Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
File:                     PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft (raw, json)
Hash identifier:          CV5eKWyNuNnesTTbIwNIu2KDGjUZbodnCkeWLfJsNgM=
Subject key identifier:   99:73:CB:F1:0B:81:73:93:C9:81:D3:DC:28:57:FE:AE:A1:D7:7D:7D
Authority key identifier: 3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8
Certificate issuer:       /CN=3c1affe59d58621d945b897fe6b7947d562529b8
Certificate serial:       019FA184BEE9966A7E79E77D62F075CA44B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
Manifest number:          0253
Signing time:             Mon 27 Jul 2026 03:00:59 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:59 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:59 +0000
Files and hashes:         1: AuAubJ6IQiR1AaCyKFFOYLvuk5c.roa (hash: Vto7ZpDuL9YOcUjK4xehLrBvtIDW8BU1nnENLEOymf4=)
                          2: PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl (hash: yjco5Fzhu3q/ZdxInh9eESWuFyYxist3DQdFB+eRYXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:be:e9:96:6a:7e:79:e7:7d:62:f0:75:ca:44:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1affe59d58621d945b897fe6b7947d562529b8
        Validity
            Not Before: Jul 27 03:00:59 2026 GMT
            Not After : Jul 28 03:00:59 2026 GMT
        Subject: CN=9973cbf10b817393c981d3dc2857feaea1d77d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:a2:14:34:b5:13:a6:43:79:4e:f1:d4:f0:
                    22:eb:0c:93:76:60:60:23:9e:79:02:f1:fe:ab:8c:
                    71:4b:02:89:e4:24:e1:d1:44:51:16:3f:d1:0a:b1:
                    59:d2:90:36:3d:e2:40:08:d9:c0:37:bd:c0:7a:c6:
                    22:3f:e9:61:5d:ec:e5:c1:1f:47:3e:06:46:dd:69:
                    09:8f:45:6d:1b:63:aa:c7:30:c5:ee:5b:9c:9a:f3:
                    9c:14:4d:ac:b8:8c:41:8f:0b:16:0a:ef:64:55:1c:
                    18:fc:71:00:9e:1e:13:f2:24:5c:f2:c7:d4:d2:46:
                    59:a3:56:8b:9d:8c:2a:97:54:df:da:bb:75:d8:42:
                    b7:ff:57:f9:8f:d6:b5:0e:ee:48:37:ff:1b:0c:4c:
                    11:02:66:f5:61:b9:8b:93:71:db:6e:f1:39:7c:cf:
                    65:86:d8:9b:d1:83:63:37:43:a2:82:bd:91:ae:a8:
                    92:7b:ff:0d:0b:fa:40:53:d6:cb:f3:ac:fc:8c:c1:
                    e5:83:50:dc:c0:52:01:e6:b4:bc:16:dc:d9:fe:0b:
                    52:b0:47:a3:97:ac:b6:8c:66:c5:6b:f9:6a:bf:6f:
                    bf:e7:44:79:6d:b0:b5:28:16:2a:f8:cf:17:89:39:
                    5b:ac:82:f0:91:c3:5c:b4:8c:92:16:6e:8d:d1:05:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:73:CB:F1:0B:81:73:93:C9:81:D3:DC:28:57:FE:AE:A1:D7:7D:7D
            X509v3 Authority Key Identifier:
                keyid:3C:1A:FF:E5:9D:58:62:1D:94:5B:89:7F:E6:B7:94:7D:56:25:29:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBr_5Z1YYh2UW4l_5reUfVYlKbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ee958c-c8c8-447b-829a-1df4cfd7ab77/1/PBr_5Z1YYh2UW4l_5reUfVYlKbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:c2:b2:b7:81:1e:4f:f1:71:3a:e2:11:c6:37:2c:e9:d7:d0:
         65:a9:70:e3:d6:62:9a:00:46:14:26:05:57:44:76:ee:e0:35:
         79:71:e2:6d:c3:fd:d5:94:eb:40:8f:c7:21:27:0c:79:79:5e:
         7c:63:0f:10:ff:ad:54:eb:75:f1:9d:26:d1:3f:26:ad:65:8a:
         bb:79:7d:af:bb:bb:39:0a:f0:dc:23:25:8d:3f:ba:bb:97:cc:
         ac:ec:2b:1a:44:01:cb:40:75:b6:e9:65:39:b6:27:69:9c:f3:
         6c:96:40:67:87:3a:9d:1b:23:b4:7f:b4:14:17:7e:41:50:ac:
         f2:93:e7:43:ce:d6:42:43:f9:4b:51:49:5e:99:de:e6:b3:e5:
         02:10:14:88:50:5d:eb:52:d3:61:08:28:dc:4d:93:9d:d5:60:
         e8:41:eb:5e:3c:4f:f6:2e:79:ea:74:77:dc:08:53:d8:fd:eb:
         f7:49:2d:d7:51:37:06:5f:39:76:56:60:5a:67:67:c3:64:70:
         8c:70:ae:23:36:45:ab:9a:d1:a4:d0:da:fd:f8:3f:c3:61:5e:
         0e:6b:60:c5:2d:d7:15:01:4e:74:5d:33:9b:ac:28:4c:e7:e2:
         8b:2d:25:0a:8a:75:e1:89:50:0d:c9:72:28:ec:8c:e1:1d:61:
         8c:81:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:04:45 2026 by rpki-client