Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File:                     PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier:          PGlJKZu6ayX6NEqh+2BgB0uuuPvo0ShNUUZC5HKfQDk=
Subject key identifier:   26:37:4A:CC:DE:5C:41:36:64:10:9C:C0:1A:4A:A0:80:83:D0:71:84
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer:       /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial:       01A12654B30BDE9056CA9E044EC7DFDE19A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number:          0B20
Signing time:             Sat 10 Oct 2026 15:00:47 +0000
Manifest this update:     Sat 10 Oct 2026 15:00:47 +0000
Manifest next update:     Sun 11 Oct 2026 15:00:47 +0000
Files and hashes:         1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: wTgZ+f/JRisiFMIT6ZLNGkyh1xnObVkralFp5N7wn/I=)
                          2: SRouw1ACmOxsP7DYIDJnot7Wy0M.roa (hash: Axkim79AjMG7Hlgx6O/xdzgLE7UsB+oDhwA5WGJg0Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:54:b3:0b:de:90:56:ca:9e:04:4e:c7:df:de:19:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
        Validity
            Not Before: Oct 10 15:00:47 2026 GMT
            Not After : Oct 11 15:00:47 2026 GMT
        Subject: CN=26374accde5c413664109cc01a4aa08083d07184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:a2:3f:93:04:43:f8:41:97:59:15:b6:65:
                    f0:f7:96:96:03:8e:62:06:41:49:4b:5d:7f:9e:f8:
                    d0:bd:6d:a1:96:01:45:11:a6:7c:1d:b8:96:f3:53:
                    37:03:1d:c3:ed:79:d3:51:78:13:13:46:da:a7:05:
                    9e:cc:2b:94:a2:55:5d:ec:fb:88:1e:ed:de:f9:3c:
                    6c:e4:64:89:7f:39:c1:73:86:af:cb:2c:03:90:3f:
                    53:a7:9a:31:3f:60:25:f5:25:a8:1f:fc:45:d0:11:
                    9c:00:08:c9:01:81:ea:49:0e:cd:57:65:d0:71:30:
                    07:d0:07:65:f4:4c:ff:01:13:89:fd:61:b9:dd:c6:
                    69:66:26:b5:40:ac:67:25:1d:1d:b8:31:40:77:8f:
                    5d:55:45:7e:52:1a:ea:b8:57:13:f7:04:d7:6c:fa:
                    39:0d:01:78:39:a7:fd:98:ea:71:74:eb:9e:b1:2e:
                    85:a4:a4:8e:06:f5:b8:50:c8:d7:1e:1f:f4:30:8b:
                    eb:eb:4b:ca:c4:7f:4d:5b:ba:06:51:4e:f4:ab:4f:
                    5a:cb:f6:78:76:2c:9d:66:42:58:da:e5:dc:08:2b:
                    c6:1b:93:b9:6f:ec:54:66:ae:57:c1:ab:65:ae:2c:
                    c3:5c:d1:e5:9d:b1:fc:53:5f:f9:c5:4a:0f:50:6b:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:37:4A:CC:DE:5C:41:36:64:10:9C:C0:1A:4A:A0:80:83:D0:71:84
            X509v3 Authority Key Identifier:
                keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:dd:2b:8d:59:00:28:ce:1a:b3:fc:33:93:37:c0:e8:ac:72:
         47:d0:18:9e:75:4e:82:50:c9:2b:93:65:0d:90:42:d5:27:01:
         c3:9f:47:04:ab:b0:62:36:20:1e:41:09:33:a6:2a:a1:55:29:
         05:88:54:d5:f2:26:35:8f:8e:59:79:81:c5:25:f2:b2:f2:83:
         6d:a2:34:c0:55:fa:0c:6c:bb:5a:71:99:14:2b:19:b6:2a:bc:
         d4:70:a4:66:8d:af:5a:f9:2b:20:eb:a7:4d:50:b3:3c:4c:9d:
         65:fa:99:4c:d6:5a:4e:31:c4:3c:06:41:ab:b3:a9:03:e1:38:
         72:56:89:7e:6a:99:e1:a9:b2:61:83:6e:f0:96:ba:a1:d0:c9:
         a1:68:f8:e8:1b:52:08:05:41:6b:d7:1d:d3:7a:cb:21:02:3e:
         e7:60:fd:80:f9:08:58:b4:85:6b:aa:a4:33:3f:85:33:2b:04:
         05:0d:61:c6:11:ab:75:47:69:e8:9f:a1:0d:fb:01:37:d8:a1:
         4d:78:f1:dd:be:5f:ea:9b:43:a2:76:27:82:60:d3:5b:f3:e1:
         9d:6a:c2:41:c7:04:ba:1a:ce:47:77:f6:9c:c9:85:e8:02:32:
         1d:27:3c:45:6a:aa:2b:fb:fe:1d:e6:b6:d8:df:c4:fb:44:6c:
         53:c1:16:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEmVLML3pBWyp4ETsff3hmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNDNjZjQwZjY5MWYxNGIzNWNhNjU3MDMyOTM0ODAyMDA1
Y2ZhODgwHhcNMjYxMDEwMTUwMDQ3WhcNMjYxMDExMTUwMDQ3WjAzMTEwLwYDVQQD
EygyNjM3NGFjY2RlNWM0MTM2NjQxMDljYzAxYTRhYTA4MDgzZDA3MTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uOiP5MEQ/hBl1kVtmXw95aWA45i
BkFJS11/nvjQvW2hlgFFEaZ8HbiW81M3Ax3D7XnTUXgTE0bapwWezCuUolVd7PuI
Hu3e+Txs5GSJfznBc4avyywDkD9Tp5oxP2Al9SWoH/xF0BGcAAjJAYHqSQ7NV2XQ
cTAH0Adl9Ez/AROJ/WG53cZpZia1QKxnJR0duDFAd49dVUV+UhrquFcT9wTXbPo5
DQF4Oaf9mOpxdOuesS6FpKSOBvW4UMjXHh/0MIvr60vKxH9NW7oGUU70q09ay/Z4
diydZkJY2uXcCCvGG5O5b+xUZq5XwatlrizDXNHlnbH8U1/5xUoPUGsjewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY3SszeXEE2ZBCcwBpKoICD0HGEMB8GA1UdIwQY
MBaAFD1Dz0D2kfFLNcplcDKTSAIAXPqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2It
MDdmYjYxNzFmMThmLzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2ItMDdmYjYxNzFmMThm
LzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA390rjVkA
KM4as/wzkzfA6KxyR9AYnnVOglDJK5NlDZBC1ScBw59HBKuwYjYgHkEJM6YqoVUp
BYhU1fImNY+OWXmBxSXysvKDbaI0wFX6DGy7WnGZFCsZtiq81HCkZo2vWvkrIOun
TVCzPEydZfqZTNZaTjHEPAZBq7OpA+E4claJfmqZ4amyYYNu8Ja6odDJoWj46BtS
CAVBa9cd03rLIQI+52D9gPkIWLSFa6qkMz+FMysEBQ1hxhGrdUdp6J+hDfsBN9ih
TXjx3b5f6ptDonYngmDTW/PhnWrCQccEuhrOR3f2nMmF6AIyHSc8RWqqK/v+Hea2
2N/E+0RsU8EW8A==
-----END CERTIFICATE-----
Generated at Sun Oct 11 01:27:02 2026 by rpki-client