Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File:                     pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier:          zkOhgo3oqXnfHwm65Gebf1MzsE6p2C0GPtcXxk7+SOg=
Subject key identifier:   B0:24:59:59:29:4B:EE:EE:E2:2B:0F:29:03:67:30:4D:E2:90:1C:0B
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer:       /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial:       01A0CE920C25D3D23652D93412C3A9962FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number:          122D
Signing time:             Wed 23 Sep 2026 14:01:12 +0000
Manifest this update:     Wed 23 Sep 2026 14:01:12 +0000
Manifest next update:     Thu 24 Sep 2026 14:01:12 +0000
Files and hashes:         1: C0X3hB3u8LAMqfro5qGT2MbslXM.roa (hash: ONmV+DcOhO6LmIL71sUACRCSy2jq2kSbueB6GNTC6Cg=)
                          2: I9LHF-RZZYWSxcstDpnevIA6riE.roa (hash: vYLGIUfFYxCx7fMsQHhbZTUJyamMIn1ZfEPepnwBTW8=)
                          3: M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa (hash: xe4YBSaFNrSAbOu74w58XW4Su4kogyqAQm6dN9suUj4=)
                          4: Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa (hash: GYIQ4Ob+P9w6WB9ban+5wDqvxTPLde9MDUHrhHDgOIc=)
                          5: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: 3Vtq5UyGw4gCcnvbC2tJVhtW8v2qq+5FgNpQ9ALDrsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:92:0c:25:d3:d2:36:52:d9:34:12:c3:a9:96:2f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
        Validity
            Not Before: Sep 23 14:01:12 2026 GMT
            Not After : Sep 24 14:01:12 2026 GMT
        Subject: CN=b0245959294beeeee22b0f290367304de2901c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:bf:85:dd:f7:66:27:aa:6e:5a:44:bb:aa:
                    3d:d1:8b:f1:8b:56:1d:45:9a:c2:26:11:97:0b:be:
                    b1:b2:10:d3:2f:cf:c4:04:54:5b:51:40:81:8e:90:
                    83:33:fd:fb:9f:ee:44:96:bc:8b:8d:89:d0:57:db:
                    8d:75:5f:bb:ee:58:ce:58:5a:ea:48:3c:27:e5:8f:
                    46:30:bb:65:b4:5c:b8:be:43:a7:b6:4c:39:c8:43:
                    14:eb:27:8a:10:e6:1d:85:4d:f8:67:3f:9f:4e:c7:
                    50:59:fd:96:1e:4d:b4:ca:cb:28:dd:df:f9:f3:9d:
                    b0:67:31:08:b0:87:53:fe:39:1c:29:eb:fb:1a:6d:
                    e8:66:4a:94:95:57:c1:5c:1b:0d:a5:0a:af:55:b0:
                    41:e0:9f:9d:2a:6e:ad:12:76:b5:16:c6:f8:3f:90:
                    2e:8c:49:ee:ea:43:08:5d:d4:f0:63:73:f3:9f:75:
                    52:d0:39:ef:33:4c:23:b4:d2:d3:59:aa:ef:48:01:
                    50:7c:e3:0b:ad:64:3b:f3:37:5a:50:7d:ed:bf:65:
                    46:a0:18:28:34:41:21:89:dc:23:dd:90:f0:07:bf:
                    72:87:bf:79:79:ec:a8:29:63:ff:28:98:46:bb:79:
                    9f:49:57:50:5d:e7:0e:f2:48:79:2e:9c:c3:f6:aa:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:24:59:59:29:4B:EE:EE:E2:2B:0F:29:03:67:30:4D:E2:90:1C:0B
            X509v3 Authority Key Identifier:
                keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:7b:d3:e9:79:81:e2:8a:59:d0:51:57:ef:eb:91:63:7d:
         0e:f9:8a:8f:d5:12:e4:c8:32:6d:16:72:b5:99:56:0d:0b:da:
         0f:c3:5d:92:37:4c:fe:d0:73:3d:a4:ed:c5:83:6c:b4:9a:80:
         8c:ce:e2:2a:04:db:8e:dd:dc:47:fe:95:ed:fc:ff:fd:ad:35:
         2c:10:be:dd:f8:23:7d:3e:36:fc:c0:55:67:48:11:a3:c4:3b:
         71:67:aa:c5:e9:f4:34:8f:86:c1:be:dd:df:ea:f5:29:c9:21:
         6f:9a:0e:d2:1a:67:83:2c:e5:87:39:44:10:db:68:b7:19:55:
         29:66:b0:01:46:53:75:49:64:5d:3a:05:cb:a4:7c:1f:33:e3:
         51:0f:6e:3a:8f:c8:38:34:39:94:7c:ff:94:b0:a3:47:da:08:
         2e:7d:bd:23:85:96:44:bc:ce:24:b2:30:42:d0:5f:7b:54:35:
         f3:4f:18:f6:58:e3:8f:9c:73:59:65:29:bc:06:4b:c2:a9:cc:
         c1:7d:76:18:85:f5:04:09:5d:88:e1:6c:90:f6:d6:6f:e4:0c:
         53:03:71:c2:5a:90:dc:96:91:7b:1c:5c:e9:e3:91:0d:76:6e:
         2a:11:05:e6:47:f8:6c:1a:08:eb:c4:89:68:04:50:1b:f8:dc:
         fc:47:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:33:43 2026 by rpki-client