Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File:                     PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier:          oHFPwtc6kiaKhJBqruS1A6VMZGXwXQQAN7nTRm09NFE=
Subject key identifier:   07:36:D1:B7:FA:2C:0F:41:A7:55:F6:42:DA:68:1E:AD:50:0B:22:9E
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer:       /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial:       01A0C36972E5C83E158501874645AA76DB26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number:          15CE
Signing time:             Mon 21 Sep 2026 10:01:02 +0000
Manifest this update:     Mon 21 Sep 2026 10:01:02 +0000
Manifest next update:     Tue 22 Sep 2026 10:01:02 +0000
Files and hashes:         1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: WeMZkXwEsyjSiTxSgHfpbeTdI1M8UfJ0XGHtJilgbX4=)
                          2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:69:72:e5:c8:3e:15:85:01:87:46:45:aa:76:db:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
        Validity
            Not Before: Sep 21 10:01:02 2026 GMT
            Not After : Sep 22 10:01:02 2026 GMT
        Subject: CN=0736d1b7fa2c0f41a755f642da681ead500b229e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a6:a5:af:b1:c4:bc:19:c3:d2:d1:9f:c4:30:
                    8a:76:e6:41:54:6d:28:27:94:d3:2a:ea:3c:eb:df:
                    a0:9d:dd:1a:3d:4e:52:7f:0b:80:3c:ff:36:f3:9b:
                    a2:b7:ef:49:f4:56:41:4c:8c:c4:e4:9f:fd:87:48:
                    84:ed:8d:08:4c:21:bb:23:27:72:d9:bb:44:30:d6:
                    0e:41:fa:60:59:51:5c:6f:90:c4:bf:c9:86:05:02:
                    4a:50:a3:b6:f1:a2:9b:5c:08:24:b1:c4:52:e5:9a:
                    ce:ae:85:03:19:da:46:8f:a9:78:fe:eb:b2:12:a1:
                    3a:09:7d:cd:c5:1d:1f:83:ad:ce:2b:7f:21:cc:f8:
                    41:2c:46:17:97:15:53:2c:88:a0:47:05:9f:ca:b3:
                    d2:bf:93:82:3f:9f:5b:b4:6f:0e:ff:ad:23:d3:7a:
                    11:49:11:db:a3:b8:33:4f:89:51:14:9b:5e:69:ce:
                    fd:46:8b:e4:26:b1:9f:5f:ad:10:15:f5:f0:b6:a2:
                    6d:1b:4c:5a:07:56:74:e8:b3:f2:10:10:c0:b7:8b:
                    6e:b3:cf:de:c5:28:79:dd:f8:27:3a:1d:cf:e6:d3:
                    e3:d0:b5:fc:3a:da:9b:0f:30:ec:ab:f3:92:2a:f4:
                    ca:8c:fe:50:f4:32:11:24:27:31:2a:9c:14:4f:26:
                    cd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:36:D1:B7:FA:2C:0F:41:A7:55:F6:42:DA:68:1E:AD:50:0B:22:9E
            X509v3 Authority Key Identifier:
                keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:5a:5d:37:26:22:f4:5b:66:70:0a:1d:09:a3:db:03:8a:
         e6:c5:40:0d:77:cd:7c:23:80:05:37:0a:79:43:49:68:e7:2f:
         eb:f2:e3:2d:d0:d7:c2:5d:b8:a6:53:b6:b5:67:eb:fa:c6:0b:
         28:7b:40:eb:18:d3:8b:ce:b2:8a:6b:04:3d:34:73:d9:4a:4a:
         ae:50:ab:f1:10:e2:07:ad:9e:a5:db:32:14:70:7a:3d:fa:da:
         07:58:5e:3d:12:d4:4a:0a:3b:dc:c7:ba:1f:f7:ff:96:34:3f:
         30:21:00:78:80:8f:69:54:fd:56:cd:17:41:ee:d3:4a:4b:3c:
         55:bd:59:a5:4f:bd:f9:52:9f:85:c3:60:67:cd:00:ae:ee:3f:
         80:3f:54:21:f4:73:21:f9:8b:6e:88:2f:cd:01:32:4f:af:54:
         e1:20:b2:a7:d4:6e:d7:cc:44:cb:e6:f8:c5:29:95:de:48:51:
         bd:e8:42:ba:ea:e1:9c:4c:3c:da:35:65:bb:f5:a3:54:a5:14:
         2f:4c:3d:ce:d1:1b:49:fa:60:81:3e:24:2c:f6:f1:09:10:23:
         71:1e:e4:9d:36:63:59:cb:66:7e:0f:fd:3d:88:85:8c:67:90:
         e1:e4:dd:ac:8b:5c:b1:17:ab:21:36:c0:5d:84:c6:53:8e:fb:
         e8:50:f8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:50:28 2026 by rpki-client