Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
File:                     PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json)
Hash identifier:          v0tUY6YZcLa5cls7Bo41onQCUHl0ol+M9FEUaXHLAng=
Subject key identifier:   E5:63:D1:2B:1C:DC:6B:DE:43:AC:89:BF:B9:C8:AF:BC:48:CC:45:E9
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Certificate issuer:       /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial:       019D9A74C199E3FB43B24515827C4F3A3EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
Manifest number:          18D7
Signing time:             Fri 17 Apr 2026 08:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:36 +0000
Files and hashes:         1: 0M2CPdV7Xjvt7nrRqNi49Y_5Q0w.roa (hash: /s2MC65jvamRWE4E3LzZLmVB6N6rAH4buP8PZFgnBKc=)
                          2: 4bNlVON9xCdsARp_CZ5ll0ht23Q.roa (hash: r8pI01bxr501PmXiSeH2G+Xx+qveym+0Uqo3tM8jR6I=)
                          3: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: eNMLjN5Pq0/KMaW+j40cTIVZNx3m0goLDi3JR8msmMM=)
                          4: SRrECMJ3ZMD_TfSXLnYqpll22u4.roa (hash: qizHkZ1GpDS36mFIdR1OgqUp05JcTddRBFeSdEQ59Wg=)
                          5: hd00NiPZ1KbbE5ODb-CMk8sWFr4.roa (hash: ivJHfYiQfBFcxIzEkszt8mO2O17yh2Xq/VLRYE4MQxY=)
                          6: v39I0Zjco7iTKjESnYevB85gpxs.roa (hash: h5IwzouSq0u0o63m4FX0dLx1gQy0nggHUf/mhXSXzYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:c1:99:e3:fb:43:b2:45:15:82:7c:4f:3a:3e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
        Validity
            Not Before: Apr 17 08:00:36 2026 GMT
            Not After : Apr 18 08:00:36 2026 GMT
        Subject: CN=e563d12b1cdc6bde43ac89bfb9c8afbc48cc45e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:19:80:aa:d4:7a:2d:09:2a:32:ba:5b:d1:
                    14:c8:63:60:a0:3c:34:86:6f:ca:4b:bb:d4:47:6b:
                    29:a3:2a:34:b7:bd:50:50:06:b7:7f:b9:07:9e:c6:
                    7d:e4:64:c2:f4:ca:0f:a1:c3:e9:8e:26:e7:f0:72:
                    0b:98:5d:b1:23:34:0f:e4:ab:e4:5e:18:20:f3:a2:
                    0c:0b:98:da:b6:de:22:ed:6a:3d:5e:ed:42:52:0e:
                    18:bc:8e:00:d1:4e:26:dd:26:aa:8f:87:33:0e:f4:
                    87:fb:82:2c:27:3d:17:2c:c0:ad:b6:a6:ca:9d:5c:
                    57:de:d2:61:57:e8:8e:1b:05:db:d8:e1:b1:b0:b4:
                    e8:4f:e1:99:b7:43:95:ed:5a:5a:ce:8d:93:1d:bc:
                    0f:ca:3e:38:70:96:4c:0d:f2:21:4a:ef:01:8c:31:
                    40:51:93:59:b9:ca:03:07:0c:a3:1c:a9:9d:52:4f:
                    c9:d7:63:44:e5:59:d6:44:54:87:c0:1e:78:a9:63:
                    a5:33:3a:9a:a5:81:f5:aa:8c:e1:66:de:2a:ff:f4:
                    d9:46:81:6c:74:a7:bf:34:93:a7:ac:79:e9:23:31:
                    e8:4e:ad:c4:74:63:61:71:e2:05:c8:87:07:b5:40:
                    53:0b:ed:b5:b5:04:b4:92:4f:ef:f8:68:f8:d1:7c:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:63:D1:2B:1C:DC:6B:DE:43:AC:89:BF:B9:C8:AF:BC:48:CC:45:E9
            X509v3 Authority Key Identifier:
                keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ce:5b:b8:18:c4:11:3d:8b:39:8a:22:75:6b:d7:a4:a5:85:
         48:93:ed:5f:ae:29:46:fe:db:08:e1:7f:03:66:0b:d4:d9:9f:
         6a:bf:0d:45:aa:03:d5:89:9f:fd:28:90:cd:2c:83:b4:d5:01:
         17:7c:b4:31:34:d4:be:9b:be:c6:a1:78:ff:6f:db:72:4c:ee:
         5d:91:97:05:18:72:5b:0d:6e:53:10:94:4d:18:78:1f:b3:eb:
         78:ab:56:c4:a9:5f:ea:54:a1:5b:8e:6e:b4:06:75:f1:3b:f2:
         05:6d:c2:ab:58:3b:6e:7c:9c:33:97:68:a6:df:d2:3e:b5:4b:
         21:c4:1d:b0:3a:1d:03:2b:25:c2:fe:fd:4e:cd:ac:31:e8:4c:
         dc:5f:b8:23:4e:f2:95:7e:5d:29:21:1a:53:7a:f2:cd:0d:43:
         17:98:f7:a7:af:5f:51:04:48:69:ed:d8:ef:f5:5b:87:ca:98:
         87:f6:2e:c6:f1:cc:db:47:52:b5:d1:11:ce:31:ea:00:d5:c7:
         c3:f7:37:67:09:a7:e8:4a:60:2c:c7:c4:9d:8b:e7:a5:94:0e:
         42:af:e5:96:69:13:46:21:5c:4b:e3:9f:db:a2:76:a6:ec:21:
         04:4f:d4:47:57:4f:1c:9f:42:f2:dd:e4:d6:0b:fd:90:16:96:
         58:ba:b3:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adMGZ4/tDskUVgnxPOj7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh
ZGY1OTgwHhcNMjYwNDE3MDgwMDM2WhcNMjYwNDE4MDgwMDM2WjAzMTEwLwYDVQQD
EyhlNTYzZDEyYjFjZGM2YmRlNDNhYzg5YmZiOWM4YWZiYzQ4Y2M0NWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNUZgKrUei0JKjK6W9EUyGNgoDw0
hm/KS7vUR2spoyo0t71QUAa3f7kHnsZ95GTC9MoPocPpjibn8HILmF2xIzQP5Kvk
Xhgg86IMC5jatt4i7Wo9Xu1CUg4YvI4A0U4m3Saqj4czDvSH+4IsJz0XLMCttqbK
nVxX3tJhV+iOGwXb2OGxsLToT+GZt0OV7Vpazo2THbwPyj44cJZMDfIhSu8BjDFA
UZNZucoDBwyjHKmdUk/J12NE5VnWRFSHwB54qWOlMzqapYH1qozhZt4q//TZRoFs
dKe/NJOnrHnpIzHoTq3EdGNhceIFyIcHtUBTC+21tQS0kk/v+Gj40Xx4QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVj0Ssc3GveQ6yJv7nIr7xIzEXpMB8GA1UdIwQY
MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt
YTkzODhmMzFiNDdlLzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl
LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg85buBjE
ET2LOYoidWvXpKWFSJPtX64pRv7bCOF/A2YL1Nmfar8NRaoD1Ymf/SiQzSyDtNUB
F3y0MTTUvpu+xqF4/2/bckzuXZGXBRhyWw1uUxCUTRh4H7PreKtWxKlf6lShW45u
tAZ18TvyBW3Cq1g7bnycM5dopt/SPrVLIcQdsDodAyslwv79Ts2sMehM3F+4I07y
lX5dKSEaU3ryzQ1DF5j3p69fUQRIae3Y7/Vbh8qYh/YuxvHM20dStdERzjHqANXH
w/c3Zwmn6EpgLMfEnYvnpZQOQq/llmkTRiFcS+Of26J2puwhBE/UR1dPHJ9C8t3k
1gv9kBaWWLqzqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:33 2026 by rpki-client