Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File:                     PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier:          2fuoKiXfBd6wKu35A/XgY0VsDoqcpYN4KUEkZ6XDf+Q=
Subject key identifier:   11:32:A6:BC:EA:D2:A4:57:77:0E:8E:20:67:57:B1:3A:99:5E:9D:CD
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer:       /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial:       01A001DD944E7A1AC976D4C432EAFE44511C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 20:01:33 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:33 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:33 +0000
Files and hashes:         1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: oLmqkZglWAEWAllI/Vw4G8y7P/Qlmf+7bwk6h5AoZHQ=)
                          2: qKVtlv3W7vjWS1xd7JwxDC1EnCE.roa (hash: pQJ4/lFMndf01cjoPvkJY3R02om+5915006Zk5RIRaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:94:4e:7a:1a:c9:76:d4:c4:32:ea:fe:44:51:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
        Validity
            Not Before: Aug 14 20:01:33 2026 GMT
            Not After : Aug 15 20:01:33 2026 GMT
        Subject: CN=1132a6bcead2a457770e8e206757b13a995e9dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f1:dc:aa:b8:ff:d8:b2:6a:69:65:65:0c:8f:
                    22:dc:8f:f0:65:ad:d5:2c:50:2e:82:03:97:a3:ae:
                    bd:8e:2a:1c:4d:db:ac:66:28:56:3a:76:dc:7b:44:
                    7c:e9:d0:58:3a:75:3d:ed:36:3c:ad:eb:74:5f:11:
                    3d:ee:11:a0:60:57:e3:33:16:51:d9:50:08:0c:f2:
                    83:e3:94:e9:fe:c9:67:09:66:13:9a:09:b9:5f:41:
                    c7:cb:ab:e6:c5:a2:f4:07:df:38:36:f2:76:41:c9:
                    0c:a4:5c:96:31:d1:9c:11:ea:2d:45:2c:93:f9:a1:
                    51:26:47:ee:8c:f4:9b:b6:d6:42:ff:cf:a3:76:43:
                    14:49:71:cc:df:8c:a4:fc:bd:92:ac:48:f7:fc:25:
                    89:43:eb:5f:76:d4:d3:df:c4:86:8b:1f:55:9e:83:
                    5d:a2:eb:99:fd:c1:41:e2:fb:14:9d:8a:68:50:77:
                    f6:88:2d:bf:59:d9:40:0b:e1:15:43:6c:06:f8:f9:
                    78:5e:bf:a4:4c:01:4c:54:ad:a0:10:36:43:75:fe:
                    c5:d1:2d:ff:81:8a:45:52:b1:9d:54:4d:c4:cf:f9:
                    72:2f:db:8e:43:7a:67:ce:ab:11:f9:ee:11:ae:6d:
                    91:1a:1f:d2:a5:e7:4d:e1:88:24:c4:30:8b:1f:8a:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:32:A6:BC:EA:D2:A4:57:77:0E:8E:20:67:57:B1:3A:99:5E:9D:CD
            X509v3 Authority Key Identifier:
                keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:43:ab:ba:07:4f:4c:15:e0:11:5a:88:88:ee:6e:e3:d8:
         f7:c2:3e:6a:a6:56:72:30:29:dc:b1:48:a9:de:86:6d:56:5e:
         c6:00:d5:4c:6c:65:f2:d5:b1:bb:22:21:8c:4d:f4:35:03:ec:
         4c:75:12:a3:73:0e:19:ea:e8:54:5b:9c:92:5d:1b:56:29:2c:
         6c:c1:2e:02:49:d1:2c:33:b3:96:8f:1b:04:e0:9f:d3:09:62:
         29:03:d5:b0:33:70:1c:a0:31:75:e8:08:58:ef:c7:82:8c:8c:
         d2:7c:6b:9c:41:6c:81:ef:a7:3b:d4:63:08:68:97:f0:d3:f5:
         34:63:97:19:57:5b:07:0a:57:02:a1:f1:93:4a:4c:38:9e:5a:
         bb:76:c7:1d:68:7f:c0:34:b6:7e:10:38:58:2e:37:c7:6a:d7:
         b9:e0:78:8e:14:c0:d4:2c:a9:b1:fe:a7:9a:b1:eb:42:38:e7:
         20:98:5c:5c:38:18:08:7e:c8:5a:db:08:42:f0:02:f6:27:31:
         6c:3a:c6:19:b4:51:47:0b:f5:71:9e:31:0c:fc:fe:29:64:28:
         80:9a:f0:8b:4b:1d:19:92:10:e3:38:20:40:78:8e:85:97:55:
         79:03:4a:d7:4c:3d:b8:d2:2d:59:2b:42:b5:b9:f9:45:08:e6:
         5d:21:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:41 2026 by rpki-client