Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
File:                     PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json)
Hash identifier:          jVMUbAtsQ701ijn6QiMteSXdTMwOATO+bgAdhHvBNGM=
Subject key identifier:   07:6B:66:71:27:EC:BD:65:32:6A:B2:21:93:FF:90:03:6D:04:4B:C9
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Certificate issuer:       /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial:       019CAE6C1F664077CBD2CB28C95B55DDB0E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
Manifest number:          02DD
Signing time:             Mon 02 Mar 2026 12:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 12:00:47 +0000
Files and hashes:         1: 74xdlthipiPwmQdVtWpcn9yMpH0.roa (hash: p90jbIWz3kNDEWy5wNiYtEyIp2vg1/zc3mIlW5yWFFQ=)
                          2: B1ztFUqJj0TJYJvOExVRSQmIl5A.roa (hash: v/mWzHGtLLbQQyMt4t++cIwVty9wjpt9ae5rJyBn1gU=)
                          3: DsSKa3jlsMcS8PZEA_lBBDaVuS0.roa (hash: sCNeXSE7wm7FbJmQ9E5zHLdMIcgEdKSApg1Y+J8Rl58=)
                          4: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: rAMyPIL1J+giSo+l7kd+wIXyMmJHqWjvoxGpltxUAz8=)
                          5: cCVfq15MkQwWtM1jPJjocJnH1Wc.roa (hash: r85fd8Uvcz/76R6OT32K3Lqo+sirunePwgftHCYO6ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:1f:66:40:77:cb:d2:cb:28:c9:5b:55:dd:b0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
        Validity
            Not Before: Mar  2 12:00:47 2026 GMT
            Not After : Mar  3 12:00:47 2026 GMT
        Subject: CN=076b667127ecbd65326ab22193ff90036d044bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:ca:b6:75:6e:1c:35:06:d2:a8:8b:34:f4:
                    70:e9:ac:e0:ca:f9:83:45:06:83:51:c7:df:cb:2c:
                    67:ec:be:7c:27:c5:16:b4:f2:75:bb:33:24:28:65:
                    7f:87:54:82:85:4b:1f:e0:18:82:df:94:a4:14:d7:
                    35:23:1d:f8:3d:8f:7c:fc:17:28:5c:65:26:21:b3:
                    b7:fa:3f:3f:6c:c8:f9:56:5e:16:bc:ad:a1:39:e4:
                    21:b3:3b:7c:b6:8b:55:eb:30:63:23:28:ac:06:84:
                    e5:d4:74:58:3a:44:1a:1f:70:71:ca:14:d1:e3:8e:
                    05:99:35:ea:92:dc:93:8f:67:15:8b:93:a0:f9:5a:
                    ae:bc:ac:e5:63:e4:61:3e:8b:38:20:02:b3:c8:f4:
                    2f:16:92:6a:ba:2e:10:bc:a3:8e:37:23:bc:57:a8:
                    32:ea:52:33:33:2d:03:7c:b7:53:4f:68:7e:5b:6d:
                    82:d6:d5:63:4c:a3:96:db:2a:f7:96:7c:d7:61:bd:
                    aa:4f:20:77:b1:dc:df:85:3b:43:dd:82:4d:e8:c1:
                    ec:93:bf:6b:e9:9c:40:23:bf:75:76:67:cd:af:38:
                    fb:e5:a1:ca:79:3c:6b:92:5d:da:c8:f2:0e:39:eb:
                    ed:99:3c:3a:fb:53:d3:44:b8:c4:97:5b:b0:2d:8a:
                    f6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6B:66:71:27:EC:BD:65:32:6A:B2:21:93:FF:90:03:6D:04:4B:C9
            X509v3 Authority Key Identifier:
                keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f8:a7:64:18:d8:94:23:4d:45:46:56:e1:f5:e1:e2:da:76:
         83:80:98:54:ef:a0:06:00:f4:4b:44:d6:01:94:8e:1a:7a:4a:
         45:04:d7:5b:28:7e:ba:e3:fa:52:27:37:05:2a:3d:d5:de:38:
         f4:98:73:44:1b:f8:84:d4:08:eb:63:f5:98:69:93:68:3f:ca:
         d8:0c:57:fd:0b:04:3f:1c:2f:50:31:2c:a9:29:de:e3:68:28:
         01:2c:65:97:f2:a5:76:2c:67:6b:d1:cc:5f:19:7a:c4:71:96:
         81:a8:d2:3c:8b:10:50:29:cd:24:11:eb:a8:1d:86:a7:6c:a8:
         28:14:07:4b:69:55:19:89:73:d2:0e:62:2d:f9:67:d8:ab:64:
         1f:bc:36:88:04:1a:a9:e9:c2:17:ba:22:2b:d2:42:ca:34:e6:
         64:6d:17:5a:3d:ab:69:78:a0:9c:ef:25:77:7f:4f:ff:49:18:
         68:df:79:b8:7d:46:66:33:c0:7b:4e:2d:9f:68:85:72:e0:70:
         67:51:8a:76:24:ec:b0:4f:43:98:aa:20:14:a5:cf:13:01:14:
         0e:31:ff:e8:66:10:2a:dd:4d:a1:10:7c:4f:cb:26:71:5e:a0:
         d4:87:7b:47:fa:bb:45:a8:d3:d5:95:af:cc:12:d3:74:1f:56:
         95:75:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:20 2026 by rpki-client