Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
File:                     Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json)
Hash identifier:          zph7Rvhbdb5JauhwyR8OKPQMhzSeRRXTq+N8ZVc4Qpc=
Subject key identifier:   54:E8:8D:45:5C:06:E1:84:74:9E:96:6F:3F:83:9E:88:12:AB:EE:C7
Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Certificate issuer:       /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Certificate serial:       01A08C43E745082898B08367C00BA2CCFB25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
Manifest number:          0947
Signing time:             Thu 10 Sep 2026 17:00:55 +0000
Manifest this update:     Thu 10 Sep 2026 17:00:55 +0000
Manifest next update:     Fri 11 Sep 2026 17:00:55 +0000
Files and hashes:         1: 9MMTJC9bSYJjm0yH2SR40mWxLt4.roa (hash: 911epWb1C+HTij7xHBBtK6BFbTtOQmcCGUfZtk4CgN0=)
                          2: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: iTW//X2A3YJyTobATzsLwRmYocFzRMQzHEEWBTWL49g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:43:e7:45:08:28:98:b0:83:67:c0:0b:a2:cc:fb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
        Validity
            Not Before: Sep 10 17:00:55 2026 GMT
            Not After : Sep 11 17:00:55 2026 GMT
        Subject: CN=54e88d455c06e184749e966f3f839e8812abeec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8f:45:03:06:1d:e8:05:3b:da:18:3b:71:10:
                    71:d0:88:54:6c:86:9b:a8:4f:00:01:c8:b9:3a:0c:
                    04:51:6c:45:bc:8a:55:59:9f:ed:52:ef:e2:98:5c:
                    05:66:47:71:01:af:c0:c4:ca:b3:3f:19:8c:94:8d:
                    0f:80:99:49:4d:d9:56:24:bb:46:46:6e:dc:6c:d5:
                    b3:f8:70:7f:87:57:c6:f7:c5:ce:49:49:8c:e3:62:
                    3f:60:cc:32:fb:5f:38:2d:12:d7:f4:8d:e2:e5:c2:
                    e3:ab:95:6d:32:23:58:f6:1f:61:af:4b:0c:eb:1d:
                    4c:a9:a0:74:2a:da:0c:27:f5:20:c9:34:b2:19:38:
                    9d:0e:18:36:51:88:50:b7:39:ef:89:f9:ff:58:2a:
                    e1:51:b1:d3:93:83:7d:c5:ce:65:4b:41:3b:91:4f:
                    ea:5d:36:08:44:33:5d:5f:90:df:5f:a3:63:38:ad:
                    8c:84:e3:c0:13:da:77:55:57:94:fe:d5:19:38:2e:
                    49:28:f8:18:f9:39:3e:21:16:bd:2f:f1:c6:cc:94:
                    4b:76:08:1f:e9:64:69:06:06:6e:fc:57:c7:9c:32:
                    e4:fc:bf:1c:a5:85:5a:40:0d:c2:47:72:bc:46:f5:
                    40:e6:c4:63:89:f3:50:b5:bf:c9:4f:39:d0:78:97:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E8:8D:45:5C:06:E1:84:74:9E:96:6F:3F:83:9E:88:12:AB:EE:C7
            X509v3 Authority Key Identifier:
                keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:96:94:05:ff:24:99:b6:2f:88:80:df:c3:59:0b:2c:1e:6f:
         be:c5:73:14:75:ef:8e:5b:30:f4:1e:dd:14:3a:9d:77:2c:d8:
         7d:d2:c4:05:fe:77:03:30:6f:69:08:b0:6e:11:97:46:6f:df:
         05:30:2d:eb:44:fe:e3:5c:de:28:e9:02:09:6c:86:88:a0:4a:
         7f:2b:dd:cd:6c:ae:a8:ef:70:6c:12:7f:96:3c:19:9a:9d:94:
         84:c8:6e:81:1f:8f:37:52:38:62:a2:80:d9:99:49:78:0c:1e:
         e0:ca:05:f4:58:77:c2:47:b8:b2:40:28:c4:23:2e:6e:94:f8:
         2a:cd:59:1c:c4:dc:d2:ac:8f:14:5f:c0:c6:06:d2:68:f4:6c:
         eb:8a:66:62:3e:72:cd:7d:b4:13:47:c7:7d:71:dd:e1:84:87:
         68:50:52:3e:e8:39:f5:d5:f9:b3:1c:e7:a7:d7:cd:9a:80:99:
         86:67:72:6d:07:b0:7a:10:df:af:42:43:0c:11:dc:5d:9b:e5:
         5c:20:23:b7:ad:87:a3:b7:d5:c5:a7:50:93:c9:e0:9f:9e:d2:
         bb:7d:73:be:a8:aa:ea:a4:7e:c5:ce:d5:60:aa:0b:70:14:8f:
         0e:48:8e:0c:9e:5b:e9:99:e8:d3:28:c6:87:ca:2f:04:87:62:
         c2:4f:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:22 2026 by rpki-client