Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File:                     PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier:          yG9fLYe5fST+xBguv2S/M1HkikstUo/8/BnC0ADfYf4=
Subject key identifier:   65:CB:50:E3:3B:E2:E5:EB:54:ED:9A:4B:B6:18:1A:2D:9D:0F:83:73
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer:       /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial:       019CAC46BCFF88FE73327972CC6D37D6A486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number:          0F55
Signing time:             Mon 02 Mar 2026 02:00:42 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:42 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:42 +0000
Files and hashes:         1: 06Cr8RrUW-YBGOEDpWiR6_6QPIo.roa (hash: FnV3E+psZ9RL4Wm0ZPwY8F8XZvQTXZZNm+8KVQlkwik=)
                          2: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: 8Bf0eF3NdDMk7Ro/D7pGrHpROhVe5Hi7DfpWfncQ3io=)
                          3: pjWOXlpE0b5S_0JGvMVFcwdSSJ8.roa (hash: 3zMko1kxbxLAZVlJgNvxrbIK5O6rX6hf1z6N9QMjOGo=)
                          4: unkGkB8qp1620UotFb6yhd6x1oU.roa (hash: +yKx8BTwISlKJwgwtVb1Joc3L3N9AZY0nFPc0pnvQJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:bc:ff:88:fe:73:32:79:72:cc:6d:37:d6:a4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
        Validity
            Not Before: Mar  2 02:00:42 2026 GMT
            Not After : Mar  3 02:00:42 2026 GMT
        Subject: CN=65cb50e33be2e5eb54ed9a4bb6181a2d9d0f8373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:fe:39:1f:cd:b1:52:75:27:5a:f5:4c:2a:
                    8f:6e:84:5e:fa:1d:ed:70:ad:53:91:d2:32:2e:34:
                    8a:f9:55:0b:13:94:72:8c:bf:4b:0a:ae:4b:0d:cf:
                    ef:18:66:d4:70:cd:89:92:e0:4b:a4:c8:19:b0:3b:
                    da:2e:8e:0e:59:60:27:6a:e9:f5:0b:4b:92:aa:b7:
                    3d:d0:b1:25:19:84:11:a7:ba:65:6e:09:d8:79:38:
                    e1:70:c8:b9:97:ce:0a:02:1a:39:35:b3:a4:31:27:
                    e9:6d:c1:0d:18:12:6a:df:99:3d:36:e2:9c:2c:1d:
                    3c:c0:39:64:a3:99:bc:b8:b7:45:72:96:b2:1e:44:
                    1a:61:3e:71:f6:02:2f:24:a9:48:44:d0:50:c7:81:
                    20:b8:d0:c8:eb:5e:bf:1d:70:98:c7:37:d2:97:28:
                    7d:78:3c:cf:a6:3c:89:43:aa:5c:fa:3f:3a:d2:34:
                    e9:d1:db:de:2a:fb:67:96:f9:6d:ac:ec:37:e0:36:
                    6e:eb:6a:8e:bc:a0:5d:4a:11:13:5b:4c:9a:33:cb:
                    05:94:1f:58:35:07:86:33:d6:16:a3:00:10:7d:dc:
                    bb:c5:c4:77:f6:2c:66:f7:1e:c8:f4:da:59:99:dd:
                    a3:45:85:b8:25:09:1b:bb:5f:ec:0f:5a:74:d4:af:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CB:50:E3:3B:E2:E5:EB:54:ED:9A:4B:B6:18:1A:2D:9D:0F:83:73
            X509v3 Authority Key Identifier:
                keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:17:44:24:f3:e4:c6:b3:0d:c1:4e:6e:ce:e0:cb:b8:91:db:
         88:50:33:5a:53:c7:c2:92:78:75:af:51:1e:2c:14:2c:40:46:
         99:a9:b0:f0:62:26:88:c6:db:ec:a6:2a:99:91:09:97:27:84:
         87:27:70:a1:34:05:07:ff:b4:ab:e6:64:dc:d3:63:14:5c:5d:
         e6:1d:c2:c0:5b:dd:db:e0:67:8e:14:73:fa:af:0f:0c:ec:63:
         7b:75:31:3a:f4:25:de:a8:02:5b:55:0f:8a:06:7d:4b:39:b7:
         ce:a9:54:b9:a8:73:5b:df:9f:20:75:55:e5:54:f4:90:66:b3:
         1a:cd:f6:f9:d6:03:8c:50:ef:25:99:40:d2:75:8d:93:2c:59:
         70:a9:16:ec:44:18:89:0a:ce:08:63:b2:f2:01:46:78:e9:3c:
         df:7f:e8:cd:fb:53:03:17:dd:0f:4a:d6:c0:30:b7:08:d0:75:
         1c:36:32:c9:e7:51:0f:93:22:d4:51:47:72:9f:89:4f:00:a9:
         39:63:74:1e:d4:b9:b6:0a:6f:00:1d:92:92:b2:7e:3f:f1:96:
         87:d2:78:31:7a:64:70:65:09:82:aa:6c:b1:7a:70:3c:12:f6:
         88:83:4a:10:ae:2a:89:ca:30:75:aa:cf:a1:90:aa:40:43:ee:
         26:30:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:03 2026 by rpki-client