Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
File:                     PPYV8G0jIox2moX68FEDk9Bk4OA.mft (raw, json)
Hash identifier:          cr0VmYC7MZXuU64iDh0GcP0M46WyAOXFrDySRav8hQA=
Subject key identifier:   4D:79:E8:5A:9F:E2:2B:A3:CC:08:86:F4:C5:F9:07:80:AE:35:78:03
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Certificate issuer:       /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial:       01A0CB1552E70FA511A717E705F7C8AFCF68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
Manifest number:          EF
Signing time:             Tue 22 Sep 2026 21:46:07 +0000
Manifest this update:     Tue 22 Sep 2026 21:46:07 +0000
Manifest next update:     Wed 23 Sep 2026 21:46:07 +0000
Files and hashes:         1: 2XSKC5_2aJdXis0i0E32cdzCcnE.roa (hash: WPJFZgYN6ewzMbdHq7cQDqzD7p7iGCXVy5MenFdGn80=)
                          2: 4Rp0pYTPzmcpl3vtXAjsk3xrRxU.roa (hash: kFKfBo1lMckvkQ9+DKJA3J99ay1w596AtH69ok/038k=)
                          3: Cxczu6pG_j9G8YgyCFhNWqwjOHY.roa (hash: WwxhEZK9JwB3xoHnIPrE7wXjUmLlZC5xHb6l9AOXBgc=)
                          4: IhnU6UFpK0ZZZ7JoJGYFZAdvlLk.roa (hash: ZMMMD3tfRdZSRuiATRZh0enby+U17qaQ+RlXaiCW2Ao=)
                          5: MHu_ynKw54i57PkfP91j_XPdEeg.roa (hash: WRB6bwylw9UysvUsImnWlpj5yXSlmRF+MdsWxiFJRMs=)
                          6: PPYV8G0jIox2moX68FEDk9Bk4OA.crl (hash: O3Amsp0SmFxDqaFVfJctG+92P6TU/jSq+5R0in3mBJc=)
                          7: U47iKHcrgk6MFqkfqnJiGQZYHQU.roa (hash: TFdMzY4JMZ5lpBgywZ+gPmSJF7oZ1XI4SO9S+xKiraI=)
                          8: oxs1tuSUXUJmLqoL27S7ChGx4fM.roa (hash: 9KLCRWwLN8lTVB3jayQYsnUAOfMC7o7LYOk7o51/yYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:15:52:e7:0f:a5:11:a7:17:e7:05:f7:c8:af:cf:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
        Validity
            Not Before: Sep 22 21:46:07 2026 GMT
            Not After : Sep 23 21:46:07 2026 GMT
        Subject: CN=4d79e85a9fe22ba3cc0886f4c5f90780ae357803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9b:c7:be:62:44:01:b1:5f:55:dc:16:5a:cd:
                    8c:1f:ee:4d:0f:1d:62:b6:c2:66:65:9a:d0:4d:43:
                    5d:30:4f:57:34:d8:45:a9:e7:a9:e1:09:e6:dd:5d:
                    fa:f8:8d:b6:c7:c7:7c:d2:16:83:42:bf:cc:13:d6:
                    46:e0:94:c8:5a:b1:57:0b:12:ea:5f:e6:c7:c2:0a:
                    f8:3d:77:ce:a6:18:01:50:78:74:a5:bb:fc:7c:ee:
                    e3:e0:8b:ba:e4:ed:f6:4d:21:72:af:ea:84:cf:7a:
                    88:68:a2:5e:44:21:16:b9:2f:27:03:22:59:f8:50:
                    a0:42:d5:7a:a7:9a:2e:4a:55:be:14:d2:3f:0a:05:
                    d0:57:a3:51:e8:d8:9f:cd:13:7c:6f:c4:57:e5:80:
                    87:23:97:86:97:12:90:bc:4a:55:1e:25:da:91:6b:
                    b1:de:3b:66:47:ae:84:ad:a9:f9:a7:71:ee:6e:7d:
                    67:cb:c9:bb:90:34:70:13:d1:eb:b8:8d:c3:ed:5f:
                    ae:b3:f6:61:51:47:19:55:d8:fd:d3:d5:17:6c:70:
                    c0:cc:05:9d:5d:56:cf:f9:7a:8b:41:28:e9:9c:a5:
                    de:33:fa:75:60:02:b6:b9:dc:0b:c2:2f:fc:93:b2:
                    50:7e:85:7c:ff:9f:c5:38:41:c5:f4:20:b1:41:de:
                    1c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:79:E8:5A:9F:E2:2B:A3:CC:08:86:F4:C5:F9:07:80:AE:35:78:03
            X509v3 Authority Key Identifier:
                keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:23:25:4a:7d:e4:99:90:68:94:ba:d8:85:a7:98:44:e4:49:
         d9:de:f9:5e:03:cc:0d:65:66:ac:64:da:98:cd:ab:37:c8:86:
         df:d8:85:58:94:44:d1:80:45:b3:b2:25:11:01:48:4a:a8:12:
         9f:38:ad:ca:60:e8:11:7b:0a:f0:da:1a:33:30:93:2f:3c:5e:
         4a:bf:3f:96:8b:c0:0d:58:4f:fc:26:2f:2c:52:df:56:df:79:
         ed:2b:2d:7e:28:26:b0:23:e6:bf:58:9b:96:57:63:c2:84:78:
         a4:f2:84:b4:36:ed:a5:cc:55:26:18:34:e9:ed:13:54:78:12:
         80:e0:f2:b7:d6:68:21:3a:db:b9:ce:5d:06:49:82:5d:e6:5d:
         2d:4f:39:7d:5d:eb:15:94:0a:ed:bc:5a:39:82:1a:a3:bc:ac:
         91:54:07:64:15:ba:8c:19:a1:f2:24:f4:ff:b9:0e:53:1a:ec:
         b7:dd:17:ab:bb:77:ac:e0:a5:4a:8c:61:6a:62:30:98:1f:2f:
         f0:69:2a:cc:02:88:96:3a:ee:06:93:ef:d2:50:d3:e2:7e:5d:
         97:16:23:2e:cd:6a:3a:e6:9c:f7:29:fd:39:02:4c:d0:37:1f:
         36:46:fc:a9:98:9a:f6:18:e8:1e:66:62:29:d0:1f:04:2f:45:
         15:8f:55:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:56:36 2026 by rpki-client