Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File:                     pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier:          mgJ1ITih9UVRunAwv1kFaS2fdOrhd9F+hxdcdNOiVKw=
Subject key identifier:   2C:55:A2:93:A8:EC:0A:C7:E7:7D:77:02:9E:F7:1A:AA:71:B9:E3:1E
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer:       /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial:       019FA9ABE0F58F30D04AB6F486BF246F8ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number:          06A0
Signing time:             Tue 28 Jul 2026 17:00:41 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:41 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:41 +0000
Files and hashes:         1: etwq045QwrYSI43CEOYjoWhjPf0.asa (hash: mHkOUoBleSqHfxS4Acb4TfhU8G2G9TKcdYd1R4Gd4OM=)
                          2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=)
                          3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: P751Cwf7MRwEUHWtGeel9skKjiSkOy1U4lOSdzT+ifE=)
                          4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:e0:f5:8f:30:d0:4a:b6:f4:86:bf:24:6f:8a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
        Validity
            Not Before: Jul 28 17:00:41 2026 GMT
            Not After : Jul 29 17:00:41 2026 GMT
        Subject: CN=2c55a293a8ec0ac7e77d77029ef71aaa71b9e31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d6:6b:c1:47:ef:e2:17:2f:c6:49:90:a8:f0:
                    6f:02:cc:e7:58:44:5c:a5:6e:d3:72:c3:b3:84:d6:
                    d8:a6:c3:13:c4:6d:90:1e:7c:b8:3f:d9:6c:19:2a:
                    de:6f:cf:b0:b3:b5:eb:01:ae:5e:ca:49:7c:23:ac:
                    e8:90:11:a1:15:af:3a:2c:2b:6c:11:fd:d1:4d:04:
                    e7:ce:d4:72:c8:3f:95:15:6a:22:98:27:36:be:3f:
                    75:d8:0b:a2:f5:7c:de:1f:73:81:30:8c:90:18:a4:
                    7d:f9:bb:ca:87:01:0c:1b:61:0d:17:fe:99:dc:72:
                    86:b7:69:56:fe:02:08:cd:67:72:a6:9a:74:c7:09:
                    fd:57:a6:13:c2:39:6c:1d:f9:45:aa:da:e9:07:0e:
                    df:62:da:d5:21:38:1e:64:e4:a7:06:1d:cb:70:64:
                    b2:46:f2:a0:61:7a:2e:57:10:cf:97:af:bc:36:17:
                    88:1c:3e:7c:bb:9c:c7:1a:03:f2:0c:9e:e7:74:62:
                    44:6e:00:99:88:c8:89:f1:a6:3f:e8:a7:46:95:ef:
                    76:ec:6a:d6:af:95:58:c1:44:e5:71:06:be:88:97:
                    22:c1:d3:1c:88:80:08:46:c2:da:96:e8:34:00:8f:
                    7e:a1:e2:86:92:06:e2:35:3c:8b:a3:24:29:f0:b7:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:55:A2:93:A8:EC:0A:C7:E7:7D:77:02:9E:F7:1A:AA:71:B9:E3:1E
            X509v3 Authority Key Identifier:
                keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b9:d4:16:99:ac:8e:f6:d3:07:be:40:68:75:89:06:60:eb:
         c9:78:4a:6f:64:f8:e9:aa:8b:07:17:2f:17:26:77:c7:8c:47:
         b9:16:0e:ac:66:e1:13:27:f4:25:5c:45:62:3b:0f:86:b5:11:
         ff:c6:2a:6e:2f:64:28:60:4e:ca:0f:85:9c:58:00:bd:4b:cb:
         c7:fd:7e:2f:58:8f:ba:67:77:02:0a:40:cf:67:60:da:b7:d5:
         bf:59:77:ba:c6:b5:e8:d0:92:02:3b:40:9a:32:94:66:c2:d4:
         a4:70:cd:36:58:26:74:d0:2e:12:8a:18:e4:d3:4d:60:48:7b:
         d1:76:fb:24:14:c6:92:7e:30:fd:8a:df:05:36:c3:41:a8:d9:
         02:ce:68:65:c9:8a:7e:87:55:ba:a6:d0:ca:e3:c5:d7:63:0b:
         07:8f:32:58:c8:b7:71:28:73:82:3f:81:d4:6f:e9:f0:4f:e9:
         ce:fc:a8:4b:02:2a:da:82:c6:d0:6c:e8:4e:a8:ae:8a:a9:7b:
         16:84:b7:1d:ea:1b:37:51:08:ec:ae:42:51:2f:ac:2f:3d:a3:
         c8:bd:3d:3b:ec:29:68:ab:00:e2:e3:ad:91:f7:16:54:8b:5d:
         cf:54:32:a7:af:3e:7c:ce:ef:cf:38:e0:3c:8e:6b:d0:dc:ef:
         ad:5d:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:21 2026 by rpki-client