Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
File:                     PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft (raw, json)
Hash identifier:          D5ssHX0y2iP3NomfseMl134e2qUXj3nECMUr5GeWQLs=
Subject key identifier:   FE:92:8A:52:E3:83:4B:17:CF:4E:F2:8B:8C:31:14:62:D1:4D:24:32
Authority key identifier: 3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
Certificate issuer:       /CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Certificate serial:       019ED2AAD2E41EF4D79BAE0458B456EFC0D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
Manifest number:          0101
Signing time:             Tue 16 Jun 2026 23:01:10 +0000
Manifest this update:     Tue 16 Jun 2026 23:01:10 +0000
Manifest next update:     Wed 17 Jun 2026 23:01:10 +0000
Files and hashes:         1: PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl (hash: jLKJDlRjHecz0ZF73ZRHn3o2VxAUWmFyVr5JwN8UOO4=)
                          2: jgpzu-ESfiekXnmQsWtfxfFMnls.roa (hash: VKgBSq4j9tQnrdlFEiguu7TMFYsGEpDcXU1dHxHAkww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:aa:d2:e4:1e:f4:d7:9b:ae:04:58:b4:56:ef:c0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
        Validity
            Not Before: Jun 16 23:01:10 2026 GMT
            Not After : Jun 17 23:01:10 2026 GMT
        Subject: CN=fe928a52e3834b17cf4ef28b8c311462d14d2432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:26:83:da:f0:ca:8c:e8:89:67:43:66:e2:
                    66:18:bf:8b:37:7e:91:04:d4:29:ce:fb:3e:97:b4:
                    49:96:43:ac:9c:b2:bd:37:bb:0b:84:49:cb:d7:b0:
                    58:ae:e0:ac:21:c0:cf:c6:6d:b7:06:ca:7e:dc:97:
                    3a:0b:b9:ce:43:6f:e6:36:de:9f:95:42:2d:ff:76:
                    05:0e:77:06:65:ce:b2:24:5a:14:c0:6d:b3:45:7d:
                    a4:8f:6a:2e:15:1f:9d:e7:f8:f1:43:4c:06:09:0d:
                    70:6c:1d:2c:f0:7f:64:5b:88:11:12:11:c3:69:7a:
                    06:9f:b0:ed:0f:06:5c:a5:12:00:41:2b:50:23:29:
                    4a:92:4f:d5:95:50:2a:2b:98:1a:12:e7:3c:43:cf:
                    1a:58:ca:6b:1d:35:de:32:78:d8:e2:d9:44:4b:83:
                    b1:af:ab:bb:4c:a9:fa:78:43:fb:51:de:0e:1c:7a:
                    71:7f:03:fe:88:1e:fe:83:a7:df:88:4f:b8:27:03:
                    44:62:f4:48:08:a5:99:60:46:af:50:8f:30:26:cd:
                    33:45:f3:0d:36:5a:6f:aa:83:76:4a:f7:24:43:86:
                    a3:7f:91:fc:34:34:a3:2f:c3:e4:6d:7e:ae:a4:fc:
                    97:2d:f0:47:0b:e4:c9:89:84:0a:7b:75:45:6d:d0:
                    48:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:92:8A:52:E3:83:4B:17:CF:4E:F2:8B:8C:31:14:62:D1:4D:24:32
            X509v3 Authority Key Identifier:
                keyid:3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4c:0f:8a:39:96:dc:21:a9:10:bb:4e:a9:73:ee:eb:d2:5d:
         9e:2e:58:b8:73:4f:53:b8:d0:20:47:3f:48:91:dd:42:e6:75:
         03:90:48:ae:35:0e:65:fc:93:e6:a8:a0:e6:4d:b6:96:0a:ba:
         a9:41:b0:45:81:42:37:36:e5:39:73:27:08:40:9a:d9:61:88:
         26:3a:3d:7d:97:db:8c:fd:83:de:c4:a0:81:44:13:fd:d2:e8:
         b2:f2:4e:e4:c6:51:4a:85:da:01:87:3c:70:de:71:b2:60:97:
         df:8c:b3:5f:b1:88:f3:75:ad:cf:56:55:1b:a9:8e:0f:d6:2c:
         0d:17:73:72:16:13:33:21:24:53:66:26:41:59:85:b5:99:40:
         5a:0b:a2:4e:2e:9b:a0:1f:e3:d4:05:25:57:7b:99:0b:9e:93:
         06:3e:1c:e4:5c:77:0b:f0:d5:bc:0b:ef:e6:43:b9:93:9e:1a:
         cd:60:71:be:6a:ea:1e:d7:eb:7c:90:fc:67:b6:03:23:fc:9f:
         6a:c0:7a:94:44:f9:47:2f:f3:ea:65:2c:71:8b:5d:d0:e9:60:
         15:0a:6a:41:ec:84:5b:ab:b2:58:51:a8:c4:9c:fb:9b:a0:31:
         83:d6:13:9e:a0:c7:3e:30:31:09:19:0a:42:cc:9f:a3:df:b9:
         a9:0e:45:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:57:54 2026 by rpki-client