Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
File:                     PFEOIbocnWAFiRMCVaNpKPHI8js.mft (raw, json)
Hash identifier:          Gttpmjrg501wyIXEBpKpKREdOC3YY0rzIvclnbeIHvc=
Subject key identifier:   C0:C9:F7:F3:9E:07:FA:12:11:4B:69:DC:61:63:2D:AC:61:75:D7:C3
Authority key identifier: 3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
Certificate issuer:       /CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Certificate serial:       01A1231DAF2EC4B2365FDCB2374F870505DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
Manifest number:          0110
Signing time:             Sat 10 Oct 2026 00:01:50 +0000
Manifest this update:     Sat 10 Oct 2026 00:01:50 +0000
Manifest next update:     Sun 11 Oct 2026 00:01:50 +0000
Files and hashes:         1: 0vMwcO-prVCBiJ1HH4N8JQBbTFg.roa (hash: DDQIEVV7Bq568hIRJt4vCWeNTR0mribCMhLMaet0/Xs=)
                          2: FX65EUsBfwC3KYo7_xOGFuEzOJk.roa (hash: KHm9K/+5wb0bpzl81mZXqyHKMzk0Qwhwf/+PXfXSvuY=)
                          3: J_NAqgVioUH73xW524wNxtH7C6E.roa (hash: tIH8jdWye/GvM9gQvJIJ7V27p73rrL92FZ33H+k5YoQ=)
                          4: OHMkQc20XLUuhWG9TR6YUIfUeNQ.roa (hash: Q/okgqIrrRu57dOM1pUZVReELn18xaaSWaDkfsqY+zY=)
                          5: PFEOIbocnWAFiRMCVaNpKPHI8js.crl (hash: W5g2Gsv1rcpjTZ7P25DJoy8815AgeKKAFViFed97jQo=)
                          6: b4ljpqvJJ99yhvWp5OXK-V_rwA4.roa (hash: uWVsOUuJFYO4g8DznA/hJUwAXuQNluCi4DapHS7DI2c=)
                          7: u17kqdLSyyJq5U0Zxqr0EXjDmmI.roa (hash: MsgYyS7H7F1Fay5YAf1h7SpoZxvLFnXiACTNhjQnhyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:1d:af:2e:c4:b2:36:5f:dc:b2:37:4f:87:05:05:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c510e21ba1c9d600589130255a36928f1c8f23b
        Validity
            Not Before: Oct 10 00:01:50 2026 GMT
            Not After : Oct 11 00:01:50 2026 GMT
        Subject: CN=c0c9f7f39e07fa12114b69dc61632dac6175d7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:74:a7:12:32:39:39:b8:ec:d7:2a:c0:0b:
                    52:2e:f0:98:64:15:a4:6f:78:ac:cf:e1:9c:d9:4f:
                    36:e9:25:4d:c8:53:34:ba:52:f5:7f:5d:3f:a4:ed:
                    15:40:a9:1b:7e:f1:37:f6:d8:1b:6d:6b:b5:9d:1f:
                    45:65:c9:b4:8b:67:e8:8f:4b:df:cb:ec:ac:f3:84:
                    c8:a6:f1:c6:fd:6a:89:0c:da:1c:7e:cf:4e:80:73:
                    be:15:50:9c:7b:2e:1f:1c:60:63:80:75:40:f5:6a:
                    fa:4d:fb:e1:06:28:07:54:08:d3:70:6c:93:6f:a8:
                    35:be:c4:b1:19:48:0d:b2:9c:ce:24:52:29:d4:88:
                    6e:64:8d:af:57:55:5b:9d:e1:3b:96:9c:c7:89:49:
                    8c:10:32:97:4a:4c:d1:18:0d:db:7a:20:44:32:22:
                    18:87:3d:29:03:e1:93:8f:fe:57:14:b2:3a:dd:19:
                    1b:36:50:ca:24:52:ff:79:a1:21:98:d6:bf:1e:fd:
                    57:45:d9:9a:ea:19:06:f9:6c:63:48:d4:cc:d6:77:
                    23:31:98:01:1f:be:14:64:4c:1e:c1:27:9d:58:00:
                    c4:39:e2:f7:f7:b5:04:f2:d5:b9:14:a3:da:d9:49:
                    06:cf:44:22:da:b2:46:81:a2:7a:d5:0c:df:1b:7d:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C9:F7:F3:9E:07:FA:12:11:4B:69:DC:61:63:2D:AC:61:75:D7:C3
            X509v3 Authority Key Identifier:
                keyid:3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:24:02:74:3d:f1:b0:cf:70:a8:14:9d:a0:2c:45:8b:c5:77:
         60:ef:a5:8b:7a:58:b5:41:1d:63:66:d7:82:4e:de:98:39:0e:
         ce:33:9f:ef:ff:db:27:27:2e:27:c5:05:12:b0:28:23:34:23:
         37:6d:79:5c:69:7a:8b:d2:17:2e:95:f1:98:c1:09:6d:c6:da:
         b8:9a:62:46:67:a6:d9:c5:75:25:30:ea:0b:96:06:b1:f1:6f:
         42:3a:4d:20:b5:7d:9a:54:22:06:13:2d:51:fa:79:77:9d:07:
         cb:62:4c:89:f9:7b:66:b6:cd:fa:b1:d8:66:d5:66:a6:22:52:
         bb:f4:26:cd:5b:b0:17:8a:86:2f:2e:42:16:c1:68:fb:e1:9a:
         30:da:a2:cd:bc:57:b3:7b:f3:8b:45:d2:ad:ec:d4:d3:e3:05:
         45:c3:bd:cc:41:f7:2e:50:3b:40:7c:81:5b:6f:ec:c7:69:7c:
         72:75:36:97:2e:78:19:6a:2f:d3:08:2c:28:be:e9:a2:f4:22:
         22:87:31:34:e1:a7:db:9b:df:a4:bc:7f:18:65:bc:98:c3:62:
         6a:4c:77:99:66:7c:51:a8:4f:b5:e5:11:71:ab:28:33:b1:4c:
         e8:20:12:7c:3c:0f:a7:23:f6:90:7f:e4:ea:be:69:08:3e:c6:
         dc:42:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:54:36 2026 by rpki-client