c0:24:a0:fd:f1:67:53:60:0e:c0:ea:b6:59:
                    06:88:02:b9:6b:2b:22:59:38:6e:54:8a:77:eb:5e:
                    fd:92:43:5b:f2:42:7b:e0:ea:a0:5f:e3:9b:50:cf:
                    7d:52:73:47:a6:88:2f:e6:56:14:27:c1:09:47:cb:
                    03:cd:6e:38:28:2d:c1:f4:e1:fa:89:31:a1:9f:07:
                    25:9f:4c:97:cf:07:94:d2:97:62:d0:23:24:19:53:
                    b4:17:b9:92:88:0c:6f:67:a8:be:0f:cc:8a:63:2e:
                    7f:14:fb:54:87:7e:65:1b:ec:a8:0e:e8:d9:8d:78:
                    fc:29:b6:9d:7e:0f:89:a8:e4:e8:21:dc:16:91:99:
                    5e:c5:72:fa:74:e9:69:ec:d9:dc:b2:a7:50:ea:c2:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C2:3B:88:63:A3:9E:4B:10:CD:9F:B4:85:9A:43:78:87:98:8C:EC
            X509v3 Authority Key Identifier:
                keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:cf:19:d2:fa:09:ce:bb:86:a6:70:21:cc:a5:a3:62:00:08:
         a2:2c:1e:16:53:f5:57:03:73:c6:d7:71:bc:ea:fe:06:91:6e:
         34:4c:2a:b4:42:6b:4b:85:50:af:79:82:3d:e7:af:8d:2f:cd:
         f4:15:a1:26:fd:e0:c5:8b:7d:36:48:29:dc:26:c3:a1:87:6d:
         9f:99:3d:bd:ff:84:02:6c:2e:93:b7:51:51:b5:a7:32:eb:b6:
         db:71:2e:0c:c3:04:c1:ad:78:bf:fe:88:a0:d6:ba:43:9d:9b:
         c5:38:eb:e9:d4:31:2c:d9:1f:e8:68:6b:0e:c4:a7:5d:c3:1a:
         1d:3b:06:20:71:f1:e5:60:a3:1e:77:36:12:c5:fb:9e:84:29:
         36:3c:7d:2e:3d:36:fc:6c:d3:46:d9:8f:76:05:1a:2d:d0:6a:
         29:66:42:77:06:d5:73:bf:ef:96:d5:64:5e:18:d2:69:ed:91:
         c0:b5:8f:2d:1a:b0:26:f2:74:70:f0:cb:1f:58:f4:cb:6c:a1:
         35:b1:fb:e1:b1:2c:1f:ff:0f:b2:19:0d:38:36:43:51:91:9a:
         ff:1b:f5:ae:9a:b1:39:a1:52:47:80:42:2f:c3:c4:f2:35:24:
         54:fe:6c:99:e1:b8:65:57:f1:e1:b6:a6:1d:ba:2d:08:f1:7f:
         57:dd:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:04:00 2026 by rpki-client