Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
File:                     PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json)
Hash identifier:          ZgC+5bBMeX+D7tEYX/9bLq3LywWxViSd19IAQ/L3z94=
Subject key identifier:   BC:37:F0:6D:5B:E6:3E:3E:2E:B6:BA:1C:AB:1F:34:9E:E4:27:7B:4C
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Certificate issuer:       /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial:       019EBF91817F1920C14F09083EB24EC9E9E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
Manifest number:          03EF
Signing time:             Sat 13 Jun 2026 06:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:44 +0000
Files and hashes:         1: 74xdlthipiPwmQdVtWpcn9yMpH0.roa (hash: p90jbIWz3kNDEWy5wNiYtEyIp2vg1/zc3mIlW5yWFFQ=)
                          2: B1ztFUqJj0TJYJvOExVRSQmIl5A.roa (hash: v/mWzHGtLLbQQyMt4t++cIwVty9wjpt9ae5rJyBn1gU=)
                          3: DsSKa3jlsMcS8PZEA_lBBDaVuS0.roa (hash: sCNeXSE7wm7FbJmQ9E5zHLdMIcgEdKSApg1Y+J8Rl58=)
                          4: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: RZj5eClcColS0sZXKwRLlss7ROk+X87rvrUBnWIlmPM=)
                          5: cCVfq15MkQwWtM1jPJjocJnH1Wc.roa (hash: r85fd8Uvcz/76R6OT32K3Lqo+sirunePwgftHCYO6ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:81:7f:19:20:c1:4f:09:08:3e:b2:4e:c9:e9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
        Validity
            Not Before: Jun 13 06:00:44 2026 GMT
            Not After : Jun 14 06:00:44 2026 GMT
        Subject: CN=bc37f06d5be63e3e2eb6ba1cab1f349ee4277b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fc:b6:1e:b3:46:ac:84:4b:58:5b:c4:21:27:
                    5c:aa:07:f4:11:6f:d6:0e:b1:76:a9:8a:88:03:92:
                    30:51:ea:37:3a:7a:7b:0e:16:fb:c0:55:12:f8:0e:
                    63:52:74:be:29:3c:d0:ac:7e:be:f0:30:41:31:38:
                    b0:28:7a:65:0e:24:5f:10:60:ce:80:2b:65:25:8c:
                    34:cb:ca:fe:fe:b4:18:53:26:40:3a:06:44:c0:aa:
                    65:b2:5e:19:54:2e:03:5b:2a:1a:96:ed:bf:03:ff:
                    de:7f:1c:c4:ef:6c:53:1e:a4:4d:81:56:3b:7c:d4:
                    99:ff:ca:b8:ae:1b:dd:bd:88:b0:6b:d2:15:c0:bc:
                    aa:0e:10:ca:09:60:6e:1f:a7:0c:f5:fd:65:d3:c2:
                    04:bb:58:14:69:f0:13:f0:57:7c:7f:d0:d4:f4:5f:
                    f3:71:2d:df:19:ff:24:79:e3:b7:e8:bf:66:83:aa:
                    bc:41:60:39:27:19:ba:df:ad:df:67:e3:83:e2:04:
                    d8:dc:fd:e5:70:8c:39:c9:c5:3f:89:25:43:b2:09:
                    35:d8:c1:4e:5b:4b:1b:a1:07:93:62:3e:81:ab:5e:
                    15:13:31:13:b8:b3:9c:15:c5:9d:e2:70:9c:40:e4:
                    10:d0:9a:3a:ae:bd:f8:d8:68:f6:eb:f6:5d:e7:a2:
                    00:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:37:F0:6D:5B:E6:3E:3E:2E:B6:BA:1C:AB:1F:34:9E:E4:27:7B:4C
            X509v3 Authority Key Identifier:
                keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:95:3e:a6:22:04:e9:88:f7:8f:18:ba:b1:cb:a0:be:c1:d4:
         f1:81:65:62:07:43:ab:d9:9a:05:7b:1f:9e:5b:fa:9f:e8:b5:
         11:37:50:af:8d:f8:a6:fe:77:b0:32:ef:fa:d3:24:42:81:37:
         fe:2d:fa:49:a1:73:c5:4e:f9:7f:40:b9:be:cb:56:97:ef:08:
         0a:3f:84:b7:dd:6a:bc:1d:73:94:04:5a:55:c0:8b:97:33:71:
         18:22:a7:07:b7:a9:99:87:14:70:36:67:65:ad:7c:b6:59:50:
         d8:ea:80:a5:ad:e7:0b:aa:4d:2a:48:ed:6b:a0:ca:98:e7:28:
         a2:90:65:33:fc:f0:9e:32:0a:8b:7b:6f:7d:42:83:8e:2d:d2:
         16:95:67:79:88:38:64:29:f3:75:05:11:1c:0e:dc:c4:85:c4:
         2c:e0:6e:4f:3d:b8:b9:4d:85:6f:17:4b:50:77:11:53:2c:2b:
         f1:76:ff:b8:c8:f8:84:65:53:31:59:3a:77:e3:87:61:ea:ff:
         30:e0:95:a0:f4:e9:6b:b3:49:91:e3:70:da:93:de:0b:e9:97:
         5d:a8:60:78:6d:71:21:6c:02:14:68:d9:39:da:e5:6c:42:66:
         ee:14:a3:ee:9b:1e:39:34:8f:2f:d3:55:cc:8d:7d:6c:5a:88:
         a3:93:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:35:57 2026 by rpki-client