Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File:                     PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier:          MytEyc+TIhK3fNQlYFpo1qgBRH8woY1IuiJwt0/8B6k=
Subject key identifier:   81:29:04:6C:31:AB:9F:79:E6:C6:CB:69:E7:DE:B7:78:D8:DF:CE:C3
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer:       /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial:       019FAB2C27F0E06F95F1E9BC209B7241E7A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number:          0D83
Signing time:             Wed 29 Jul 2026 00:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:25 +0000
Files and hashes:         1: NIh5X-X78HnV8OD004txMFNbvjM.roa (hash: 94RoT+RPhL7upzRI0H0wJCdguwdTer9SXhjbnB7fpSY=)
                          2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: UhmMzEMsnMYFEEkALgR4h2rumRQ1M3UJRIdAmfQqIFk=)
                          3: Tj-tszmPMOIdicR6OTt8f45Zya4.roa (hash: 38F17CYyilIBIc43xJOnaUQedazOErXtC4iNosY91dA=)
                          4: lFg7etq0z0bKQ1hcHnNof59N474.roa (hash: ur6JqNagspmUw5cjbkW9rFW1qoAf9GaSzlWdaC/M+ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:27:f0:e0:6f:95:f1:e9:bc:20:9b:72:41:e7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
        Validity
            Not Before: Jul 29 00:00:25 2026 GMT
            Not After : Jul 30 00:00:25 2026 GMT
        Subject: CN=8129046c31ab9f79e6c6cb69e7deb778d8dfcec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:a0:58:7d:3e:9c:9e:6d:a0:2e:bc:3b:be:
                    59:56:27:f4:7e:8c:64:aa:a4:29:38:03:4d:80:6b:
                    81:f5:8b:a7:27:18:de:be:6b:23:bc:25:3d:b7:d9:
                    a2:a0:c0:12:75:1e:f3:cf:49:18:cb:ba:19:c2:f2:
                    fe:f2:fc:d0:fd:1d:b3:8f:b4:70:33:5b:98:9c:bc:
                    b1:10:bb:d0:6f:2f:1b:92:03:a1:c6:35:b7:ec:ae:
                    ff:96:7d:0f:35:ef:c4:b1:b0:ae:38:b4:86:7f:b2:
                    ed:65:9c:41:d2:b0:16:89:a2:fe:c4:d8:6f:72:6a:
                    31:70:70:f0:3d:a7:5e:27:07:9d:2b:f6:7c:e1:58:
                    c2:5e:cf:9c:04:4c:8b:01:1f:12:3d:4e:b9:c5:ea:
                    57:53:af:5c:bd:2d:32:1b:93:26:4a:b0:cb:b2:cd:
                    b0:a6:b5:f7:ea:ba:0e:18:00:9f:b1:d7:1b:aa:71:
                    68:62:b3:c8:55:cc:cd:24:82:9c:55:70:a9:5d:81:
                    69:c5:01:97:78:13:74:7c:7e:0f:a1:ae:89:fe:ea:
                    b7:cc:e5:2b:a9:0d:4d:cd:22:4a:66:da:bb:dc:49:
                    7c:86:75:91:70:20:65:7d:11:19:b8:af:3f:86:46:
                    10:7f:2b:da:8e:69:3b:c5:15:94:b2:17:05:7d:82:
                    9f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:29:04:6C:31:AB:9F:79:E6:C6:CB:69:E7:DE:B7:78:D8:DF:CE:C3
            X509v3 Authority Key Identifier:
                keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:65:f4:4e:0c:1b:b9:19:45:b0:bc:35:d9:d3:fb:9c:2a:a7:
         32:bf:69:d2:20:aa:29:ba:25:48:24:0d:74:6e:bd:a9:bc:2d:
         d8:1b:26:3d:c1:2c:f4:13:0e:b5:e2:45:dd:73:c1:cd:17:78:
         b2:16:58:15:ef:e6:2a:56:b1:6d:72:93:bb:73:92:a0:a9:ca:
         4a:72:73:ba:ef:d8:98:04:0e:42:fd:38:ed:75:a7:ca:19:77:
         e2:4a:94:aa:ed:b7:78:77:05:64:06:d9:b6:74:54:c1:70:b8:
         72:1b:bb:36:3b:80:89:68:4a:03:bc:68:1c:7d:23:18:05:92:
         4f:68:68:bb:6e:be:ab:74:1d:0b:b6:12:4b:fa:ae:73:84:55:
         80:7b:47:34:de:fd:de:d1:d4:b3:22:c4:16:e8:7b:4d:42:be:
         61:4e:f7:a3:07:3e:6c:f6:10:79:2d:38:68:d2:17:11:73:62:
         28:2f:5e:be:82:12:c6:9e:df:57:b9:34:b1:be:9e:a1:0a:e2:
         79:fe:21:10:2d:8f:08:ca:06:d3:77:a9:88:e7:96:11:a7:53:
         c6:b7:c9:c9:73:ef:4f:47:79:cf:d4:f6:cc:8b:8c:8a:ac:3d:
         f1:e8:2e:d3:5b:13:4b:c8:93:1f:13:df:69:27:d9:00:39:e0:
         4c:77:67:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:09:08 2026 by rpki-client