Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
File:                     PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json)
Hash identifier:          rKKFU3kmWelxp708+4rtxsosLM/jWhJT/BF5/7VrIL4=
Subject key identifier:   A5:DB:B8:0C:D6:DA:B6:B4:4A:A7:AF:9B:D2:B5:BD:C9:EF:13:43:82
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Certificate issuer:       /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial:       01A161FC0A1602676E1D36E7FFE7E157AB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
Manifest number:          0F72
Signing time:             Thu 22 Oct 2026 05:01:09 +0000
Manifest this update:     Thu 22 Oct 2026 05:01:09 +0000
Manifest next update:     Fri 23 Oct 2026 05:01:09 +0000
Files and hashes:         1: JcRvo9eKx7OaD_XqF6ofMiZVW6s.roa (hash: YveWpi6AJgq5ydWYFnpgDOP/dgPBe846GgNOj6NIeio=)
                          2: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: Dv//MzmIZYafT925Q1EzfF03t5xXl0/DKJv8Dy+Th6Y=)
                          3: TMAMHptU5L3vkBv93_ALuUDlqmI.roa (hash: vr74guYNZJJo+nJwNDEaeFbfZdAmyE3APxi/3PH5FOw=)
                          4: _tWKsocuF_rpwquYOU5lc0O3uJM.roa (hash: MmXxKOM+EuL1eSrHg+bnsKdzlf0fumiR/2fZPfIg4qU=)
                          5: adu7xMr-sFr4uxv_MuZJYXtm75I.roa (hash: mkOL5n7ZlQqQqd6xIZgR+yb2Xixn7LiRAUIkOJH0g3o=)
                          6: vpcW0ASyWjfWJWvvCqaCGpZPbyo.roa (hash: B0yxelyt26ZxGmvWUfyG/XNGIce+zZMZfsM4lchOpzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:61:fc:0a:16:02:67:6e:1d:36:e7:ff:e7:e1:57:ab:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
        Validity
            Not Before: Oct 22 05:01:09 2026 GMT
            Not After : Oct 23 05:01:09 2026 GMT
        Subject: CN=a5dbb80cd6dab6b44aa7af9bd2b5bdc9ef134382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:66:8c:94:08:c5:c0:4f:43:5a:5e:1d:0b:
                    ef:40:3d:e6:3e:73:89:42:8d:57:cb:d9:49:f6:3a:
                    a9:cb:02:07:65:2e:8b:d8:c5:cf:c3:76:12:b9:af:
                    67:c9:23:90:99:68:13:17:89:f4:27:cb:ca:7f:36:
                    f8:02:98:dc:47:3a:01:d5:47:99:57:f5:d7:1c:14:
                    50:e3:7e:ea:a0:09:ab:a2:aa:56:90:8e:b5:a0:ff:
                    64:67:ac:4f:4f:e5:06:63:3b:d4:c5:c4:95:26:d4:
                    11:ff:13:c0:91:ee:6d:c8:04:35:b2:65:76:03:ef:
                    d2:b9:b9:ff:74:83:83:d1:0f:35:d8:77:4f:53:37:
                    0b:51:fe:ec:04:21:90:1b:fd:63:e6:3a:28:55:91:
                    6f:26:b4:b3:59:dd:7c:10:cd:33:e5:f3:be:e9:80:
                    98:cf:11:6f:9f:40:30:fa:53:c7:bd:e9:cd:ad:f9:
                    89:93:7e:40:fc:09:b5:50:77:bf:62:84:19:b8:c6:
                    c7:06:28:e1:55:3a:94:bb:6b:c2:10:2c:96:eb:aa:
                    df:75:d0:a1:d7:3f:21:57:0a:d9:a3:df:a1:1a:92:
                    2b:23:ee:0d:07:64:4e:76:a6:66:0f:51:8e:3a:50:
                    3d:31:22:1d:14:10:73:01:0f:80:79:15:0f:2c:88:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DB:B8:0C:D6:DA:B6:B4:4A:A7:AF:9B:D2:B5:BD:C9:EF:13:43:82
            X509v3 Authority Key Identifier:
                keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:09:af:60:92:3a:99:ec:2b:8a:d9:2d:de:2c:f4:0c:d6:32:
         4a:11:5d:49:6a:7e:f1:50:2b:5a:2f:44:e0:e2:86:eb:4a:02:
         55:ad:c8:87:7b:8f:30:b8:19:79:50:b6:da:7f:7c:50:bb:e7:
         d4:63:30:03:73:5a:4b:b8:f4:b4:e6:1f:7f:5f:1f:30:0f:ae:
         9d:01:e1:41:1d:ff:60:e0:3a:88:3f:5e:6e:df:96:84:17:35:
         b3:7a:ad:72:6b:af:9d:67:96:32:05:ae:46:c6:c8:31:7c:f2:
         96:a7:87:84:c6:5d:05:98:c0:d0:69:d7:ee:8f:c5:ee:9e:27:
         38:61:93:2b:86:e3:de:5e:25:a3:78:15:17:fa:dc:62:ac:18:
         c8:9e:79:9e:50:2f:d1:0e:09:94:87:4d:61:21:96:81:7f:ec:
         41:82:64:df:19:d4:c3:69:90:e5:1e:99:d5:43:a7:eb:fc:ee:
         a9:01:1e:01:6f:c4:95:1c:bc:ec:28:b0:65:2a:af:7a:70:d3:
         a8:fa:b2:d6:2d:4a:5a:4c:dc:dd:72:dc:63:1f:de:64:3a:26:
         99:aa:43:4f:4e:69:40:5b:50:56:0b:3e:ea:1e:cd:6c:c4:39:
         3f:65:0b:0b:4c:c7:69:98:75:32:13:31:2e:0a:29:36:34:ca:
         ad:c8:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 09:18:23 2026 by rpki-client