Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File:                     PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier:          /KJHnWwIOYz2yWYFVX6dkQ5kltlHIxF++O2V5S8WlwQ=
Subject key identifier:   41:D7:FC:17:DB:EF:8E:16:68:C0:3B:75:C0:9B:C4:97:43:E6:87:63
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer:       /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial:       01A0DC175F1D136F8EB74DFB3B52847CFA03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number:          082E
Signing time:             Sat 26 Sep 2026 05:01:53 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:53 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:53 +0000
Files and hashes:         1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: iBDxPDo9nHmVvQYLBZHzjXSrf2N+94P2o3kA7GjT15c=)
                          2: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (hash: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:5f:1d:13:6f:8e:b7:4d:fb:3b:52:84:7c:fa:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
        Validity
            Not Before: Sep 26 05:01:53 2026 GMT
            Not After : Sep 27 05:01:53 2026 GMT
        Subject: CN=41d7fc17dbef8e1668c03b75c09bc49743e68763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:0b:36:73:b1:89:26:1f:37:fe:2d:a9:22:
                    58:f8:47:88:fd:49:43:bc:08:97:2e:37:66:f3:1b:
                    76:46:f8:da:77:2f:3c:af:ba:6f:a3:9c:93:68:6b:
                    4a:bb:bc:eb:79:1d:13:c7:4c:54:07:71:db:ca:5f:
                    13:04:65:0a:ab:56:89:bf:4b:89:26:92:26:36:9c:
                    e0:ef:55:c5:13:b2:3f:e1:17:8e:94:28:6b:40:a2:
                    75:42:e8:4f:25:71:f4:10:0f:1d:d7:30:7b:f0:ea:
                    d8:c4:22:86:88:23:15:80:b5:0e:c4:96:5d:de:14:
                    c4:7f:2c:ea:1e:f3:cf:f5:68:ec:e6:2b:e1:4b:6d:
                    d1:59:5f:8f:86:29:ff:db:bc:ef:01:43:85:02:0c:
                    d4:df:35:2e:8d:f4:0b:01:fe:e2:fb:20:b5:64:ce:
                    77:b2:fc:9e:de:09:ff:e7:b1:8d:e1:19:5d:de:41:
                    d5:5f:db:d7:4f:3b:e7:7e:04:fc:f5:50:c9:68:ad:
                    de:5e:82:76:b0:1c:f0:3a:62:75:9d:5a:74:9b:8b:
                    2c:e4:e3:86:04:8e:5f:03:e5:7d:36:aa:5c:02:ce:
                    47:f9:83:21:0b:9c:ba:38:58:df:ff:89:a2:b7:22:
                    68:bb:0a:53:7f:ee:6e:8a:40:fc:45:3b:4d:59:6e:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D7:FC:17:DB:EF:8E:16:68:C0:3B:75:C0:9B:C4:97:43:E6:87:63
            X509v3 Authority Key Identifier:
                keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:51:9c:04:21:85:ee:f7:d2:39:d8:eb:9c:2d:e4:9b:bc:f0:
         e3:72:8c:5c:2b:17:27:21:e4:38:dd:7b:97:ff:ef:81:8f:c7:
         04:22:98:54:d9:14:f2:73:27:c6:f4:77:a7:80:51:00:c4:75:
         b3:7b:b9:4c:06:85:ea:54:ff:38:53:b5:39:e0:8d:f5:70:5f:
         3b:85:13:bf:f1:62:b6:57:92:96:80:be:78:74:ce:cd:6c:74:
         45:67:62:06:cb:fd:5b:f5:6a:0e:69:e7:47:89:56:35:b6:d1:
         c3:f6:b7:43:9a:e8:5b:02:71:ed:9b:43:a4:6f:6b:6d:69:16:
         44:68:e3:ba:e8:3a:55:bb:60:55:d2:88:3b:34:3f:4c:e4:bb:
         cf:67:e1:8b:4f:9e:e4:19:39:d3:65:85:d8:8b:49:9d:d1:6a:
         f9:71:98:21:b1:93:a1:fe:a8:1e:00:d2:2e:81:ac:16:68:85:
         3f:57:c6:bf:56:3e:c8:db:5e:bb:bd:ad:dd:7c:f6:5c:c6:c9:
         ea:b2:cd:73:dd:fb:6c:32:dc:ac:19:0c:ee:9e:79:e9:bb:a1:
         47:e7:d4:54:f3:38:88:c0:6a:a8:30:97:c2:44:d6:fc:ba:48:
         5b:f0:7e:7d:48:8d:82:f5:92:e6:c6:06:f9:e2:19:74:47:dd:
         35:8f:d1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:48:06 2026 by rpki-client