Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File:                     PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier:          OH9x1iIDG140sKLXrtEUUaanLV54o2pOIWXLCt99vNQ=
Subject key identifier:   68:2C:6D:B0:4B:71:E1:7B:82:B7:3C:10:40:4F:20:7E:DE:92:B0:E1
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer:       /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial:       01A08CE88D4D84DDDBD5A6960BD690585423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number:          181A
Signing time:             Thu 10 Sep 2026 20:00:45 +0000
Manifest this update:     Thu 10 Sep 2026 20:00:45 +0000
Manifest next update:     Fri 11 Sep 2026 20:00:45 +0000
Files and hashes:         1: 9JqUzmhn979MzWUxIBT2RPIOS8A.roa (hash: rkzdzZw7cy8e5NHHoY93mCGwkkZGsYaobB+ZGaI78YQ=)
                          2: K0vidJ7tM2mKOKZRaF9LzxYTcOY.roa (hash: j1Pyv97hL7TS1MOu3SXdm7zFyMsZ0tV3SkgI1mKBoHI=)
                          3: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: GRDhGdAY7K/vwXKdZkD9sAKvas5gqh0MoR8RbNYWyls=)
                          4: Vh01heQZwiiV-5U2YWUI9ETdNp0.roa (hash: NerAxUNFCszCX2X5F5Gpmh7sivfYufWqTOLrM/cv+gM=)
                          5: tMuTjVPYB4qy8Lzty-HvMfNIyHg.roa (hash: 2UYLL/RMvv9f6KttdupVfDP+HWvUuHhv7cOVMA+gdLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:e8:8d:4d:84:dd:db:d5:a6:96:0b:d6:90:58:54:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
        Validity
            Not Before: Sep 10 20:00:45 2026 GMT
            Not After : Sep 11 20:00:45 2026 GMT
        Subject: CN=682c6db04b71e17b82b73c10404f207ede92b0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:3d:98:92:34:2c:57:18:67:bc:66:62:55:23:
                    df:c1:de:28:ee:3c:e4:e6:85:16:cf:40:2b:cf:63:
                    9d:4b:c2:29:7f:1d:23:75:13:d6:a9:8f:aa:f9:d8:
                    8b:e0:cd:c6:d2:98:a1:f7:26:ca:d2:15:89:b9:22:
                    26:de:cb:14:2f:e4:b3:e3:be:f4:1e:ba:68:c3:5f:
                    ff:c1:42:3a:82:fa:b8:80:85:a1:b1:f1:2f:43:65:
                    22:82:15:f4:dc:1f:13:3b:ba:c0:60:c8:10:db:da:
                    9e:e3:88:a1:ca:3b:ba:e5:6b:86:2a:be:03:64:e7:
                    e4:59:69:e9:d4:e3:21:9d:77:7f:7d:61:14:3c:04:
                    dc:7a:89:a5:dd:f2:0d:e4:29:b7:72:ca:29:38:c0:
                    85:3d:d3:61:5e:46:81:df:42:7e:42:cf:a5:60:23:
                    91:03:f7:0a:cc:47:d7:14:f8:04:7d:4b:e2:7a:0c:
                    62:c4:76:04:c0:b0:2b:90:59:d8:b5:51:50:22:78:
                    30:74:85:ea:ca:39:47:48:76:c3:b5:80:b9:30:61:
                    5a:31:b9:f6:12:8c:24:c7:99:7e:d6:1b:cc:2d:bd:
                    d0:e2:95:26:70:09:7b:a9:d1:cd:a8:db:ae:d5:b8:
                    d1:c4:93:00:ad:db:57:fe:02:3d:18:03:db:db:1b:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2C:6D:B0:4B:71:E1:7B:82:B7:3C:10:40:4F:20:7E:DE:92:B0:E1
            X509v3 Authority Key Identifier:
                keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:37:ed:a3:2c:ac:06:82:d0:c8:7b:3d:df:5d:6d:e5:38:6d:
         1d:f7:66:72:a9:8f:c7:50:f3:2f:f3:ab:07:49:02:9b:21:38:
         cf:14:f5:30:d4:8f:30:33:1f:35:7b:c9:f4:d1:d4:4f:85:7e:
         0b:ef:ff:92:19:da:a8:69:bf:6f:3e:e6:d0:ec:2f:96:6a:c5:
         fd:9f:83:e0:0a:f9:b7:5a:54:fd:a1:b7:fe:93:0d:22:b0:b1:
         c8:38:c0:fc:6c:77:b6:2f:48:25:14:ed:01:ba:38:05:32:da:
         e0:c7:de:3b:0d:f0:fa:d1:2e:c7:92:fc:03:40:dc:a5:89:8a:
         71:ea:ee:86:28:e5:eb:c0:cc:1f:eb:eb:7f:47:9d:78:a8:55:
         4d:95:56:25:0a:9e:78:8b:db:2c:2f:b7:ce:10:ed:68:83:f1:
         f4:89:f8:1f:e4:ca:39:55:9e:40:12:0d:60:d9:80:99:f2:85:
         2a:e0:04:10:81:9b:19:38:7c:a0:57:d9:8b:a3:75:59:af:5a:
         02:bc:ab:32:96:5d:9b:52:8b:73:84:94:64:39:56:f0:32:ce:
         25:b5:aa:ed:d4:ee:ee:bd:7d:05:31:31:5b:43:b1:45:1f:ab:
         36:4f:e1:f7:01:b1:51:4e:76:a1:99:47:a9:78:d7:9a:15:67:
         f0:3f:bf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:44:59 2026 by rpki-client