Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
File:                     PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json)
Hash identifier:          WnhmLSqTJCqb86U9NBMybjUnXSrONKK22DDGQWaI288=
Subject key identifier:   32:77:50:D5:A4:80:BB:78:82:8B:88:C3:34:09:1E:E2:A5:EC:C8:BE
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Certificate issuer:       /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial:       019D9BF591CDD23AE594598E0DB52EE7D3A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
Manifest number:          0358
Signing time:             Fri 17 Apr 2026 15:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:55 +0000
Files and hashes:         1: 74xdlthipiPwmQdVtWpcn9yMpH0.roa (hash: p90jbIWz3kNDEWy5wNiYtEyIp2vg1/zc3mIlW5yWFFQ=)
                          2: B1ztFUqJj0TJYJvOExVRSQmIl5A.roa (hash: v/mWzHGtLLbQQyMt4t++cIwVty9wjpt9ae5rJyBn1gU=)
                          3: DsSKa3jlsMcS8PZEA_lBBDaVuS0.roa (hash: sCNeXSE7wm7FbJmQ9E5zHLdMIcgEdKSApg1Y+J8Rl58=)
                          4: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: UHXpkHYDK1eahyLiCWgEpUWgsV2/4HkucCwmp5iH400=)
                          5: cCVfq15MkQwWtM1jPJjocJnH1Wc.roa (hash: r85fd8Uvcz/76R6OT32K3Lqo+sirunePwgftHCYO6ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:91:cd:d2:3a:e5:94:59:8e:0d:b5:2e:e7:d3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
        Validity
            Not Before: Apr 17 15:00:55 2026 GMT
            Not After : Apr 18 15:00:55 2026 GMT
        Subject: CN=327750d5a480bb78828b88c334091ee2a5ecc8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:b4:57:b2:b0:56:07:44:29:d0:6f:09:ff:
                    50:9b:bb:96:cf:a2:80:cc:6d:88:52:29:cd:78:7c:
                    80:0b:ad:e7:dd:88:1a:fb:2e:90:99:44:0f:a1:37:
                    c2:a6:a2:23:24:55:08:e6:7c:e4:47:a1:c9:d8:0c:
                    89:79:3c:2b:06:ff:39:a6:ce:0c:69:51:3e:52:92:
                    58:05:bb:40:a2:0e:df:db:c1:80:4b:9a:18:f7:c1:
                    11:37:66:59:00:6f:30:88:df:02:4d:b4:ed:b9:fc:
                    ac:c1:a5:26:fa:56:63:bf:d5:8f:b5:94:50:01:bc:
                    56:1f:0d:20:67:6b:7c:56:55:fc:44:5b:27:9b:23:
                    26:7d:0d:3b:1b:b6:79:59:2c:d3:b1:8b:d8:2b:66:
                    f8:be:26:e0:7f:b8:c7:de:d3:73:f3:9e:a0:19:02:
                    b1:7c:de:51:37:0f:a3:ad:10:e2:f6:4f:0f:a0:c4:
                    c3:7e:2a:b5:25:6f:a6:64:58:da:8f:33:7b:4e:81:
                    4d:91:41:b1:07:aa:67:6c:54:2e:2f:7d:95:b0:e5:
                    cd:b8:67:90:58:dc:9f:4d:bf:dc:86:6a:55:34:a8:
                    31:15:58:b1:17:ff:7b:fb:78:68:60:8b:44:bb:9b:
                    3f:0d:15:62:3a:05:e0:bb:f2:e9:9b:7d:c1:8c:16:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:77:50:D5:A4:80:BB:78:82:8B:88:C3:34:09:1E:E2:A5:EC:C8:BE
            X509v3 Authority Key Identifier:
                keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:2c:bc:9d:d1:bb:10:f4:02:3c:6e:ae:ff:f9:db:ac:7e:6a:
         4c:41:b2:26:ba:9c:2d:58:0b:76:cf:8a:d8:e4:92:ed:ff:42:
         db:fe:ab:d4:fd:5d:a3:4c:93:28:53:5e:da:4a:c7:11:4c:3e:
         a1:54:c3:f6:02:ba:ca:94:26:d9:d9:39:ed:9d:6a:41:78:02:
         3f:b9:e0:91:1d:85:2b:8f:46:2f:ab:53:64:89:e2:21:d6:39:
         d5:b1:6d:9b:e6:da:47:cc:c7:aa:69:ce:6f:08:aa:ce:88:36:
         be:af:e7:86:c4:2d:18:48:be:75:43:fc:0f:ba:41:f4:7a:62:
         8f:74:39:13:f8:29:e6:60:c2:ef:3b:e0:8f:94:fd:70:57:77:
         99:05:79:31:6c:e9:06:59:d8:e8:bc:33:47:0c:58:74:26:28:
         8b:c4:ab:72:df:66:27:f4:81:4a:52:5e:e7:99:d0:d9:59:d3:
         04:90:65:5b:a8:03:bf:ec:13:f4:36:da:58:73:d2:e2:b7:05:
         8e:3e:39:fa:ea:bf:f0:f9:2d:fe:98:c1:5e:26:90:5d:22:ea:
         5b:8d:73:83:47:28:c7:5d:17:ce:14:21:f9:54:e1:8e:c7:fa:
         76:7a:ea:67:68:e0:e9:24:3f:3d:70:76:39:35:fb:8f:28:69:
         64:c2:b6:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9ZHN0jrllFmODbUu59OmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMjI2NDNiYTZhMGVhZWY1NzMyOWJmNWJkYzkwYjMxYzM4
NmY4YTcwHhcNMjYwNDE3MTUwMDU1WhcNMjYwNDE4MTUwMDU1WjAzMTEwLwYDVQQD
EygzMjc3NTBkNWE0ODBiYjc4ODI4Yjg4YzMzNDA5MWVlMmE1ZWNjOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9C0V7KwVgdEKdBvCf9Qm7uWz6KA
zG2IUinNeHyAC63n3Yga+y6QmUQPoTfCpqIjJFUI5nzkR6HJ2AyJeTwrBv85ps4M
aVE+UpJYBbtAog7f28GAS5oY98ERN2ZZAG8wiN8CTbTtufyswaUm+lZjv9WPtZRQ
AbxWHw0gZ2t8VlX8RFsnmyMmfQ07G7Z5WSzTsYvYK2b4vibgf7jH3tNz856gGQKx
fN5RNw+jrRDi9k8PoMTDfiq1JW+mZFjajzN7ToFNkUGxB6pnbFQuL32VsOXNuGeQ
WNyfTb/chmpVNKgxFVixF/97+3hoYItEu5s/DRViOgXgu/Lpm33BjBaZgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ3UNWkgLt4gouIwzQJHuKl7Mi+MB8GA1UdIwQY
MBaAFDwiZDumoOrvVzKb9b3JCzHDhvinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUt
ZmExNDg2ZWE3OThjLzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83YWVkOTktYTQ3ZC00ZWM3LWI0YzUtZmExNDg2ZWE3OThj
LzEvUENKa082YWc2dTlYTXB2MXZja0xNY09HLUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiy8ndG7
EPQCPG6u//nbrH5qTEGyJrqcLVgLds+K2OSS7f9C2/6r1P1do0yTKFNe2krHEUw+
oVTD9gK6ypQm2dk57Z1qQXgCP7ngkR2FK49GL6tTZIniIdY51bFtm+baR8zHqmnO
bwiqzog2vq/nhsQtGEi+dUP8D7pB9Hpij3Q5E/gp5mDC7zvgj5T9cFd3mQV5MWzp
BlnY6LwzRwxYdCYoi8Srct9mJ/SBSlJe55nQ2VnTBJBlW6gDv+wT9DbaWHPS4rcF
jj45+uq/8Pkt/pjBXiaQXSLqW41zg0cox10XzhQh+VThjsf6dnrqZ2jg6SQ/PXB2
OTX7jyhpZMK2CQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:15:09 2026 by rpki-client