Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
File:                     PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json)
Hash identifier:          MzRMJ4YszbgQM1hbz1QUea1oTlAG1rFOsCRS6uVBOOo=
Subject key identifier:   56:D8:99:0C:43:1E:49:16:8A:59:08:6C:E0:6B:DE:40:31:C7:0F:5A
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Certificate issuer:       /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial:       019CACEB55734A12AA136BF31ACF41C08885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
Manifest number:          185C
Signing time:             Mon 02 Mar 2026 05:00:29 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:29 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:29 +0000
Files and hashes:         1: 0M2CPdV7Xjvt7nrRqNi49Y_5Q0w.roa (hash: /s2MC65jvamRWE4E3LzZLmVB6N6rAH4buP8PZFgnBKc=)
                          2: 4bNlVON9xCdsARp_CZ5ll0ht23Q.roa (hash: r8pI01bxr501PmXiSeH2G+Xx+qveym+0Uqo3tM8jR6I=)
                          3: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: JztfXQw01ys0WMlUOSz/P+9olXox5MojijwmdNN2uuk=)
                          4: SRrECMJ3ZMD_TfSXLnYqpll22u4.roa (hash: qizHkZ1GpDS36mFIdR1OgqUp05JcTddRBFeSdEQ59Wg=)
                          5: hd00NiPZ1KbbE5ODb-CMk8sWFr4.roa (hash: ivJHfYiQfBFcxIzEkszt8mO2O17yh2Xq/VLRYE4MQxY=)
                          6: v39I0Zjco7iTKjESnYevB85gpxs.roa (hash: h5IwzouSq0u0o63m4FX0dLx1gQy0nggHUf/mhXSXzYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:55:73:4a:12:aa:13:6b:f3:1a:cf:41:c0:88:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
        Validity
            Not Before: Mar  2 05:00:29 2026 GMT
            Not After : Mar  3 05:00:29 2026 GMT
        Subject: CN=56d8990c431e49168a59086ce06bde4031c70f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:e1:a6:dd:67:f6:7f:47:14:ac:53:4d:a4:
                    aa:7e:55:cd:50:1d:77:95:65:15:8d:17:1e:bb:b3:
                    0e:b4:c1:c2:14:6a:c8:6d:d4:ac:86:82:31:3e:9a:
                    4d:e3:fa:4b:cf:db:80:ac:27:7d:d2:b1:e4:72:a5:
                    4e:a9:7a:fe:c6:f0:d9:6d:5f:6b:06:f8:06:21:d2:
                    b9:70:e7:8c:72:00:34:5b:c8:44:44:fb:ee:81:89:
                    c0:eb:71:c4:b3:3e:51:a4:56:b3:ed:70:ba:6b:a9:
                    05:fd:39:00:e4:fb:1a:f7:a9:48:bc:6d:8d:1f:43:
                    63:d1:82:4d:81:ea:47:fa:7f:f8:46:5a:eb:11:a1:
                    dc:44:6b:91:b1:c0:4a:60:47:75:14:c3:9a:c5:6f:
                    78:80:99:20:07:78:96:3a:08:50:81:32:9b:47:01:
                    fd:73:0e:a6:7a:b5:e3:07:63:e0:ac:09:8b:1f:53:
                    2b:2e:04:6e:93:d6:b0:97:b9:d3:93:7d:10:56:be:
                    22:5a:20:32:8c:5a:17:6c:e3:56:ec:2e:78:38:93:
                    34:d0:02:42:43:44:aa:4a:6f:91:0f:c1:a4:ed:34:
                    51:aa:4f:ae:b4:ef:00:93:fa:81:eb:40:cc:28:e7:
                    e7:5c:94:7e:e8:02:78:ef:64:fd:d0:e2:0c:83:d1:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D8:99:0C:43:1E:49:16:8A:59:08:6C:E0:6B:DE:40:31:C7:0F:5A
            X509v3 Authority Key Identifier:
                keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a9:e8:59:7f:fd:27:32:81:7a:03:f5:28:3e:15:bf:cb:34:
         0b:d0:6c:3b:9f:1d:77:72:2f:2f:58:15:b3:df:85:32:ce:66:
         fe:6b:bb:49:2f:90:5a:38:49:5d:1e:4d:5d:b0:49:1d:3d:d1:
         ca:1d:36:4c:5e:45:70:81:2d:da:d2:e9:6e:16:20:c0:54:4f:
         7f:04:59:6f:e6:14:e6:7d:87:29:21:a0:66:95:b2:11:4e:4c:
         2d:11:b9:5c:2d:1b:cd:61:21:ae:60:ee:aa:3a:0a:91:48:a7:
         35:0b:e7:bc:27:99:f8:53:2a:ec:24:77:eb:49:d3:af:dc:d0:
         96:88:9d:99:9e:b0:30:99:ef:38:6b:e9:87:81:62:3e:e0:a5:
         7f:05:45:11:53:b8:92:bd:21:3e:86:66:8a:86:91:71:f5:c0:
         3b:4f:b1:03:26:62:61:05:db:96:9b:3e:ae:39:98:2e:f4:fd:
         02:2a:d1:89:ad:33:ce:64:a2:09:61:53:13:66:3c:11:e8:09:
         5d:35:a4:19:c9:1b:8c:2b:f1:54:81:41:e8:01:1f:2c:8d:b0:
         40:47:66:68:a2:0d:1d:a3:3a:c7:1a:94:64:83:3b:02:67:df:
         23:e0:b2:54:5b:35:3b:1c:f1:84:e1:f4:f5:a1:d2:7e:80:2e:
         f5:d8:e1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:55 2026 by rpki-client