Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File:                     PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier:          wYaqIykj0LthFic4b7GHp24E+KaDbcuWABbaP/Y2e4U=
Subject key identifier:   AD:3A:6D:9B:97:D5:68:16:6D:30:77:39:A8:6D:04:48:DC:D5:C3:C6
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer:       /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial:       019EBFC7F816C9D9BC23F16D741DE3AE2BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number:          14C3
Signing time:             Sat 13 Jun 2026 07:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:13 +0000
Files and hashes:         1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: dgr8Ez+S8H8TXpUMW7fe9AoaDhDldApP8ibdQMpGk2Y=)
                          2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c7:f8:16:c9:d9:bc:23:f1:6d:74:1d:e3:ae:2b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
        Validity
            Not Before: Jun 13 07:00:13 2026 GMT
            Not After : Jun 14 07:00:13 2026 GMT
        Subject: CN=ad3a6d9b97d568166d307739a86d0448dcd5c3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:59:e1:d6:c0:0c:28:bd:6b:f6:73:81:fb:
                    f6:d8:7d:9b:4f:65:e8:fd:7d:96:2f:2b:cc:39:9f:
                    bf:7d:67:a7:a0:f3:b2:2b:bf:e3:6f:8c:b0:27:62:
                    9f:7c:26:53:c9:8c:cd:32:4e:4c:71:78:de:3e:d4:
                    48:73:e1:13:63:f4:3b:1e:ed:c7:bb:69:81:c1:56:
                    eb:96:0a:e7:ca:b0:ba:53:b9:c3:11:e7:eb:f7:91:
                    19:c3:04:da:e5:62:c6:e7:70:00:8e:18:ff:c8:34:
                    3a:61:ba:7b:31:3d:cb:61:09:52:62:c8:5f:e5:af:
                    cb:50:28:af:d0:ec:a0:db:40:a6:0b:54:bb:7c:cc:
                    a4:99:1d:8b:2f:82:83:f5:22:de:99:a2:88:23:52:
                    fd:fd:19:d3:a3:06:7b:f6:8d:77:74:f0:68:71:51:
                    36:eb:6b:f5:84:78:6d:0f:83:e9:bc:b0:59:81:44:
                    36:e2:7e:58:65:5c:9d:08:09:3e:16:30:aa:63:0e:
                    23:2b:61:96:ca:af:33:96:b0:c3:f3:13:44:12:4b:
                    d8:84:be:e5:02:04:38:24:17:cd:17:a1:35:ec:ec:
                    bb:79:ed:81:3b:7f:6c:5b:6b:43:65:77:a0:33:7d:
                    3a:4e:f5:90:d8:dd:aa:94:1f:70:ac:b9:f6:28:75:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3A:6D:9B:97:D5:68:16:6D:30:77:39:A8:6D:04:48:DC:D5:C3:C6
            X509v3 Authority Key Identifier:
                keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:43:b6:1c:f6:09:1f:2b:75:6a:1f:c9:67:73:da:41:22:e4:
         bd:fb:d6:db:1e:7e:43:1b:b1:44:81:e0:b4:96:5b:8b:df:66:
         06:f1:4b:b4:18:f0:80:e5:bd:ef:42:9d:fe:5e:db:bc:f4:f5:
         3f:39:14:6f:e3:f8:f2:24:dd:c5:20:e0:6e:b8:de:43:7c:56:
         2a:18:f9:54:18:4f:c6:74:96:fe:9e:90:df:4d:ad:7d:04:4a:
         2e:15:54:f5:e0:79:fa:49:bb:9c:d3:19:68:c6:8a:cf:4a:94:
         06:9e:1a:60:dd:fc:e9:b3:26:80:0d:5e:b3:42:67:67:b8:ec:
         51:f8:34:7f:a1:71:fd:e4:b4:3e:c7:8e:0f:1c:80:83:11:83:
         dc:ee:3f:6c:3f:2c:06:dd:bd:d9:e8:e1:1d:be:88:f7:9e:be:
         df:3c:2d:75:72:64:e6:d0:29:26:fd:75:1a:b3:0f:fa:48:94:
         db:19:79:23:c1:4f:8d:73:4d:e0:3b:f0:03:4e:3d:e1:99:0f:
         7a:21:43:19:00:ad:8f:93:7c:c6:c6:46:c3:87:96:a0:54:0b:
         9b:06:da:b0:2a:f2:9c:e5:6c:4e:75:4f:29:ec:9c:75:0c:aa:
         92:19:f8:de:a2:fc:bd:a7:60:91:02:db:e1:36:5a:9f:4e:f4:
         89:3f:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:24:57 2026 by rpki-client