Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File:                     pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier:          FDlTnj7K7gZqWOJVlVRHC80OnZfuAljEJM7WivVX0xI=
Subject key identifier:   63:D1:E7:FA:5E:6D:C1:D8:15:29:BC:CC:9A:C4:2B:CB:23:7D:7D:C8
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer:       /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial:       019EBE10A5520978D60CC6EE61B1825EFAF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number:          0625
Signing time:             Fri 12 Jun 2026 23:00:22 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:22 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:22 +0000
Files and hashes:         1: e753LkUtZdPOHhc1jXD6UBTKdAI.asa (hash: QxMQuuavAVTbwrJf2pty+8SMFCYB7PU0/p/Emd0Ybrg=)
                          2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=)
                          3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: PGUw5k8stplss5MAL2c7McKTs+dw3sS1vVmxDQdlsdA=)
                          4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:a5:52:09:78:d6:0c:c6:ee:61:b1:82:5e:fa:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
        Validity
            Not Before: Jun 12 23:00:22 2026 GMT
            Not After : Jun 13 23:00:22 2026 GMT
        Subject: CN=63d1e7fa5e6dc1d81529bccc9ac42bcb237d7dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:eb:17:2f:72:c6:db:5b:0e:3d:62:0c:14:
                    12:b2:dd:a9:8d:a8:78:11:db:e8:72:d4:da:fa:1f:
                    72:0b:1e:10:c7:6c:0a:a8:98:40:bd:4e:da:2e:58:
                    19:87:22:93:ce:ee:30:c3:11:72:35:4d:ac:5d:63:
                    95:b4:d3:fb:e3:a7:cb:ea:c0:79:87:97:6f:82:e9:
                    44:08:fc:dd:cc:be:38:0f:46:93:ce:01:80:22:76:
                    37:f5:18:37:d9:0d:73:4a:7f:fb:94:ba:f5:69:44:
                    27:f5:cb:9f:15:48:84:74:00:2f:16:72:48:a1:6c:
                    f2:20:b5:27:0a:ea:1a:ae:cf:ac:42:89:45:6a:ee:
                    4d:9f:c1:50:40:c6:43:c5:c3:b0:87:30:76:6a:a6:
                    05:59:55:85:78:ed:a5:11:0e:29:71:cf:b7:9a:1a:
                    c6:c6:e9:41:ea:4c:c0:e8:7b:86:ae:91:8c:b5:8a:
                    ea:d2:25:21:84:b6:93:4f:14:9f:42:bb:5e:46:c2:
                    a8:46:b4:ef:c0:2d:92:9f:65:9d:60:4e:ce:ea:0a:
                    a0:3d:7b:77:1e:20:10:8e:b5:bd:56:47:30:8b:e0:
                    72:3a:88:01:32:9b:ab:18:f4:0f:90:5b:3c:ad:23:
                    d7:e0:d6:bf:88:79:ee:4c:3e:fd:19:3e:e5:fd:54:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D1:E7:FA:5E:6D:C1:D8:15:29:BC:CC:9A:C4:2B:CB:23:7D:7D:C8
            X509v3 Authority Key Identifier:
                keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:31:1e:09:27:8d:5c:7f:35:cb:59:60:95:20:73:7a:c7:e9:
         78:23:04:5e:62:68:d2:b5:d9:73:8d:a0:5b:06:9c:46:c7:ca:
         47:27:34:c5:73:e9:a7:9f:f6:e5:dd:b9:97:57:69:e8:8b:c6:
         d0:45:3c:8e:a3:68:8e:6d:32:0c:08:ff:8d:e0:97:f7:cc:09:
         d8:ac:d8:d7:d1:d1:ee:ff:74:2b:52:ef:2d:28:f9:82:91:b1:
         02:c2:68:e7:85:11:2f:94:30:db:c7:10:c6:54:78:86:dc:5b:
         55:27:0e:61:af:97:84:4c:1e:b5:ab:c6:89:a7:21:e8:49:f4:
         17:75:a2:4e:18:28:c6:fd:ee:8b:53:31:8f:c8:2d:94:f7:cd:
         ac:e6:62:60:c8:c1:42:0a:b3:63:83:f7:77:8d:c9:4b:14:85:
         2c:f4:06:d2:97:6a:86:4b:90:9a:51:4a:dd:d3:f1:35:a7:32:
         bd:ac:c4:5d:ca:e2:be:2f:d7:be:56:d6:c5:a1:28:c2:5f:42:
         ed:1b:1b:64:7c:de:af:87:81:84:06:c1:41:3d:79:ce:aa:0c:
         44:9e:34:49:f0:e2:bf:3e:b4:3e:ba:f2:7f:cf:5e:e2:fa:b4:
         eb:8c:34:4a:f1:0e:11:0f:3b:4a:87:9c:0d:71:d8:4d:79:e2:
         74:09:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:43 2026 by rpki-client