Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File:                     pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier:          SCyNcl0pKH8pCh1p0qsffhw7Zu/dv2BOL/F7DchaYQc=
Subject key identifier:   9A:B2:7B:3F:86:B5:DC:F0:04:B9:12:1E:D2:6A:BC:E9:BD:74:3C:B5
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer:       /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial:       019EBF5A7F5B0FE740E1DA59936ACF899B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number:          111C
Signing time:             Sat 13 Jun 2026 05:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:39 +0000
Files and hashes:         1: C0X3hB3u8LAMqfro5qGT2MbslXM.roa (hash: ONmV+DcOhO6LmIL71sUACRCSy2jq2kSbueB6GNTC6Cg=)
                          2: I9LHF-RZZYWSxcstDpnevIA6riE.roa (hash: vYLGIUfFYxCx7fMsQHhbZTUJyamMIn1ZfEPepnwBTW8=)
                          3: M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa (hash: xe4YBSaFNrSAbOu74w58XW4Su4kogyqAQm6dN9suUj4=)
                          4: Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa (hash: GYIQ4Ob+P9w6WB9ban+5wDqvxTPLde9MDUHrhHDgOIc=)
                          5: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: +owGiVmYyEpAzIQvhp3bWdyCxLWqEqIV+V8t9BZNZU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:7f:5b:0f:e7:40:e1:da:59:93:6a:cf:89:9b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
        Validity
            Not Before: Jun 13 05:00:39 2026 GMT
            Not After : Jun 14 05:00:39 2026 GMT
        Subject: CN=9ab27b3f86b5dcf004b9121ed26abce9bd743cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:15:1e:7e:d9:99:57:31:a4:53:67:21:44:
                    ad:b9:47:a7:2d:18:33:6c:ea:8a:f4:56:08:23:5c:
                    eb:c8:56:75:29:21:e7:24:53:e2:45:92:aa:ab:00:
                    57:f5:79:35:bc:e7:5b:0a:45:d8:63:7e:ef:f7:ba:
                    fd:15:fa:3b:61:67:14:42:c4:2c:0b:cf:ac:3f:0c:
                    d0:c6:85:1c:3a:6b:57:71:8f:05:39:26:59:1f:ca:
                    df:6b:6a:de:68:11:1e:8c:ff:41:c0:25:52:cc:a8:
                    2a:c2:8e:e7:22:90:27:49:0d:52:e4:8d:eb:80:0e:
                    88:1a:c7:a1:8a:ac:a1:99:40:84:c9:72:fb:72:d9:
                    48:b4:86:3b:9f:3b:37:30:36:12:bb:c9:c8:fd:90:
                    51:61:21:a8:52:62:f1:a4:f4:41:8d:fa:72:a4:29:
                    b3:6a:f6:53:6c:cf:a5:e1:cd:bf:b4:60:1b:05:b5:
                    af:af:4a:78:3b:f3:d0:61:41:96:fa:38:3c:61:c4:
                    81:64:bf:b6:35:d5:bb:79:5a:96:56:9c:52:4b:0b:
                    39:a8:aa:59:52:09:2c:81:42:06:b7:f4:22:84:4c:
                    b2:66:15:4a:0d:e2:92:40:10:ce:1d:4c:a7:a1:94:
                    64:ce:a7:25:9a:f4:e2:6d:58:d8:a3:8f:fa:a7:5e:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B2:7B:3F:86:B5:DC:F0:04:B9:12:1E:D2:6A:BC:E9:BD:74:3C:B5
            X509v3 Authority Key Identifier:
                keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0c:8c:75:ef:31:10:5a:06:87:21:78:5d:bb:86:23:30:dc:
         7c:ca:f5:93:48:44:b2:87:4f:fb:28:24:61:9d:dc:21:18:97:
         04:d1:91:07:a2:f7:21:aa:eb:38:f4:25:e0:6e:f0:eb:a9:3c:
         a2:50:e5:e7:57:3f:96:4a:fe:8f:99:fe:6e:01:43:69:84:39:
         10:c2:5e:7a:56:0d:bc:ec:90:05:eb:fc:ad:3d:62:bc:f9:9d:
         a6:f5:b9:cc:6b:74:10:25:9f:75:67:7c:82:d6:7f:d9:ab:5f:
         c9:ae:11:6a:04:92:39:a0:f4:e3:19:4c:5a:80:65:fe:b9:85:
         38:7b:0e:56:81:7f:00:51:58:60:15:67:b8:30:1c:9e:76:41:
         60:55:ca:a6:9d:d2:7e:45:46:95:65:44:99:6b:4c:d1:97:c6:
         fe:3b:cd:7b:5f:1b:0d:da:96:2b:a4:8e:94:07:bf:23:c3:db:
         cc:82:13:0a:e2:c8:23:5e:ff:06:eb:d5:f2:3d:a5:46:2c:e6:
         c5:1a:76:88:c4:99:41:86:49:92:54:a9:d4:df:84:a9:a9:2a:
         36:b8:b3:3e:45:71:55:35:d2:2d:69:08:3b:70:3a:6c:10:f5:
         62:3c:be:5d:64:cc:da:f0:fc:45:5f:2f:be:3e:33:8e:66:91:
         4d:f6:b0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:39 2026 by rpki-client