Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
File:                     PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json)
Hash identifier:          lai1LOqIbmOijCx+IZyA2S59uvzxHcuqHEyKzpBQY54=
Subject key identifier:   7D:7E:FE:EF:6F:38:3A:A2:87:19:48:99:6A:33:5C:5E:8B:93:CF:74
Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
Certificate issuer:       /CN=3c1affe59d58621d945b897fe6b7947d562529b8
Certificate serial:       019D9A075266D7242A768A560232A5BA7A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
Manifest number:          0146
Signing time:             Fri 17 Apr 2026 06:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 06:01:03 +0000
Files and hashes:         1: AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa (hash: Vto7ZpDuL9YOcUjK4xehLrBvtIDW8BU1nnENLEOymf4=)
                          2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: c7PUy1yWiGqP/w35xDD5kccnQmUwyugt3q5fz6KVZ6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:52:66:d7:24:2a:76:8a:56:02:32:a5:ba:7a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8
        Validity
            Not Before: Apr 17 06:01:03 2026 GMT
            Not After : Apr 18 06:01:03 2026 GMT
        Subject: CN=7d7efeef6f383aa2871948996a335c5e8b93cf74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fd:c3:a6:b6:9d:bb:83:0d:9d:f4:ca:2e:e7:
                    6b:0f:7f:58:65:49:93:86:0c:d7:cf:89:c1:aa:92:
                    f5:62:db:33:bd:48:4f:23:0c:b0:46:d0:b4:7b:d8:
                    aa:bb:56:ad:7b:ea:1d:85:d6:35:0b:47:aa:c8:21:
                    61:1a:5f:e2:4e:ce:60:b7:54:6a:c1:2f:fc:d4:cc:
                    68:9c:40:b7:e9:2c:78:61:50:7c:c4:c5:f0:bb:be:
                    5e:15:d7:32:ba:69:2e:a0:82:29:62:31:c8:ef:2d:
                    d3:39:94:e7:4f:48:a4:df:06:6d:17:83:51:53:7f:
                    74:5f:54:17:45:7e:4f:17:50:ac:ed:36:5e:4c:65:
                    d4:c8:b3:41:8e:a4:7a:fc:12:74:1f:36:7b:e7:52:
                    23:07:98:0d:64:cf:09:b7:14:00:2f:86:70:d7:fe:
                    83:0e:e2:5f:a3:a6:0f:70:04:3e:8c:87:86:5e:7c:
                    69:d0:47:76:fb:d2:61:d9:6c:2a:30:ef:16:41:1e:
                    6b:ab:8c:0c:64:01:5b:f0:89:2f:4a:1b:4d:33:46:
                    e8:52:6a:bf:6f:15:e4:b4:6d:f0:5c:17:d6:e0:b8:
                    bd:77:54:8a:c2:4e:ab:2f:64:44:45:08:26:c4:f8:
                    76:0e:b4:43:b1:79:0a:ea:d3:e4:c7:ee:e0:cf:c4:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7E:FE:EF:6F:38:3A:A2:87:19:48:99:6A:33:5C:5E:8B:93:CF:74
            X509v3 Authority Key Identifier:
                keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:1e:7f:ac:2d:50:8f:22:7c:bb:ae:e6:f1:36:e5:7a:5b:c7:
         51:97:53:89:f9:f9:85:25:9f:cd:fd:f2:b8:d7:15:e3:93:3c:
         56:45:0d:8d:1f:4b:a9:ed:a5:35:a5:c1:ca:ef:35:6c:ff:5a:
         35:cf:9a:7b:fd:38:66:94:e0:dc:16:a9:46:1c:c3:d9:fa:fb:
         d7:b5:13:0b:82:9c:19:4a:7e:1e:1e:c6:a7:da:31:52:68:d6:
         f8:1a:d3:c4:50:65:f6:78:33:b3:26:09:81:9f:8f:1b:17:10:
         ab:2f:f7:9a:4e:96:6b:a5:12:43:66:cd:b0:5f:53:13:a3:dc:
         75:1f:36:5f:0f:da:12:ca:2a:32:8a:5f:50:e0:3f:d9:5c:b8:
         bf:8b:db:01:ef:66:e7:40:68:30:e4:41:b5:e0:dc:c5:8f:62:
         86:18:3f:78:e7:de:05:4b:14:33:88:4b:67:f7:b4:61:58:e1:
         cc:05:77:66:c3:a7:f8:79:4f:61:8c:32:75:34:81:1b:fe:3a:
         33:1b:13:ac:c2:98:ec:ef:16:46:3a:f7:a6:6a:19:4d:9a:83:
         ba:93:de:f9:5b:43:46:4f:f7:d7:32:bb:8f:a9:ef:79:b4:b1:
         53:c1:8d:54:82:3a:0a:64:3a:6a:d8:4e:6c:83:db:74:c4:60:
         53:93:02:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:54:30 2026 by rpki-client