Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File:                     PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier:          RzceomD2R5MFFX6wM0FMkaYDuGFpo79+rC2E/UhFfAM=
Subject key identifier:   1C:E5:59:96:5B:4B:CF:61:02:78:82:18:67:70:ED:77:4E:DA:A4:75
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer:       /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial:       019D9BBF3216739F70BAA94C6E17C0F12C40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number:          0858
Signing time:             Fri 17 Apr 2026 14:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 14:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 14:01:31 +0000
Files and hashes:         1: P_mFxEcYlCrFN3MG993zE4Mm2l4.roa (hash: qelseO1it8WIi6uPqUIeiOJkVLkt0DoO5JMwvTxaQaY=)
                          2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: FbkD17lBSmiSFwyzBYQTXxiQzJTBNm+t1isdZA2+FN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:bf:32:16:73:9f:70:ba:a9:4c:6e:17:c0:f1:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
        Validity
            Not Before: Apr 17 14:01:31 2026 GMT
            Not After : Apr 18 14:01:31 2026 GMT
        Subject: CN=1ce559965b4bcf61027882186770ed774edaa475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:1d:51:23:c3:c3:5f:fd:4b:11:e1:32:3c:
                    bf:3c:09:ed:49:49:63:52:78:8a:1e:89:93:7e:0d:
                    d1:06:99:8e:e2:6e:82:d4:bf:90:e0:f6:8f:d7:c4:
                    be:6c:f2:a4:df:0f:22:04:57:4b:f6:c6:d6:58:34:
                    f9:aa:6e:ec:7a:63:48:28:85:a8:28:b5:85:80:0d:
                    75:bf:fc:e8:cf:9f:17:8d:91:d7:68:e3:a7:4a:37:
                    fa:fc:db:21:8a:e2:2b:09:00:38:72:5c:64:24:c7:
                    0e:7e:63:61:5e:5f:0a:0d:e5:f8:47:d5:a8:17:40:
                    f5:0f:6a:9f:e5:3e:23:a9:1c:11:53:9d:7d:87:c2:
                    e3:8a:75:77:77:71:44:72:0f:34:2a:9c:3e:f0:c9:
                    37:56:ca:d4:db:e8:57:a9:36:68:30:52:fc:50:ac:
                    05:e6:57:69:3f:d0:35:6c:7a:0e:a8:92:33:d9:ce:
                    19:2d:16:99:2f:c1:26:87:a0:b0:55:bf:40:bd:31:
                    ed:57:7b:b9:62:ae:4c:5c:e4:b0:b8:2e:9f:b4:1e:
                    e2:5d:b2:23:7e:8d:8e:bb:50:9c:e0:74:c4:f2:c0:
                    84:3b:4c:c4:ea:42:d0:8a:fb:5f:c2:f0:96:c1:8e:
                    2f:f2:4f:4e:fe:11:99:d1:1a:ca:78:36:e7:85:6c:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E5:59:96:5B:4B:CF:61:02:78:82:18:67:70:ED:77:4E:DA:A4:75
            X509v3 Authority Key Identifier:
                keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:eb:18:fa:bc:5b:03:e7:e5:73:98:3b:14:85:cd:32:28:f8:
         4f:0a:a8:7b:7c:8e:89:1b:c5:47:03:31:94:92:fd:ca:fd:f2:
         c1:50:65:08:01:b9:c6:32:aa:ee:68:aa:a0:29:5c:17:73:79:
         cd:17:18:20:91:75:ee:9c:9e:09:de:25:cc:78:e6:73:a7:b0:
         7f:cb:f6:6b:8a:0d:ab:3b:9f:bd:15:7a:97:f3:f4:c9:87:bd:
         70:9e:c7:57:0e:1b:0d:04:72:9b:1f:93:6b:5b:2c:13:3d:a8:
         80:81:3b:d3:b6:e2:dd:9c:20:4d:35:14:96:8d:75:14:9e:dc:
         73:f6:c0:bf:5e:05:7e:0b:17:ab:d3:47:55:b4:47:5b:47:f2:
         78:d1:a0:a7:79:b1:18:d3:23:14:a2:e7:d9:9a:93:ba:d9:74:
         d3:ee:f4:95:5a:ea:fe:16:34:f6:6a:f2:57:b6:8d:f2:2c:bb:
         0a:20:d2:51:99:d1:3e:18:39:a5:42:6c:12:be:d7:d6:5d:af:
         00:76:22:86:18:16:61:fe:8a:f6:49:6c:1b:fe:87:5b:f4:50:
         fc:af:48:ee:25:d1:8f:bf:3b:9c:e3:30:31:73:da:e0:a8:27:
         76:70:e8:d6:07:53:f6:9f:06:97:85:b5:1c:b2:63:7a:cb:ac:
         69:08:9d:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvzIWc59wuqlMbhfA8SxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNGIwNmFiZjA3ZWVhYWMxMWIyNTlhMDhmZTE3MWQ2NmJk
MjgzMGQwHhcNMjYwNDE3MTQwMTMxWhcNMjYwNDE4MTQwMTMxWjAzMTEwLwYDVQQD
EygxY2U1NTk5NjViNGJjZjYxMDI3ODgyMTg2NzcwZWQ3NzRlZGFhNDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkEdUSPDw1/9SxHhMjy/PAntSUlj
UniKHomTfg3RBpmO4m6C1L+Q4PaP18S+bPKk3w8iBFdL9sbWWDT5qm7semNIKIWo
KLWFgA11v/zoz58XjZHXaOOnSjf6/NshiuIrCQA4clxkJMcOfmNhXl8KDeX4R9Wo
F0D1D2qf5T4jqRwRU519h8LjinV3d3FEcg80Kpw+8Mk3VsrU2+hXqTZoMFL8UKwF
5ldpP9A1bHoOqJIz2c4ZLRaZL8Emh6CwVb9AvTHtV3u5Yq5MXOSwuC6ftB7iXbIj
fo2Ou1Cc4HTE8sCEO0zE6kLQivtfwvCWwY4v8k9O/hGZ0RrKeDbnhWyPAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzlWZZbS89hAniCGGdw7XdO2qR1MB8GA1UdIwQY
MBaAFD5LBqvwfuqsEbJZoI/hcdZr0oMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtzR3FfQi02cXdSc2xtZ2otRngxbXZTZ3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ODM0ODctMmZjNS00MGY2LTk0Zjct
NTMwMTc3YzAyZGNjLzEvUGtzR3FfQi02cXdSc2xtZ2otRngxbXZTZ3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ODM0ODctMmZjNS00MGY2LTk0ZjctNTMwMTc3YzAyZGNj
LzEvUGtzR3FfQi02cXdSc2xtZ2otRngxbXZTZ3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgesY+rxb
A+flc5g7FIXNMij4Twqoe3yOiRvFRwMxlJL9yv3ywVBlCAG5xjKq7miqoClcF3N5
zRcYIJF17pyeCd4lzHjmc6ewf8v2a4oNqzufvRV6l/P0yYe9cJ7HVw4bDQRymx+T
a1ssEz2ogIE707bi3ZwgTTUUlo11FJ7cc/bAv14FfgsXq9NHVbRHW0fyeNGgp3mx
GNMjFKLn2ZqTutl00+70lVrq/hY09mryV7aN8iy7CiDSUZnRPhg5pUJsEr7X1l2v
AHYihhgWYf6K9klsG/6HW/RQ/K9I7iXRj787nOMwMXPa4KgndnDo1gdT9p8Gl4W1
HLJjesusaQidUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:46 2026 by rpki-client