Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
File:                     PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json)
Hash identifier:          2OOHDdMxwZ1wOZBB29/g+cwpw3cLwGwb5LdRVhSU1HQ=
Subject key identifier:   BD:82:09:76:10:BC:11:18:F0:E8:CD:0F:00:89:11:B6:06:1C:B0:07
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Certificate issuer:       /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial:       019D98F4CEF704D1DD0CA96BB53FB182E4A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
Manifest number:          05B5
Signing time:             Fri 17 Apr 2026 01:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:13 +0000
Files and hashes:         1: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: 4X7moOSViGGmEp/GY0HNVxMtkh741O3LuzlUnLdpGBE=)
                          2: ycAuPmO_sLVvMbeFsggXQjZ-bEc.roa (hash: IOeAqOcXQYE9MbdToOk7llMBN5GYLYRtb8t8JnGE6Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:ce:f7:04:d1:dd:0c:a9:6b:b5:3f:b1:82:e4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
        Validity
            Not Before: Apr 17 01:01:13 2026 GMT
            Not After : Apr 18 01:01:13 2026 GMT
        Subject: CN=bd82097610bc1118f0e8cd0f008911b6061cb007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:1c:17:3d:4d:9a:e4:49:7c:43:25:42:6f:
                    13:22:c0:0c:3a:58:b8:45:e6:9b:c6:10:3f:5f:16:
                    ab:0d:25:8e:51:72:66:2d:9d:2b:dc:b1:af:28:97:
                    28:26:8d:21:0f:d0:05:e1:5d:88:0f:43:c5:bf:35:
                    68:24:51:db:6a:38:da:0f:78:fd:f2:22:90:f4:bf:
                    ea:20:d1:1b:e8:cd:d4:8e:f6:a8:91:96:fe:80:96:
                    3b:7c:23:62:18:28:f4:bb:1e:e4:70:30:56:af:03:
                    88:fa:01:21:08:1e:1c:58:1d:b1:aa:dc:05:e9:79:
                    56:fe:1c:e9:05:b9:18:96:38:c0:df:85:8d:ec:0c:
                    64:7e:5a:6c:7d:66:4d:98:a3:53:08:09:f9:0f:3e:
                    1a:6d:a7:83:e8:58:f0:2f:d1:32:6e:ca:05:42:36:
                    69:58:19:fd:01:16:c0:31:d0:94:67:61:8b:5f:5c:
                    13:47:10:b4:46:df:66:2a:c7:e8:05:48:2d:85:43:
                    3c:df:99:cc:d5:3a:02:70:f9:d7:15:09:4e:f9:d4:
                    c0:d5:09:93:02:96:1b:fd:8c:9e:e9:61:7f:97:6b:
                    d8:e6:b7:de:5f:52:c9:99:93:5d:cb:4b:97:6a:2a:
                    d2:c7:b6:fe:bd:2a:39:41:a9:36:c4:2d:f5:e0:cc:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:82:09:76:10:BC:11:18:F0:E8:CD:0F:00:89:11:B6:06:1C:B0:07
            X509v3 Authority Key Identifier:
                keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a1:91:13:e1:c5:35:b3:c8:6a:d9:ae:90:43:71:5f:8c:24:
         72:bc:01:5f:1a:e1:ed:d8:0a:39:05:92:0d:a7:3d:a1:d4:89:
         e4:bc:9e:f7:e2:35:ab:99:5e:92:8a:46:5f:16:2d:79:2e:1f:
         cc:a0:0c:19:77:ca:d9:21:ce:9c:c1:5a:00:3c:0e:a2:15:da:
         47:0d:2b:c6:23:ed:94:f9:80:a7:83:c2:13:bb:36:e0:9c:3a:
         4a:e1:2d:88:4f:0e:05:8b:04:be:b4:09:07:de:11:4c:2c:e3:
         6d:72:69:6d:91:0c:d6:47:57:c6:45:48:f1:0b:7f:6b:73:ac:
         52:24:57:08:89:d3:70:88:4b:fb:67:79:07:e6:12:53:4f:8b:
         11:c6:2c:ad:41:53:40:12:da:eb:d0:2c:98:5c:5e:86:0d:70:
         b5:d7:f7:2b:ff:b1:df:b4:b2:01:e5:79:e5:f7:19:70:1b:3e:
         b8:cc:f5:fa:d7:2d:f9:8d:5c:43:57:fb:01:e9:00:fb:1e:a9:
         5b:51:15:8e:b7:c2:c6:a0:82:be:e7:98:87:16:f3:d7:6d:83:
         09:8a:b5:c3:bd:a6:93:c6:16:c0:70:45:8b:d8:de:57:70:e4:
         e7:b8:ae:fc:42:97:44:82:db:13:08:e6:df:7f:14:19:0b:0f:
         e6:0b:22:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:42 2026 by rpki-client