Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File:                     PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier:          CqXEs4+JyvC49PFAUGMztPUjnnpUHVPWe1j+iJqXc+I=
Subject key identifier:   FF:73:29:96:5C:C7:92:53:15:58:17:BF:EE:CC:70:83:9F:BD:EA:12
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer:       /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial:       01A0C39FC7665CF8A353C8ACE83B9E510933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number:          0EDE
Signing time:             Mon 21 Sep 2026 11:00:23 +0000
Manifest this update:     Mon 21 Sep 2026 11:00:23 +0000
Manifest next update:     Tue 22 Sep 2026 11:00:23 +0000
Files and hashes:         1: FcgVbK89FeRjuVyoSQOfN4fWFvA.asa (hash: 22DkZ7JjoLv+BaBD/x8KpQJlMw9ISrjqJDXnZSuMJzI=)
                          2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: Kivlu12uFJAMH9FoL/4AK3i33DDS6djmlxFOA+sWsH0=)
                          3: Zn0XhdqYxe8o-jPEi-ZNfcsL5t0.roa (hash: rHtPfci/7WpFrwQjD0oZB4ESw2Ju9X+jUEYp4DLCYRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:9f:c7:66:5c:f8:a3:53:c8:ac:e8:3b:9e:51:09:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
        Validity
            Not Before: Sep 21 11:00:23 2026 GMT
            Not After : Sep 22 11:00:23 2026 GMT
        Subject: CN=ff7329965cc79253155817bfeecc70839fbdea12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:c6:cf:26:b2:77:14:e1:78:99:aa:49:2f:
                    05:de:64:eb:59:33:e6:70:b2:b7:a0:61:15:1a:26:
                    32:1d:9e:73:e2:54:9d:9f:3b:4c:66:5e:40:5e:4f:
                    0e:0b:e7:fc:a8:52:d7:03:f5:8c:7b:26:9b:7e:27:
                    a9:74:2e:21:bb:38:5a:5b:bb:be:80:ad:52:50:9b:
                    37:99:fd:96:45:19:05:85:41:75:88:de:9f:6e:96:
                    f6:a3:f9:93:da:06:0f:71:8d:d1:6c:4a:de:84:f0:
                    80:b5:30:d7:cf:e8:84:37:7f:f2:29:28:b2:57:08:
                    dd:5b:48:ec:62:bf:00:8b:e8:e1:1d:d0:4b:e1:da:
                    ce:45:f8:b3:62:c8:6e:f2:77:e0:fb:59:62:9e:0e:
                    9c:e4:c0:0f:77:da:f0:08:4d:6f:92:5e:91:f3:25:
                    a1:f5:85:70:79:7e:a2:77:f2:d1:b0:7d:0e:de:8b:
                    57:94:47:14:be:fd:77:30:db:bf:1e:53:06:57:56:
                    27:51:98:47:5b:e4:33:42:4f:17:bd:9f:2f:80:e2:
                    cd:2b:e0:a5:3a:87:e8:0b:0b:a3:8e:10:b2:73:bd:
                    67:07:c0:0b:c0:f6:13:40:af:41:d4:b0:4a:06:63:
                    a5:5e:31:9b:36:41:7a:4c:ce:7c:93:8f:36:0b:8d:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:73:29:96:5C:C7:92:53:15:58:17:BF:EE:CC:70:83:9F:BD:EA:12
            X509v3 Authority Key Identifier:
                keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:40:8c:61:01:6d:aa:ff:c9:20:ba:b2:65:fc:2e:6e:cc:89:
         36:92:99:0b:a6:b2:20:69:92:d5:88:44:97:dc:b9:53:fd:80:
         b8:78:4a:71:6d:2d:0d:c9:a0:38:30:6f:a0:d6:0d:27:f2:d5:
         88:20:87:f2:a7:81:db:b6:34:99:3f:d1:1e:83:8f:74:55:0d:
         2d:0f:9e:e1:08:27:e9:92:cd:5e:7c:55:89:a2:1b:ea:e2:d8:
         78:eb:ac:e8:36:db:14:31:28:1d:d3:48:a0:7b:f4:cb:b9:35:
         8a:5a:99:4e:fd:52:4b:41:fb:ac:b6:62:e2:27:5b:b5:2e:31:
         5d:ec:7e:08:23:de:31:de:ad:5c:f9:42:ea:98:f3:16:45:33:
         52:c8:91:7f:00:76:33:eb:ed:9b:27:90:09:99:7f:79:ad:00:
         55:d0:d5:28:59:31:aa:bd:d6:57:b5:51:97:90:2b:1b:14:b1:
         4d:80:81:96:4e:51:2a:0e:23:d1:ad:9e:2d:76:cf:ff:8c:26:
         57:84:7f:93:40:23:49:25:7d:37:a2:4e:33:a4:d7:61:7d:06:
         b0:fb:82:7a:56:97:64:b8:7a:ce:91:79:c7:1c:32:d4:1c:03:
         77:da:66:a7:87:fc:02:f3:c9:1f:fa:3f:34:b3:a2:68:9c:7c:
         47:0e:58:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn8dmXPijU8is6DueUQkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNzc1ZTFiOWZiMGFjOTNkNTYzYmE4ZTk3MDg4NGRhNTdi
NmUxOTcwHhcNMjYwOTIxMTEwMDIzWhcNMjYwOTIyMTEwMDIzWjAzMTEwLwYDVQQD
EyhmZjczMjk5NjVjYzc5MjUzMTU1ODE3YmZlZWNjNzA4MzlmYmRlYTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1zGzyaydxTheJmqSS8F3mTrWTPm
cLK3oGEVGiYyHZ5z4lSdnztMZl5AXk8OC+f8qFLXA/WMeyabfiepdC4huzhaW7u+
gK1SUJs3mf2WRRkFhUF1iN6fbpb2o/mT2gYPcY3RbErehPCAtTDXz+iEN3/yKSiy
VwjdW0jsYr8Ai+jhHdBL4drORfizYshu8nfg+1ling6c5MAPd9rwCE1vkl6R8yWh
9YVweX6id/LRsH0O3otXlEcUvv13MNu/HlMGV1YnUZhHW+QzQk8XvZ8vgOLNK+Cl
OofoCwujjhCyc71nB8ALwPYTQK9B1LBKBmOlXjGbNkF6TM58k482C42jLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9zKZZcx5JTFVgXv+7McIOfveoSMB8GA1UdIwQY
MBaAFDx3XhufsKyT1WO6jpcIhNpXtuGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEt
NGU1Njg2YmU2YjgyLzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEtNGU1Njg2YmU2Yjgy
LzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUCMYQFt
qv/JILqyZfwubsyJNpKZC6ayIGmS1YhEl9y5U/2AuHhKcW0tDcmgODBvoNYNJ/LV
iCCH8qeB27Y0mT/RHoOPdFUNLQ+e4Qgn6ZLNXnxViaIb6uLYeOus6DbbFDEoHdNI
oHv0y7k1ilqZTv1SS0H7rLZi4idbtS4xXex+CCPeMd6tXPlC6pjzFkUzUsiRfwB2
M+vtmyeQCZl/ea0AVdDVKFkxqr3WV7VRl5ArGxSxTYCBlk5RKg4j0a2eLXbP/4wm
V4R/k0AjSSV9N6JOM6TXYX0GsPuCelaXZLh6zpF5xxwy1BwDd9pmp4f8AvPJH/o/
NLOiaJx8Rw5Y0A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:25:45 2026 by rpki-client