Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File:                     PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier:          CctA4kvu/SRizZPuib6nJJHqTADjZktvQbirwAYvoCk=
Subject key identifier:   1C:87:D5:E4:81:82:94:E3:87:B7:C9:DD:48:93:87:25:2E:EA:03:6E
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer:       /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial:       01A0E5880A09AAA029A8258967BC11199560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number:          0747
Signing time:             Mon 28 Sep 2026 01:01:32 +0000
Manifest this update:     Mon 28 Sep 2026 01:01:32 +0000
Manifest next update:     Tue 29 Sep 2026 01:01:32 +0000
Files and hashes:         1: Kn6pNMJ21QdhHsuAl8WLfOPOkgw.roa (hash: LKs9IYE65ZsbkD0HX6Uw0NvXdkd8X9uC3RZE4DqImaU=)
                          2: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: 2kn7y+KbBeMfFZ8MwloGbYXjfnqJrWp3uF4nWY2fNXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:88:0a:09:aa:a0:29:a8:25:89:67:bc:11:19:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
        Validity
            Not Before: Sep 28 01:01:32 2026 GMT
            Not After : Sep 29 01:01:32 2026 GMT
        Subject: CN=1c87d5e4818294e387b7c9dd489387252eea036e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:77:15:56:58:8e:57:c3:8a:d0:1b:8b:a8:
                    7a:ac:86:c3:72:1f:7e:a1:b0:08:3b:a3:cd:50:e0:
                    0f:bd:11:59:55:3d:d5:26:fe:6c:1f:96:73:db:b6:
                    fd:83:e6:06:f1:9a:a7:6e:df:38:a0:0d:08:b4:64:
                    72:56:58:5b:67:b5:62:f7:46:0f:79:60:27:d7:bf:
                    01:15:bb:20:20:47:90:d8:2c:61:1d:00:77:17:e5:
                    f8:16:42:60:fd:ac:45:47:92:0a:d9:c2:09:5c:20:
                    4a:1d:ad:49:86:1c:0d:30:c6:6d:e7:06:b8:e2:ab:
                    96:c8:74:8f:b0:79:38:e5:84:4b:41:fd:85:cd:61:
                    06:f9:ec:28:72:4c:57:9d:81:f1:98:5a:a3:59:ba:
                    c7:5e:63:f6:68:b0:9c:b2:80:71:b7:3b:39:62:ca:
                    00:f2:03:b1:c0:e3:c6:d6:a8:e3:2c:49:37:57:dc:
                    b4:5a:c6:2c:24:0c:03:c5:f8:74:7c:04:da:03:1c:
                    51:00:10:16:62:be:92:29:08:5c:1f:94:42:ff:aa:
                    a2:e2:09:65:fe:e4:28:e9:19:57:97:02:92:1f:f4:
                    1d:a8:f2:2e:ac:5f:6e:d6:93:4e:cc:70:0f:30:29:
                    8d:14:86:ff:d0:71:67:25:29:d7:f3:68:90:a4:6e:
                    f6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:87:D5:E4:81:82:94:E3:87:B7:C9:DD:48:93:87:25:2E:EA:03:6E
            X509v3 Authority Key Identifier:
                keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:98:78:89:c3:ae:c0:8b:ba:55:99:ab:7a:d2:b7:9e:7e:0d:
         22:a9:a9:34:5d:af:c0:1f:e0:36:a6:a1:c7:0c:d8:1b:6b:60:
         a9:45:71:72:60:5f:4a:4c:67:b6:84:f0:80:ed:eb:68:b0:3f:
         bb:11:38:72:bf:97:34:9a:73:fa:e7:66:74:2c:73:80:70:d8:
         47:02:b8:ee:52:20:99:4b:8c:fb:a0:18:77:e9:c1:b8:c7:78:
         65:df:36:87:72:11:4b:fd:36:e4:30:36:e8:e0:88:64:da:36:
         de:f8:40:1e:db:fe:1f:d0:7b:29:35:93:73:d5:48:74:77:11:
         9b:ea:6a:99:5c:4f:13:f5:07:8c:81:09:ad:03:07:20:41:ac:
         46:33:c7:70:b7:21:b6:c7:69:f0:84:af:37:e0:59:22:56:8c:
         0c:c0:fa:c7:30:c4:ef:70:d1:09:e6:9f:7c:b0:91:c9:16:64:
         29:56:9e:f0:ac:63:17:14:82:ae:b4:d6:03:fe:5d:04:36:a8:
         5e:ee:ca:26:76:54:eb:a2:07:f5:c9:65:a7:7b:b0:51:96:01:
         38:6b:46:7f:b0:13:02:ce:f3:13:4c:7c:81:71:d8:76:b4:c9:
         55:5f:09:fb:d3:31:ed:97:ac:0b:fb:6c:e5:28:91:47:dd:3a:
         6a:36:3d:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDliAoJqqApqCWJZ7wRGZVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWYxNGQzN2ZiZGM4N2FlN2M5YzdiOTE1M2VhZWE1ZDRj
NTU0OWIwHhcNMjYwOTI4MDEwMTMyWhcNMjYwOTI5MDEwMTMyWjAzMTEwLwYDVQQD
EygxYzg3ZDVlNDgxODI5NGUzODdiN2M5ZGQ0ODkzODcyNTJlZWEwMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTJ3FVZYjlfDitAbi6h6rIbDch9+
obAIO6PNUOAPvRFZVT3VJv5sH5Zz27b9g+YG8Zqnbt84oA0ItGRyVlhbZ7Vi90YP
eWAn178BFbsgIEeQ2CxhHQB3F+X4FkJg/axFR5IK2cIJXCBKHa1JhhwNMMZt5wa4
4quWyHSPsHk45YRLQf2FzWEG+ewockxXnYHxmFqjWbrHXmP2aLCcsoBxtzs5YsoA
8gOxwOPG1qjjLEk3V9y0WsYsJAwDxfh0fATaAxxRABAWYr6SKQhcH5RC/6qi4gll
/uQo6RlXlwKSH/QdqPIurF9u1pNOzHAPMCmNFIb/0HFnJSnX82iQpG72ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByH1eSBgpTjh7fJ3UiThyUu6gNuMB8GA1UdIwQY
MBaAFDwfFNN/vch658nHuRU+rqXUxVSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUt
ZjFjNmJmMWU0YmE3LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUtZjFjNmJmMWU0YmE3
LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACph4icOu
wIu6VZmretK3nn4NIqmpNF2vwB/gNqahxwzYG2tgqUVxcmBfSkxntoTwgO3raLA/
uxE4cr+XNJpz+udmdCxzgHDYRwK47lIgmUuM+6AYd+nBuMd4Zd82h3IRS/025DA2
6OCIZNo23vhAHtv+H9B7KTWTc9VIdHcRm+pqmVxPE/UHjIEJrQMHIEGsRjPHcLch
tsdp8ISvN+BZIlaMDMD6xzDE73DRCeaffLCRyRZkKVae8KxjFxSCrrTWA/5dBDao
Xu7KJnZU66IH9cllp3uwUZYBOGtGf7ATAs7zE0x8gXHYdrTJVV8J+9Mx7ZesC/ts
5SiRR906ajY93g==
-----END CERTIFICATE-----
Generated at Mon Sep 28 08:32:47 2026 by rpki-client