Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File:                     pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier:          uzB3aLqLpZLLI6V7Wnq1WGuW0I5LcS4hZMti7lNx+XY=
Subject key identifier:   47:50:FE:D8:02:B5:B6:9E:F9:A8:48:60:BD:D5:1C:E2:41:AC:4E:25
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer:       /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial:       01A1DF1563783E074008823C283544A71FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number:          0B47
Signing time:             Sun 15 Nov 2026 12:01:23 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:23 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:23 +0000
Files and hashes:         1: h02F20m-HtlrYP1IvxDBcCyL25o.roa (hash: aEq2H+PemeJ+vZCbIyEhHoWK4ZLPYe1mqTH4CSucVMs=)
                          2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: aVxh7+JaUMA1akQV0mesKKjhRFj17roMFm3uX79QO8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:63:78:3e:07:40:08:82:3c:28:35:44:a7:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
        Validity
            Not Before: Nov 15 12:01:23 2026 GMT
            Not After : Nov 16 12:01:23 2026 GMT
        Subject: CN=4750fed802b5b69ef9a84860bdd51ce241ac4e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:dc:b3:cc:e9:67:92:86:b6:67:6b:bb:b1:
                    97:02:52:69:a1:67:b9:3e:8c:42:d9:07:53:56:50:
                    28:98:1a:3f:ef:93:2b:e4:1e:ed:39:47:e4:a4:a3:
                    31:27:5c:69:fe:5d:82:ec:87:4a:f4:d0:4a:05:95:
                    8d:74:a1:b4:23:0d:54:39:7d:b0:1c:1e:49:ef:e3:
                    c1:24:ea:d4:9f:c6:a1:88:78:30:9b:3e:c0:fa:ec:
                    d4:d2:e8:3f:25:ac:d7:53:09:e2:7b:a1:16:86:c9:
                    50:3e:8a:2c:ea:a0:a0:84:56:3a:9b:db:0f:4e:ae:
                    ea:f1:0e:01:af:16:7a:8d:5c:e8:6c:d4:20:ee:5f:
                    b7:d4:7e:48:eb:bf:fc:6d:27:6f:39:6c:dc:71:4b:
                    fe:94:fe:68:2c:e3:88:0e:13:34:4c:57:3b:7a:53:
                    e1:3f:8d:30:68:42:be:0b:de:f5:bb:58:ef:74:92:
                    61:48:a5:11:4f:74:13:c5:bb:af:fe:5e:d7:ad:8e:
                    b0:4b:0c:f6:2a:4a:c7:2b:9f:49:48:d6:d5:11:84:
                    ec:db:f6:42:44:00:1a:44:cf:0a:c2:6d:f0:ea:7e:
                    89:bc:0d:8b:5f:4a:be:74:ff:62:ff:c6:13:9c:d0:
                    11:25:18:fb:b4:8a:4f:06:34:42:82:4c:f6:cb:2e:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:50:FE:D8:02:B5:B6:9E:F9:A8:48:60:BD:D5:1C:E2:41:AC:4E:25
            X509v3 Authority Key Identifier:
                keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:cf:d5:a7:ce:60:c0:d0:38:c6:cd:a9:b5:cf:e6:83:e5:4d:
         ed:57:d2:75:64:17:95:02:1b:78:aa:20:28:61:01:b8:7f:84:
         72:b9:77:44:3b:4a:02:63:c7:f6:71:b0:39:57:8c:56:34:2b:
         44:a1:49:7d:c7:0f:2e:c9:d7:4d:0f:77:39:a9:89:98:54:dc:
         03:c2:68:75:63:4f:4e:e1:61:bf:d6:88:45:a3:d4:26:45:a0:
         af:1c:dc:d4:ed:0b:ad:7c:cb:f8:65:50:0a:7c:8d:b1:3d:27:
         e9:57:b3:4a:74:03:50:c8:fe:ec:1d:3b:71:e6:50:52:01:6b:
         81:9d:7f:37:c5:0e:5d:91:b4:ab:8c:94:b3:7a:2e:5c:9d:b7:
         65:ea:f8:a6:28:e4:2c:97:dc:99:99:55:e3:4e:00:3c:c5:67:
         6e:80:a7:8a:5d:d4:48:30:c6:d5:24:95:d9:b3:d4:1c:66:89:
         7d:a7:47:0c:36:ff:a3:e8:f2:77:86:68:c1:0d:06:4d:f3:e9:
         7b:c0:60:23:fd:f2:42:34:f8:4b:7a:36:60:00:3c:21:b2:21:
         05:2b:40:74:14:1e:39:3d:bf:03:4d:bf:b3:7b:be:c4:e8:e2:
         86:04:21:e4:86:04:44:73:3e:db:ef:11:85:54:a2:d0:49:af:
         ae:d3:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:26:17 2026 by rpki-client