Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File:                     PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier:          BMvu6gphsdOc0HDkWIC2SKt6cOT9shwaa8EF62UYkGM=
Subject key identifier:   CF:E7:64:64:70:5C:9B:8E:4B:78:A6:6C:89:22:9E:B2:BA:24:2C:44
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer:       /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial:       019FF534C9B35369EB07AD90A44F401541DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number:          0A82
Signing time:             Wed 12 Aug 2026 09:01:45 +0000
Manifest this update:     Wed 12 Aug 2026 09:01:45 +0000
Manifest next update:     Thu 13 Aug 2026 09:01:45 +0000
Files and hashes:         1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: ZA6Va6dXIOUByXwie96t+5kdaIlJ96TlEK4dI7QWFGI=)
                          2: SRouw1ACmOxsP7DYIDJnot7Wy0M.roa (hash: Axkim79AjMG7Hlgx6O/xdzgLE7UsB+oDhwA5WGJg0Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f5:34:c9:b3:53:69:eb:07:ad:90:a4:4f:40:15:41:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
        Validity
            Not Before: Aug 12 09:01:45 2026 GMT
            Not After : Aug 13 09:01:45 2026 GMT
        Subject: CN=cfe76464705c9b8e4b78a66c89229eb2ba242c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:78:bb:d4:ca:ed:bf:8b:36:d2:83:0d:11:
                    e4:ea:20:bc:eb:45:1b:ac:99:64:3c:4c:85:dc:be:
                    88:3c:48:45:bc:cf:71:cc:fb:04:00:61:a7:b1:70:
                    c2:3e:5f:9c:c1:b9:d4:9c:84:26:64:2d:b9:4a:21:
                    64:bf:78:19:26:5e:c5:2a:54:de:45:fe:a3:8b:0f:
                    00:49:80:ad:07:e3:b1:bc:67:ac:f3:f6:f6:ad:ac:
                    25:ce:08:b9:a6:d2:18:c7:8a:85:18:55:bf:a5:eb:
                    4b:d6:d6:13:10:e8:69:26:48:d4:19:ea:dd:a0:ba:
                    df:8a:63:d8:a0:59:8c:83:4b:6d:41:88:16:e9:58:
                    5a:43:8f:e7:ba:99:be:68:a9:86:3a:eb:6e:f7:3a:
                    7d:8e:17:18:67:bd:d7:bd:66:28:de:c6:56:49:ee:
                    e0:26:1a:73:47:24:da:f7:93:ac:50:a3:a3:98:54:
                    86:f0:c1:11:ea:b9:03:5e:7d:f8:e0:00:c1:a7:d7:
                    6f:13:2a:13:7f:db:15:29:1d:a1:f2:92:4c:cb:26:
                    d1:a8:5d:f6:cf:bf:3f:9e:92:43:a1:48:f4:ce:eb:
                    ec:47:5f:23:c3:46:d9:0f:96:de:68:cd:58:7c:99:
                    b9:b0:7a:0a:e1:e1:d6:79:84:3d:aa:d6:6a:5e:4d:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E7:64:64:70:5C:9B:8E:4B:78:A6:6C:89:22:9E:B2:BA:24:2C:44
            X509v3 Authority Key Identifier:
                keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:aa:0e:f5:f5:e3:ed:e1:38:fe:2d:99:14:24:fc:cb:58:5c:
         96:ab:27:1a:07:91:0a:cb:31:60:86:04:39:f2:ca:68:85:ca:
         2d:51:b8:89:24:6f:7c:32:a1:2c:1c:31:97:6e:84:5c:6c:ff:
         8b:19:ee:63:cc:36:cc:03:c8:6b:d9:ad:41:fc:80:4f:c4:10:
         95:ff:25:84:54:2f:84:4c:23:b5:7b:a8:fd:cf:4c:8d:ed:32:
         a6:5d:94:2f:32:0b:70:a5:bb:e2:c8:08:5f:fe:f4:93:ea:a1:
         00:a8:d6:81:4c:1b:c8:d4:65:50:56:c4:c7:93:7f:e3:63:42:
         26:ac:10:80:1b:6c:a8:65:37:e2:50:a0:6b:d1:48:69:ff:53:
         b0:cf:1a:91:b6:a9:6f:23:e2:05:a4:76:c5:d2:9e:5d:b5:69:
         51:e2:b6:bd:e8:88:0c:9a:3a:2e:e8:64:6d:22:22:8d:eb:8e:
         14:ea:10:0c:25:22:bf:54:5b:40:8b:16:2a:1e:1a:a0:a9:45:
         f1:68:df:6d:4d:1d:ec:9a:67:b6:f6:4c:d4:03:7d:e8:2c:67:
         77:3f:13:99:67:6b:05:7c:fb:e0:94:c2:fa:78:1f:c0:b0:32:
         31:c0:86:47:45:ed:98:6f:89:67:28:87:68:c4:f8:a2:c6:8e:
         30:48:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 11:37:41 2026 by rpki-client