Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
File:                     PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json)
Hash identifier:          CsVvmEz1rTx1/2ks3IbGoTHZcR7Ts66yfoVTwo7I6t8=
Subject key identifier:   87:FD:B1:9A:7C:EB:5D:1E:0E:A1:C5:10:52:4D:1B:00:C0:B1:72:0F
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Certificate issuer:       /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial:       019CC6756A9BFFC0ED400A69F0831C147D4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
Manifest number:          0D0C
Signing time:             Sat 07 Mar 2026 04:01:49 +0000
Manifest this update:     Sat 07 Mar 2026 04:01:49 +0000
Manifest next update:     Sun 08 Mar 2026 04:01:49 +0000
Files and hashes:         1: IjORSZ-DHS2njbEibdVPiJ07doE.roa (hash: FzfwUHvA2+MAnkkt3/CLPEpFaaB/4mZFGU2wFD1oYDg=)
                          2: JcRvo9eKx7OaD_XqF6ofMiZVW6s.roa (hash: YveWpi6AJgq5ydWYFnpgDOP/dgPBe846GgNOj6NIeio=)
                          3: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: K/4Fx1j6PPeKP3dnmWoCCbYwM8sXSd7tEXp8wzaSzbo=)
                          4: TMAMHptU5L3vkBv93_ALuUDlqmI.roa (hash: vr74guYNZJJo+nJwNDEaeFbfZdAmyE3APxi/3PH5FOw=)
                          5: _tWKsocuF_rpwquYOU5lc0O3uJM.roa (hash: MmXxKOM+EuL1eSrHg+bnsKdzlf0fumiR/2fZPfIg4qU=)
                          6: adu7xMr-sFr4uxv_MuZJYXtm75I.roa (hash: mkOL5n7ZlQqQqd6xIZgR+yb2Xixn7LiRAUIkOJH0g3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c6:75:6a:9b:ff:c0:ed:40:0a:69:f0:83:1c:14:7d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
        Validity
            Not Before: Mar  7 04:01:49 2026 GMT
            Not After : Mar  8 04:01:49 2026 GMT
        Subject: CN=87fdb19a7ceb5d1e0ea1c510524d1b00c0b1720f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:25:76:78:3b:ca:ad:16:1d:12:7d:d4:a2:
                    24:4a:2f:06:42:d1:bc:46:6c:a5:22:8a:8b:37:e4:
                    ae:c3:06:32:65:6c:6e:f1:1e:9b:9d:8a:a3:31:da:
                    55:e4:67:f1:19:2d:17:07:7a:30:82:d5:a1:22:01:
                    f0:4a:96:ff:60:b0:1c:e9:0e:92:a9:9b:f8:91:e6:
                    f9:6f:5c:90:e0:df:ea:d5:48:35:73:76:bb:f1:24:
                    77:67:f4:f4:11:10:82:ec:ac:98:71:56:e0:e5:2e:
                    df:ad:84:68:e1:c0:ea:8f:ef:19:76:3c:0d:5e:f6:
                    2b:68:cd:fd:77:0f:3a:89:18:d6:ec:30:57:3a:f8:
                    9c:15:2c:1b:16:fb:07:9b:0c:95:f5:06:c4:2b:1e:
                    c4:83:04:b2:2f:ed:ab:0c:91:8e:3c:10:60:8a:a8:
                    38:a8:bc:06:a5:f9:46:5d:ac:be:63:99:5b:f6:28:
                    43:ab:17:0f:b8:82:be:52:32:ec:29:48:1e:04:c4:
                    57:e1:91:6d:93:91:9e:d5:98:f5:cc:d8:a6:5e:72:
                    70:c8:f3:81:3e:36:60:23:30:c9:53:1b:40:d6:39:
                    84:8e:bf:4a:2e:a7:bf:12:7d:39:9c:92:3c:ba:80:
                    93:48:76:c0:17:8e:95:e7:12:d7:fa:51:ab:82:ec:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FD:B1:9A:7C:EB:5D:1E:0E:A1:C5:10:52:4D:1B:00:C0:B1:72:0F
            X509v3 Authority Key Identifier:
                keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:2c:56:40:eb:a9:5e:01:20:d6:5a:c6:3b:86:20:ef:b6:
         24:dd:cf:fe:b0:7e:f3:cd:06:53:15:4b:fe:a4:e4:07:91:8f:
         82:17:11:72:11:87:ff:04:78:2c:9e:2a:90:e2:6b:66:cb:9c:
         c1:8d:1a:23:4a:8e:cb:5d:d1:67:e7:bc:ea:f2:fb:fe:5c:26:
         39:a7:25:c2:fa:e2:28:cf:77:af:a4:d2:f2:18:d9:24:63:1f:
         63:7c:0d:01:a2:1b:94:dd:37:42:e5:95:a2:c8:17:51:ac:04:
         76:95:05:96:12:62:f8:11:b2:c0:4f:bf:26:90:6d:71:52:d9:
         fa:16:6c:2a:f5:b0:aa:94:7a:a4:d8:a6:7e:8e:ff:39:6f:3d:
         c2:64:4d:a3:3a:59:2e:25:3a:72:96:ff:8d:22:4d:16:c0:8b:
         f0:38:bb:10:86:5d:01:fb:ed:88:a7:77:51:a7:cc:ff:0f:7e:
         30:fd:f0:c6:a2:00:f2:59:d4:2b:a6:76:b2:06:aa:b1:f3:42:
         0b:a9:2d:60:92:6b:e8:7e:89:0a:60:27:97:24:c0:e4:40:29:
         67:99:d3:19:f7:ec:08:8f:9e:3e:ea:6f:33:e3:87:07:11:18:
         1f:b9:df:47:95:02:3d:b5:b0:2f:ee:86:ed:20:b0:45:54:1f:
         4c:22:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:43:59 2026 by rpki-client