Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
File:                     pPC-25eOGSjR6XDKLtlpNxGP_2g.mft (raw, json)
Hash identifier:          mD++0ayjulRDMlAL3Jh9qZ5LSOt3XFFMgMIUI/SEQWo=
Subject key identifier:   69:12:7C:98:BE:82:54:80:E6:21:BD:5E:E0:6C:82:9A:95:F9:AF:83
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Certificate issuer:       /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial:       019CADC7DE8C72D9B7C78C418AC03DB22FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
Manifest number:          11C9
Signing time:             Mon 02 Mar 2026 09:01:22 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:22 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:22 +0000
Files and hashes:         1: i0Opx7elnQLrytJFk1gVJFatVmw.roa (hash: NjWTI7Ls1hzUuifszjZ9jtLVnxuLMN8Y2bX/MbcavFE=)
                          2: pPC-25eOGSjR6XDKLtlpNxGP_2g.crl (hash: 10N09SCCfnCU+zQYN/hrSO+7AE5TyzxLI1xC+0HS+AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:de:8c:72:d9:b7:c7:8c:41:8a:c0:3d:b2:2f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
        Validity
            Not Before: Mar  2 09:01:22 2026 GMT
            Not After : Mar  3 09:01:22 2026 GMT
        Subject: CN=69127c98be825480e621bd5ee06c829a95f9af83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:3f:24:24:6f:90:53:e7:53:81:bb:28:38:
                    85:af:d6:9d:62:60:6e:0c:15:ee:b2:31:7d:9c:27:
                    e3:13:62:d6:bc:3e:5d:da:97:4b:95:60:31:a2:e7:
                    84:eb:ef:37:e1:68:05:bc:91:fe:a1:6e:88:d6:c1:
                    c0:71:22:d9:7b:cf:4b:9d:79:29:51:91:13:fc:dc:
                    f7:6e:37:0f:a0:11:16:97:f0:fd:fe:78:36:6a:5a:
                    2c:76:d7:fe:6e:02:48:2e:42:39:15:8f:50:f0:6b:
                    4c:25:02:9a:c9:fc:3d:84:b0:a0:83:25:bb:3f:52:
                    6a:fd:b9:60:bc:7b:3b:1b:23:cd:88:59:ac:2c:c6:
                    b6:d9:c2:58:4f:ab:6c:fd:70:43:b6:a4:ab:c1:fc:
                    4f:2f:82:17:88:a5:bd:88:67:d9:80:89:af:39:2f:
                    9f:91:bb:7d:1d:9e:08:af:80:39:8d:00:98:fc:68:
                    f4:47:83:85:16:5a:3b:4b:ca:ce:d5:f3:7f:90:4d:
                    88:20:7f:1e:b2:e5:d9:b4:de:1f:59:54:22:6e:60:
                    e0:c2:36:a5:8f:e9:04:dd:e1:29:0b:c1:ad:30:25:
                    d2:a4:07:fd:25:a6:98:ce:58:5e:da:cd:a8:26:e3:
                    b7:3b:2e:8c:7a:7f:00:64:b2:fc:43:81:81:29:4c:
                    3f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:12:7C:98:BE:82:54:80:E6:21:BD:5E:E0:6C:82:9A:95:F9:AF:83
            X509v3 Authority Key Identifier:
                keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2a:49:d9:f4:8d:66:47:92:77:5f:57:3a:b7:d7:2f:5a:8d:
         d4:94:8e:6f:cf:76:18:a5:a7:94:df:73:04:8c:89:ff:04:63:
         6d:05:0a:f2:4e:c9:0a:35:ae:46:b1:16:62:7a:b2:3e:6c:23:
         22:87:08:43:e8:a2:6b:98:b9:14:b1:65:5c:87:ad:46:5a:ca:
         95:6b:aa:b6:37:2c:22:5b:14:02:0e:c6:4c:36:cf:74:49:03:
         b2:69:8f:ef:6d:d5:35:c6:fe:2a:27:3a:fb:7c:4c:65:fe:a4:
         70:89:d0:a1:f7:6c:4e:14:6c:fc:60:67:e5:79:85:d9:2b:f2:
         8d:ad:9c:a7:f5:ac:22:e4:9b:71:72:53:1c:95:86:ff:a4:c4:
         f9:7c:e2:c7:5a:08:41:b9:fe:46:ba:ed:ea:e3:f8:59:bc:5d:
         c8:a5:67:0e:9d:d9:45:50:e0:58:32:c2:b6:fd:5e:9d:96:df:
         66:84:4e:a8:c2:59:13:fe:b2:23:6e:6f:22:42:cb:eb:03:af:
         cc:72:ae:60:4d:bc:06:73:51:9a:1e:96:f4:9b:f8:66:eb:f0:
         fd:d6:96:49:19:1b:00:7a:25:a5:9d:3e:73:d1:b2:2b:0f:83:
         47:d5:93:b6:fa:51:1c:eb:28:5c:54:46:56:30:5e:26:45:91:
         6f:dc:13:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:59:30 2026 by rpki-client