Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File:                     Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier:          80sPA1AEwGAyJtN8fKqapy753QrLkfILSLAO1QGqXnY=
Subject key identifier:   13:B3:03:C8:42:DE:FB:9C:92:D4:59:CF:0E:F6:CA:CB:20:A5:03:47
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer:       /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial:       01A0D570BE125952CA01DEEE44A16C7A3A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number:          1A00
Signing time:             Thu 24 Sep 2026 22:02:10 +0000
Manifest this update:     Thu 24 Sep 2026 22:02:10 +0000
Manifest next update:     Fri 25 Sep 2026 22:02:10 +0000
Files and hashes:         1: DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa (hash: JPyYKilJIGfMtwMBvPqVfl8PNsFxqskM2FqefiGjuEU=)
                          2: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: EqS/dh3YJc+bJLuoIiYtG1VEpjw0YY06N+8O5FCEQy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 22:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:be:12:59:52:ca:01:de:ee:44:a1:6c:7a:3a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
        Validity
            Not Before: Sep 24 22:02:10 2026 GMT
            Not After : Sep 25 22:02:10 2026 GMT
        Subject: CN=13b303c842defb9c92d459cf0ef6cacb20a50347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b9:60:9b:a1:b2:c5:33:b9:64:91:cc:47:22:
                    c9:2b:92:8d:66:38:12:a0:1c:04:c9:8f:bb:47:57:
                    62:81:b7:79:90:4e:76:70:dd:bb:11:10:91:c6:a2:
                    b2:86:d8:f1:1c:5a:89:0d:af:74:06:58:1f:cf:58:
                    db:9a:f1:da:38:56:df:b1:10:e6:61:7f:0d:11:19:
                    d0:3c:35:98:02:f2:54:85:41:c0:43:4d:33:10:da:
                    c5:de:c9:c3:35:dc:f3:be:27:2a:c1:88:ff:cd:f3:
                    04:99:dc:d9:23:f5:8f:c2:f3:f7:22:a5:c7:3a:3a:
                    79:65:1c:34:a0:ea:45:95:ba:7b:f7:f3:af:5e:d9:
                    b2:37:75:fd:03:e9:19:51:81:8d:b4:c4:c9:a8:fd:
                    ad:65:4e:91:02:04:ec:6e:fa:28:92:c2:8b:dd:7a:
                    5d:81:a9:33:a6:d1:b0:96:2b:ab:35:99:7d:ee:d7:
                    c1:94:52:24:eb:53:55:7e:69:24:bf:06:77:86:09:
                    6e:0b:df:03:28:77:f7:4c:93:b0:19:5c:25:76:8b:
                    09:d4:a8:a5:6a:62:8e:80:b5:44:ba:f5:2c:17:51:
                    38:f3:80:a4:dc:bb:32:e7:96:2c:e0:41:73:67:b1:
                    53:ca:4a:c0:a7:1a:db:98:3b:bc:43:fc:d1:3c:3a:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B3:03:C8:42:DE:FB:9C:92:D4:59:CF:0E:F6:CA:CB:20:A5:03:47
            X509v3 Authority Key Identifier:
                keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:64:3c:8d:53:57:b1:80:61:b6:81:63:59:c7:0c:b5:af:0b:
         16:f4:8c:d4:0a:e2:1b:db:9f:c3:c7:52:d1:47:c5:86:cf:94:
         da:42:61:06:8f:86:a4:7b:74:7c:f0:bc:57:9e:e3:fa:27:af:
         4a:53:75:54:ba:d9:ef:47:ea:49:18:de:0e:ad:e6:75:fb:46:
         26:50:6c:10:c1:4f:a9:67:d8:c6:f1:7a:b3:4d:9a:41:dc:34:
         b2:dd:9f:4b:17:66:ff:26:7c:b3:be:0f:89:5f:de:45:1b:89:
         de:96:08:53:d8:83:29:89:42:7b:86:bc:06:19:e9:28:e0:96:
         d7:54:be:f7:e3:e7:96:97:09:d6:68:9e:d6:1a:cb:d2:95:fd:
         2a:5e:d7:a5:38:1b:a4:ea:19:65:d4:90:d8:c9:9c:f2:56:99:
         9e:54:00:7c:94:1e:0e:81:77:6f:5f:49:34:34:9b:24:a3:17:
         c4:4b:a9:b1:2a:63:c1:53:6c:48:f5:f8:29:dd:29:d1:be:1d:
         37:f0:0b:68:1c:b7:dd:72:8e:b1:40:a8:c6:73:04:7e:ae:c4:
         e4:06:67:98:32:ad:b0:9c:ac:02:dc:1e:23:01:1f:d5:c6:eb:
         8c:31:63:a7:af:43:ca:52:57:70:eb:03:03:41:b0:79:79:c6:
         cb:8c:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:27 2026 by rpki-client