Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
File:                     PcecfAfUNfoA8sfKCx5QZk2gTUg.mft (raw, json)
Hash identifier:          5YEs49A+S4638IsbPaLJfSQp/fMOWg+41IEu7WEeRfE=
Subject key identifier:   26:52:A1:2E:6C:C9:8B:D2:9C:20:CB:99:CF:91:C2:1F:F2:00:90:66
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Certificate issuer:       /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial:       019EBF5AE7A6F4473821E01B9D88B372B56C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
Manifest number:          F0
Signing time:             Sat 13 Jun 2026 05:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:06 +0000
Files and hashes:         1: PcecfAfUNfoA8sfKCx5QZk2gTUg.crl (hash: RKL1hvxK+fDIGTDjXJgULB7DGHBw7n6aH2F1EVmOdG4=)
                          2: Yv4GaEJIAdTbY-p5QqYedKqtIAM.roa (hash: tNr0fHXdSpSBz2ryPJ1QU5+Ji6Ji73iPqme/JR8I6kE=)
                          3: txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (hash: Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:e7:a6:f4:47:38:21:e0:1b:9d:88:b3:72:b5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
        Validity
            Not Before: Jun 13 05:01:06 2026 GMT
            Not After : Jun 14 05:01:06 2026 GMT
        Subject: CN=2652a12e6cc98bd29c20cb99cf91c21ff2009066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9c:e9:97:3f:56:90:03:3e:46:78:27:ce:8e:
                    48:84:02:24:8d:40:c5:df:62:62:51:8a:ef:3c:20:
                    34:d2:fb:f6:5e:1c:67:17:39:71:66:01:c6:78:23:
                    20:b9:b7:63:65:ff:2c:0b:ca:db:ce:d2:34:06:1a:
                    90:a9:31:58:76:2e:4d:b4:9e:d8:05:80:82:22:07:
                    d8:bb:4c:f6:52:5b:a9:17:7f:f9:8e:d1:ac:d9:a2:
                    80:7a:3a:9a:72:71:2b:4f:33:4a:b1:d8:cc:27:14:
                    95:2e:9f:5c:66:cf:fe:56:98:b2:b6:2b:6f:65:e0:
                    9e:69:ab:41:d6:7c:2f:fb:87:0e:19:0e:c5:8b:cd:
                    f2:7c:d3:d6:f7:f9:ab:52:c2:79:54:eb:d2:2e:ec:
                    bd:9b:4c:7a:e1:ab:03:23:6e:d0:94:d6:e8:b8:f4:
                    7a:e8:9a:a9:28:f1:77:9a:5e:e9:3b:fc:19:30:5e:
                    a5:00:48:8f:bc:0b:8e:9e:8d:ac:0f:e4:44:17:63:
                    ea:73:bc:00:d9:67:a8:f1:3e:6e:ff:8c:48:98:7d:
                    1b:ef:e8:43:a1:26:16:9f:78:fa:ad:5a:0e:ab:e0:
                    1e:aa:12:e2:55:b1:6a:93:2a:62:3a:48:6c:5d:2d:
                    7d:22:dd:1f:f0:89:2a:fe:b5:0a:e8:be:da:11:07:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:52:A1:2E:6C:C9:8B:D2:9C:20:CB:99:CF:91:C2:1F:F2:00:90:66
            X509v3 Authority Key Identifier:
                keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b0:46:24:03:03:7d:4c:d7:ec:af:e9:22:68:98:33:e5:e9:
         f3:62:9e:9a:6f:8a:e3:98:fc:d7:21:dd:c9:d0:50:8d:57:e1:
         1b:2d:71:2f:a0:dd:49:a2:b3:7b:a6:4a:e3:68:1e:08:8c:dd:
         9e:59:b8:13:2a:40:86:09:2d:51:00:16:e8:7c:e5:17:cf:d5:
         87:26:ba:9e:05:76:14:65:ed:e4:b6:1e:ea:e9:f9:11:9a:8a:
         a0:2f:c8:48:86:00:48:0a:3d:44:80:da:6a:db:0f:d9:76:56:
         84:43:fc:5f:9a:16:b7:c5:7c:5e:f0:81:61:38:8f:7b:a7:f2:
         b9:c8:20:85:6c:96:73:39:4c:40:cc:f6:3f:90:ea:27:b4:35:
         b1:1a:21:f9:32:dc:10:a9:af:12:e3:4a:d0:30:e0:67:d2:0e:
         17:f8:04:05:2a:71:24:df:34:07:09:ae:08:b4:b1:6b:a8:c9:
         3f:5e:b0:41:d7:92:40:b6:f1:f2:d5:69:d0:19:87:70:bc:8a:
         80:b9:cd:cf:29:68:03:db:2b:36:64:85:eb:14:fe:00:71:13:
         f4:fd:ef:ef:05:69:42:b8:db:c9:e6:5d:c7:33:e6:a5:e6:48:
         d4:a8:37:51:f7:ce:f3:da:93:1b:85:94:4a:f5:b4:3f:d3:72:
         2c:31:14:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:55 2026 by rpki-client