Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File:                     PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier:          6rNF4budo75cKX7Dmnxz5SLSCTDJ3j21YxHeiiE8/6w=
Subject key identifier:   CE:7A:06:3E:AF:1A:D3:76:0B:D4:47:1B:B5:85:B3:F3:B9:98:CE:38
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer:       /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial:       019CAE35039819C6D67844F0C266F0552B41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number:          07DD
Signing time:             Mon 02 Mar 2026 11:00:35 +0000
Manifest this update:     Mon 02 Mar 2026 11:00:35 +0000
Manifest next update:     Tue 03 Mar 2026 11:00:35 +0000
Files and hashes:         1: P_mFxEcYlCrFN3MG993zE4Mm2l4.roa (hash: qelseO1it8WIi6uPqUIeiOJkVLkt0DoO5JMwvTxaQaY=)
                          2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: AdzGYR0nkBdz9XvXq+qoqOIPMVOJIaABRJ6yzlbjAIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:03:98:19:c6:d6:78:44:f0:c2:66:f0:55:2b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
        Validity
            Not Before: Mar  2 11:00:35 2026 GMT
            Not After : Mar  3 11:00:35 2026 GMT
        Subject: CN=ce7a063eaf1ad3760bd4471bb585b3f3b998ce38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:d5:14:5f:e3:c7:ad:43:75:2c:c7:72:0f:
                    ad:88:03:79:e6:22:5e:e3:77:c6:d3:95:84:9e:38:
                    aa:96:57:df:11:e6:e5:18:48:56:6f:19:bd:6f:9a:
                    ed:f3:86:ba:d0:82:1d:48:06:77:2c:05:67:4d:aa:
                    8c:f3:36:72:e8:52:13:d5:49:92:4e:99:1b:d3:bc:
                    47:a1:a3:76:be:49:bf:e0:de:69:4c:77:83:f4:22:
                    21:2a:b2:51:01:f5:4d:a9:41:d3:eb:03:e7:91:b8:
                    d4:35:45:b1:30:99:05:a5:01:92:5e:d4:c8:07:dd:
                    f2:20:b9:02:a5:5d:aa:dc:8e:dc:76:2e:ef:2b:02:
                    7f:2b:9c:81:01:a5:6b:e2:6e:f2:54:04:9a:6f:dd:
                    28:d6:76:e8:76:ca:00:b2:97:57:58:86:4a:09:24:
                    e1:7c:ca:a2:25:35:1d:8d:70:24:da:6d:4f:87:fd:
                    93:72:68:bd:e9:95:ef:32:72:e4:98:b0:9c:51:b1:
                    16:f0:91:40:0c:81:e3:54:7d:1c:2e:81:e8:66:28:
                    7c:00:c9:70:ab:d7:21:fb:ed:d6:5b:83:ba:e2:3b:
                    34:8f:a0:86:f7:17:f8:ba:52:bf:4f:fe:b4:22:b1:
                    90:05:04:e1:df:45:5b:36:c6:63:5c:04:87:01:60:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7A:06:3E:AF:1A:D3:76:0B:D4:47:1B:B5:85:B3:F3:B9:98:CE:38
            X509v3 Authority Key Identifier:
                keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:2b:f4:fd:07:d2:f5:df:3e:44:dd:36:12:43:65:d3:ea:e9:
         f2:0c:80:2d:e8:45:f4:b5:3d:cc:6a:82:d0:cb:db:e1:6e:89:
         95:bd:73:8b:a9:f4:44:ff:16:94:61:e0:8b:92:1e:f7:5c:e8:
         77:ef:29:9b:b5:a3:79:50:55:48:99:74:37:82:81:88:8f:10:
         a3:72:bb:42:2e:b9:8e:d7:4b:9f:79:2d:fb:87:99:61:10:45:
         d6:98:bf:46:21:14:3b:cb:a0:2d:c9:ec:26:1c:cd:d9:f1:05:
         63:00:25:68:1a:72:de:1a:a8:2f:41:29:9e:9a:80:34:9f:90:
         c7:6c:98:49:42:65:49:71:90:76:08:8e:11:aa:02:cf:68:9f:
         0b:41:43:4e:5c:d0:cb:30:f9:ed:5d:9f:e5:5e:d5:d6:74:37:
         96:07:fa:90:46:be:b8:db:58:a9:fc:a1:00:1a:ad:18:8e:89:
         31:f1:84:db:ee:73:f8:4f:b2:4f:10:b9:66:2e:12:ba:79:9c:
         0b:26:a7:6a:f5:9b:fe:73:2e:11:c3:41:e9:89:37:7f:85:e4:
         48:c8:11:13:6e:75:63:91:d5:dc:53:0a:5f:ec:af:a6:80:eb:
         0a:15:ff:e1:b4:01:26:e7:9c:b9:2c:06:8f:8f:81:6b:9d:c3:
         ad:4d:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:20 2026 by rpki-client