Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          qB1l/qN/QKDu0xsxNnz7CBd3lXeCdQS7QQbn6AYm5Wo=
Subject key identifier:   89:63:88:4A:A6:A2:A0:D1:03:48:B4:40:19:82:F4:59:6A:F2:17:86
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       01A0C933F88379F99108219A04E9EAA09C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          1527
Signing time:             Tue 22 Sep 2026 13:00:21 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:21 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:21 +0000
Files and hashes:         1: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (hash: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM=)
                          2: 3En9ZxdA_9Y7YbhdHSy_ozRVcts.roa (hash: PrZc7gBh863UgF6RDKYSJvpsQyp10e+OlGmMtcslKPQ=)
                          3: E1V1b19ox-LvuRijY9UoK0y3Irs.roa (hash: xEI2Rqw0cuhBI9GdkvhH+W/MRGZrUkysKcXYuHoCxrU=)
                          4: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: bK/4XhTX22wWqXvIU4bqVO6IetUirhLwmKWAESbXoU0=)
                          5: cIdg71qg6R6Cf1UwQuGnxjPwBGI.roa (hash: jMe0CR6Aea2kIdpRXkGxQhJEmosKzZ2QbxS6+Je/390=)
                          6: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (hash: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:33:f8:83:79:f9:91:08:21:9a:04:e9:ea:a0:9c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Sep 22 13:00:21 2026 GMT
            Not After : Sep 23 13:00:21 2026 GMT
        Subject: CN=8963884aa6a2a0d10348b4401982f4596af21786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:59:6c:32:d8:35:c4:27:34:f6:e4:2a:ae:
                    1b:a0:08:17:5b:83:69:3d:cd:9d:75:83:94:36:80:
                    36:7e:54:f2:f4:6b:43:c9:16:f4:1c:83:57:b2:6c:
                    8c:9e:7a:5d:02:54:2a:a2:c2:41:cb:4b:7a:35:db:
                    86:31:95:5a:01:fb:57:51:77:99:63:98:0e:97:4a:
                    20:e0:cb:9f:67:fb:67:62:e5:eb:20:59:5e:89:11:
                    c5:4c:07:16:61:00:a2:09:2f:fd:b7:f6:87:21:e1:
                    78:17:ae:c4:26:ac:d2:24:b6:f1:6e:17:f5:43:7c:
                    52:72:7d:ff:84:eb:5a:92:3b:d4:b4:83:b1:67:0c:
                    72:80:7f:b9:eb:7c:53:a4:58:d1:b7:b6:0d:24:e7:
                    9f:d1:80:06:2e:fc:95:a6:7c:5e:a7:9f:94:ab:d1:
                    36:85:cc:50:f2:f1:47:48:52:3b:62:d6:58:09:f2:
                    5d:65:62:f7:43:38:41:f3:24:73:0a:d2:6c:7f:3f:
                    74:95:28:30:cb:a8:03:42:c8:18:f2:32:79:4f:57:
                    69:62:b6:a8:2d:c7:9b:a6:70:7f:0b:ba:fe:ac:aa:
                    23:fb:dd:cc:80:04:5d:24:9a:1e:de:9f:3a:67:26:
                    84:e8:fb:a6:b3:fa:4f:3f:70:ba:60:18:66:95:7c:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:63:88:4A:A6:A2:A0:D1:03:48:B4:40:19:82:F4:59:6A:F2:17:86
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a5:94:ec:94:1d:13:13:e0:40:4e:a2:7e:c0:f9:e9:51:b1:
         63:38:e3:81:f7:8c:2b:5f:95:ae:f7:1d:d5:33:a6:7b:e6:ed:
         db:dd:9d:97:e0:1c:b4:23:eb:45:e9:77:94:79:8c:31:c8:14:
         a4:8e:64:6c:7d:8f:e1:54:c0:fa:38:e8:50:6c:6f:c4:09:f4:
         93:07:f2:a6:36:e3:94:e0:35:b2:b7:7a:33:26:36:9b:4e:51:
         b9:a7:ec:64:ed:e0:fc:29:61:3b:20:13:e3:90:16:b0:51:ea:
         26:27:9c:79:11:5e:7a:54:c7:2c:de:ae:9f:34:a9:4d:da:37:
         ed:42:48:63:83:cf:45:99:21:67:c8:f0:a6:81:e0:c4:af:2a:
         2a:11:de:b7:cc:ed:68:d4:cd:0f:e5:84:61:c9:e2:2c:2e:8c:
         10:00:46:09:fd:bf:6c:9c:26:33:7b:b3:87:7f:65:63:05:3c:
         2c:1b:81:39:a9:ce:3e:45:cb:92:02:e1:75:d6:89:47:1c:e6:
         48:d1:3d:e7:38:e1:e5:98:2d:dc:d8:b6:77:ca:a9:e4:59:a5:
         e2:51:27:37:b2:61:ea:86:6f:77:c5:74:ab:9b:ab:4c:91:e1:
         cf:56:11:d7:87:92:73:78:73:9a:57:1e:78:f7:70:1d:34:9e:
         b5:32:b0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:42:53 2026 by rpki-client