Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
File:                     pns_SmTNjc4m56QK9ue24E7tLWw.mft (raw, json)
Hash identifier:          CeQ9UARBTxbBcZ4gbryUEKtWHbZUoWdU+Ecq1+by3lY=
Subject key identifier:   61:4E:F7:8D:4C:30:52:C8:F6:2A:34:A5:87:49:78:31:E5:49:05:C5
Authority key identifier: A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C
Certificate issuer:       /CN=a67b3f4a64cd8dce26e7a40af6e7b6e04eed2d6c
Certificate serial:       01A0E8C145525543A70D87979DD48FB47753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
Manifest number:          012D
Signing time:             Mon 28 Sep 2026 16:02:55 +0000
Manifest this update:     Mon 28 Sep 2026 16:02:55 +0000
Manifest next update:     Tue 29 Sep 2026 16:02:55 +0000
Files and hashes:         1: iQdg1bQOlXLuKluffHT5-2l3QwM.roa (hash: VLHupAT/bCStlfIUhgEMjaFGylgBgR6vs2sLtbZvHGM=)
                          2: pns_SmTNjc4m56QK9ue24E7tLWw.crl (hash: yG235kKv2Nv+qge7RFA/mkYlJ7LuHAyYlTosKBWbyXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:c1:45:52:55:43:a7:0d:87:97:9d:d4:8f:b4:77:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67b3f4a64cd8dce26e7a40af6e7b6e04eed2d6c
        Validity
            Not Before: Sep 28 16:02:55 2026 GMT
            Not After : Sep 29 16:02:55 2026 GMT
        Subject: CN=614ef78d4c3052c8f62a34a587497831e54905c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:0e:15:3e:48:8f:3f:c1:76:63:e6:6f:35:
                    a3:e9:76:6e:44:a7:1f:51:8c:35:9b:29:1d:e0:ed:
                    16:dd:14:d1:d9:90:60:f8:b3:9f:7e:70:46:dd:2d:
                    df:42:b1:65:fa:33:46:c5:05:1d:7e:58:50:74:3d:
                    b0:c0:dd:17:94:b6:b2:66:1e:66:6e:36:d4:09:df:
                    8f:c4:7d:ad:0e:4e:87:33:20:94:59:1e:d0:1a:bd:
                    c7:44:2c:f3:f1:97:ec:bb:18:b5:29:53:1f:ed:3b:
                    47:ce:12:0c:2e:05:93:4e:67:83:d3:d6:e8:9f:21:
                    ce:d7:b5:9b:ca:a2:ca:3f:07:98:37:0a:4c:0b:8e:
                    c0:96:f8:75:0b:76:d3:fb:a3:16:89:51:b0:d3:7f:
                    40:fd:70:84:3c:6f:08:b0:c3:36:90:30:71:9c:a5:
                    ee:f4:e5:e2:0e:a7:44:50:e0:78:f7:84:af:ec:09:
                    b8:1e:b5:53:ba:87:c0:59:4e:04:ff:f7:80:d4:08:
                    9b:47:f8:a3:1d:6c:8e:42:3c:dd:f0:6f:a0:c4:94:
                    b7:44:0e:f1:b1:c8:49:7d:dc:d4:c2:4d:42:ea:bc:
                    28:01:0f:52:1c:71:68:cc:68:08:ed:e5:74:9f:15:
                    ab:54:4e:ef:a4:27:e9:96:41:b0:b2:41:69:5f:28:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4E:F7:8D:4C:30:52:C8:F6:2A:34:A5:87:49:78:31:E5:49:05:C5
            X509v3 Authority Key Identifier:
                keyid:A6:7B:3F:4A:64:CD:8D:CE:26:E7:A4:0A:F6:E7:B6:E0:4E:ED:2D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pns_SmTNjc4m56QK9ue24E7tLWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/937273-1484-4597-bff1-2fba67661aab/1/pns_SmTNjc4m56QK9ue24E7tLWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c9:e5:52:65:45:65:d4:f9:b6:90:55:b0:60:37:85:6b:4c:
         50:b9:d7:65:e8:4d:36:1f:35:63:8f:c8:af:57:f3:e7:93:c5:
         d3:98:ae:a9:ef:23:e9:88:5e:5a:a7:9d:00:74:e3:57:46:f2:
         6e:aa:41:14:32:d6:3c:b9:a1:4e:8a:7e:48:30:00:c5:10:b8:
         d9:5e:e0:21:74:89:da:6a:b2:da:a0:1e:01:6d:47:3d:86:70:
         3c:17:b4:a4:a9:36:4f:cd:50:90:4e:69:ce:12:d5:bc:57:31:
         b9:80:be:17:bd:a7:df:5b:9c:5d:f8:a1:d7:d8:cf:84:ef:e4:
         53:ef:31:3f:09:cb:cd:e2:82:ae:90:08:eb:2e:5a:cf:36:87:
         56:31:17:83:ba:7f:9e:9e:d5:fb:20:32:af:29:e9:ff:03:86:
         b4:dc:81:79:33:f0:71:be:53:63:ed:0a:13:4f:38:02:94:fd:
         e4:cd:62:c9:26:87:2e:7a:a7:b0:0d:fb:1e:d7:ee:f0:b3:3f:
         d8:8d:40:1f:a0:ea:c0:24:d1:27:41:d9:df:e4:8a:5e:dc:05:
         66:bd:67:fb:51:a7:08:cb:0e:e1:42:b0:48:23:f9:d7:e0:8a:
         c6:3f:c8:29:dc:2e:19:74:95:43:18:16:8c:04:a2:ac:8c:82:
         22:d2:60:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:42:08 2026 by rpki-client