Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File:                     PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier:          0RqmDmsqAaKKJLy5K1Qz+sgA0hLP04VoS2GeJ2pKYiE=
Subject key identifier:   E5:E9:D0:8D:85:AD:83:A1:54:25:12:14:96:A7:63:3B:AE:8A:8D:02
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer:       /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial:       01A0D94C686054167822E0667F2DFD23699F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number:          0E77
Signing time:             Fri 25 Sep 2026 16:00:58 +0000
Manifest this update:     Fri 25 Sep 2026 16:00:58 +0000
Manifest next update:     Sat 26 Sep 2026 16:00:58 +0000
Files and hashes:         1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: 8xhL8gROr3k7gOyvUjkjabJIsS3JCIUcnxOo6E8C8fw=)
                          2: bFPx6O0jcOjl3Dk8GP6zg__zfTc.asa (hash: CijuSUsn6ReqD48LBhgJYb8THtPImULvV29QtX/RfB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4c:68:60:54:16:78:22:e0:66:7f:2d:fd:23:69:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
        Validity
            Not Before: Sep 25 16:00:58 2026 GMT
            Not After : Sep 26 16:00:58 2026 GMT
        Subject: CN=e5e9d08d85ad83a15425121496a7633bae8a8d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:37:6b:1e:a1:11:85:1a:d7:bc:02:9f:68:
                    08:72:eb:dc:cd:15:9f:bb:24:80:11:2a:b5:75:33:
                    28:9a:e4:18:c6:5e:24:f3:b8:fb:ff:b8:0a:7e:15:
                    eb:1b:f3:12:33:53:02:a6:05:5d:45:2c:eb:e7:e9:
                    eb:bd:b5:79:6a:c3:e3:5c:92:47:f1:27:46:cb:27:
                    b2:78:1b:75:7e:97:c3:72:61:93:1a:8e:91:c5:ce:
                    92:3c:4f:ee:55:94:bc:41:34:cd:a6:e9:e2:fe:92:
                    09:78:70:62:e2:eb:1b:9c:70:14:2f:66:29:5a:5f:
                    a5:f4:ca:9a:43:4d:c6:96:9c:b1:7c:6b:40:01:7d:
                    dd:95:70:01:0a:fe:b9:51:cc:70:84:07:02:88:3c:
                    4b:73:4c:1c:54:3d:40:86:a1:86:56:4e:b3:3f:c4:
                    7c:df:b1:8e:85:b5:38:31:14:63:a1:69:e4:5b:fb:
                    9e:67:5e:7f:cf:90:7c:3a:ef:b9:6e:c2:84:50:3b:
                    d3:2c:08:23:38:0a:38:b6:23:77:b1:aa:7d:25:db:
                    66:e9:b3:3f:6d:37:21:e5:0d:b8:d8:ee:88:a5:ea:
                    6e:37:a3:53:e8:98:37:c5:2d:9a:d5:60:dd:2b:0f:
                    05:10:c4:e8:6c:18:92:f5:53:5c:79:d0:00:a6:6e:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:D0:8D:85:AD:83:A1:54:25:12:14:96:A7:63:3B:AE:8A:8D:02
            X509v3 Authority Key Identifier:
                keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:91:18:05:99:0a:50:83:b4:6d:38:03:ae:96:31:cf:f3:ac:
         b3:b4:3c:17:76:90:a3:98:8a:c2:04:d7:fe:2e:6c:64:00:db:
         bc:2a:93:98:ed:54:b0:1f:a9:84:d1:df:73:b8:b4:ae:23:6c:
         f2:5d:40:78:0b:2d:a4:95:e8:db:1a:7a:03:2a:78:f9:48:ce:
         f9:35:da:13:d0:66:38:fd:37:6d:8f:8f:42:b0:d6:af:99:39:
         28:6e:cd:10:3d:ca:7c:02:f4:28:49:00:61:19:1e:4c:bf:37:
         d8:52:82:89:77:86:e7:be:42:fe:1a:97:3a:69:2d:0b:9b:79:
         97:c3:81:ba:e6:0b:b1:db:fa:ce:e5:66:50:be:0b:81:75:74:
         eb:be:d6:00:7f:34:e1:2c:53:2e:fc:1f:af:d5:b7:33:48:f1:
         1a:69:f2:31:ef:ed:74:49:b9:3e:d8:3a:38:af:56:e6:ea:ae:
         43:e7:14:0a:f8:82:47:ec:38:e2:cb:e6:bc:46:40:24:b4:8f:
         b3:39:7e:3a:1a:c3:63:00:0a:28:3e:d0:68:55:58:0c:4b:4c:
         b5:e9:10:00:d6:66:84:99:4d:70:42:fd:00:00:71:46:82:8b:
         65:7b:a3:4d:2b:50:06:21:eb:10:41:95:fd:bb:4f:30:45:55:
         11:2e:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:26:42 2026 by rpki-client