Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File:                     PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier:          YlXyfWyt70EVECXP6v8osbFxtK88SzswuTL/PO223Cg=
Subject key identifier:   ED:47:3B:78:20:2F:08:70:D0:D0:4C:C5:80:E9:35:B7:BF:49:64:58
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer:       /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial:       019EC17FDC35C9B9924C1171DB69EF0E5ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number:          0D0A
Signing time:             Sat 13 Jun 2026 15:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:42 +0000
Files and hashes:         1: NIh5X-X78HnV8OD004txMFNbvjM.roa (hash: 94RoT+RPhL7upzRI0H0wJCdguwdTer9SXhjbnB7fpSY=)
                          2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: Dir+nlQiN8ow32i+KrzrRmmJ4uz8B0mDBF5tTLVOgPw=)
                          3: Tj-tszmPMOIdicR6OTt8f45Zya4.roa (hash: 38F17CYyilIBIc43xJOnaUQedazOErXtC4iNosY91dA=)
                          4: lFg7etq0z0bKQ1hcHnNof59N474.roa (hash: ur6JqNagspmUw5cjbkW9rFW1qoAf9GaSzlWdaC/M+ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:dc:35:c9:b9:92:4c:11:71:db:69:ef:0e:5e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
        Validity
            Not Before: Jun 13 15:00:42 2026 GMT
            Not After : Jun 14 15:00:42 2026 GMT
        Subject: CN=ed473b78202f0870d0d04cc580e935b7bf496458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:42:7c:b0:2b:9a:34:47:1d:01:26:68:58:
                    47:95:bc:5d:7a:bc:fe:74:9b:0c:1f:24:3b:12:13:
                    72:22:c3:23:5e:c2:dc:17:d8:06:18:c0:26:87:62:
                    46:18:52:bc:5f:33:9b:6d:8b:eb:63:59:d7:ed:50:
                    7d:3b:61:cb:38:a2:31:72:d4:b6:2d:74:f8:e3:c6:
                    d7:64:20:b9:4f:6a:19:a4:af:44:20:51:50:b7:ea:
                    22:22:26:a1:97:8c:9b:31:c6:41:1f:b9:24:f1:7c:
                    ac:d4:c0:bf:e9:7d:48:77:5d:10:2c:19:8b:c2:86:
                    23:7e:f7:b1:d4:14:c3:2d:5b:7f:6c:ed:04:26:53:
                    2b:64:86:73:00:8f:de:46:dd:db:3e:a4:65:5d:dd:
                    cc:b4:b2:a8:87:88:17:09:80:1a:84:8f:51:dd:f9:
                    5e:d7:ff:df:3a:0c:62:5d:9e:f1:66:c5:db:6a:b2:
                    45:ac:ff:09:6a:88:e7:a8:7a:78:4d:a6:9d:92:23:
                    a2:c8:f9:42:5f:22:87:fa:9f:ca:e2:bb:4b:56:18:
                    58:d0:9c:b1:6c:3a:ac:f7:f8:85:ea:16:30:06:00:
                    cd:85:88:a9:a6:68:c8:9b:eb:6a:43:e9:1c:64:71:
                    d6:77:f9:b3:16:7c:1e:43:44:8f:f2:27:77:61:51:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:47:3B:78:20:2F:08:70:D0:D0:4C:C5:80:E9:35:B7:BF:49:64:58
            X509v3 Authority Key Identifier:
                keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:05:5d:ee:27:ad:e5:a8:0d:50:e7:b1:09:37:6c:df:c5:25:
         38:94:80:31:cf:87:64:76:55:44:51:10:64:b4:b5:aa:a3:40:
         78:ea:09:0f:57:e6:11:45:6a:3f:73:b2:4b:16:b0:6b:07:ee:
         62:56:e2:10:6c:2c:e5:bd:13:0a:a8:5f:29:b8:b3:89:90:03:
         b5:a7:87:da:83:a7:88:6b:37:c6:11:cf:a7:fa:1b:3a:39:db:
         f1:4b:8d:f9:91:f8:6d:42:a7:c1:d1:4d:ca:2c:8b:b6:95:da:
         98:13:79:7b:7f:3b:ab:7d:d5:e8:9a:46:b6:40:b3:17:04:ee:
         c0:bf:2c:82:09:79:3b:3f:12:43:8b:4f:4e:e6:f8:54:ef:74:
         5b:58:a0:d1:cf:d9:c7:15:6a:1a:96:e5:26:cc:81:19:88:ab:
         20:92:de:d5:41:ea:00:79:0f:7b:0f:09:97:2d:a2:72:4f:b7:
         94:70:3f:78:93:ee:7f:51:b8:c6:cc:46:73:63:35:29:9b:06:
         f8:ba:04:12:4b:c2:5c:fb:ea:a7:71:f6:f4:28:92:65:19:a4:
         59:5c:b8:d8:35:9e:98:49:1b:67:81:da:1e:ad:62:c8:cc:11:
         a1:37:f5:de:45:56:c5:b2:65:40:f9:5e:0b:92:3e:ce:2b:22:
         c9:0a:3d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:56:53 2026 by rpki-client