Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          26NIcWH8jW6mMLKTaMdTepfuo8fRo8woI9Lp9ESqbLw=
Subject key identifier:   05:92:03:9D:70:B7:8A:33:B7:13:9E:1B:86:4C:2A:6F:C6:69:B5:2B
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       01A06E715BC780A3FEDC98A3511FF7C12A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          14F8
Signing time:             Fri 04 Sep 2026 22:01:57 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:57 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:57 +0000
Files and hashes:         1: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (hash: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM=)
                          2: 3En9ZxdA_9Y7YbhdHSy_ozRVcts.roa (hash: PrZc7gBh863UgF6RDKYSJvpsQyp10e+OlGmMtcslKPQ=)
                          3: E1V1b19ox-LvuRijY9UoK0y3Irs.roa (hash: xEI2Rqw0cuhBI9GdkvhH+W/MRGZrUkysKcXYuHoCxrU=)
                          4: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: nbNgy2p2UrGfCboxb5mDOA7SYfCdY4J96LiaoF+NwN4=)
                          5: cIdg71qg6R6Cf1UwQuGnxjPwBGI.roa (hash: jMe0CR6Aea2kIdpRXkGxQhJEmosKzZ2QbxS6+Je/390=)
                          6: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (hash: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:71:5b:c7:80:a3:fe:dc:98:a3:51:1f:f7:c1:2a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Sep  4 22:01:57 2026 GMT
            Not After : Sep  5 22:01:57 2026 GMT
        Subject: CN=0592039d70b78a33b7139e1b864c2a6fc669b52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:fb:43:d5:4b:5d:27:e5:22:90:3d:14:6b:
                    75:50:89:f2:24:84:50:6a:9c:b2:9c:d0:7a:34:28:
                    6b:07:65:9e:2c:78:bc:5e:9e:42:db:75:9f:9c:67:
                    09:c4:52:bc:8d:df:0c:6f:1e:61:c3:ad:58:7f:3b:
                    1d:22:d7:69:74:f0:14:61:42:ec:53:2e:80:6e:e4:
                    20:87:f0:7c:ff:b1:80:4d:3c:7e:cf:f1:91:4f:af:
                    c9:87:c0:60:67:f1:cf:62:1d:ee:e3:6e:42:a8:20:
                    9b:14:23:5f:b8:b4:0f:cb:21:39:0b:c4:31:31:7a:
                    21:a2:8d:36:54:63:98:8b:b8:6a:21:af:ce:26:59:
                    a4:e8:ca:38:51:f0:a6:d4:8c:ce:93:be:48:77:a8:
                    be:c4:6e:39:85:97:79:49:4f:c2:2d:86:5d:f7:71:
                    cc:88:7d:eb:4f:e0:d8:11:3d:9b:86:f8:a6:4f:86:
                    ca:08:8c:7e:20:bb:6b:24:3b:6d:c1:2f:a9:af:f0:
                    7b:9e:58:ca:ed:26:af:61:6f:48:d4:af:5d:ff:ed:
                    59:a4:80:b7:d0:16:85:b7:d3:b4:9d:47:89:11:13:
                    47:4f:c7:8f:f4:d9:95:5d:01:f2:71:db:c3:3d:61:
                    2f:17:68:21:65:74:1c:ab:57:bc:2f:05:97:74:ef:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:92:03:9D:70:B7:8A:33:B7:13:9E:1B:86:4C:2A:6F:C6:69:B5:2B
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:47:c2:29:59:6e:dc:bd:97:1f:4d:23:3f:1c:b7:d4:01:b5:
         26:b5:f7:b4:39:a1:59:72:45:61:37:45:0e:b1:87:21:3e:00:
         79:73:7c:1f:f6:35:16:49:92:b2:f5:5d:1a:92:79:f5:ec:91:
         82:85:64:68:0e:b3:55:fd:0e:d6:30:16:a0:15:60:00:49:12:
         aa:2a:dc:f5:bd:f7:00:bb:4c:dc:10:be:4d:2c:8b:58:4a:95:
         c6:02:22:c7:22:f5:ec:8b:36:6c:19:98:0f:e3:51:96:14:24:
         30:d5:cf:55:5f:7c:91:8a:b7:e1:30:4f:1b:be:30:b9:36:0d:
         ae:3c:03:ec:e4:52:2c:01:03:7f:25:b6:26:4a:5b:72:31:b7:
         72:45:bb:35:08:78:38:a6:a5:7b:a6:1c:9f:5f:d0:80:4b:c6:
         2e:99:4e:fa:c6:7f:39:47:4e:15:f6:36:6e:b6:89:94:bc:d2:
         e1:65:ae:40:f5:b1:f5:e9:6e:30:6c:71:6b:13:b8:fd:ed:8f:
         7f:4a:db:8d:04:dc:5c:8e:11:4b:5e:eb:d2:71:6f:84:bc:57:
         30:57:c7:84:d6:31:b6:e4:59:c6:df:0a:cf:cb:be:d3:8d:4f:
         64:0a:5f:c9:d7:bf:49:26:09:b3:8d:af:e5:26:3b:7b:00:0c:
         a0:12:95:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:18:16 2026 by rpki-client