Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
File:                     psCc_RV4gUqM0dgdyGyJD9X6hmE.mft (raw, json)
Hash identifier:          RXnoyhWNXI8YqPyQ4Pm553lZ0PrcGqdlcUeBdyTScv8=
Subject key identifier:   BB:28:CF:59:56:D9:E1:72:FD:7B:0C:DC:AC:2A:2B:47:F4:F4:C1:0C
Authority key identifier: A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61
Certificate issuer:       /CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
Certificate serial:       01A140159E1FA4F251FFD07BA3E2EE555147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
Manifest number:          0D77
Signing time:             Thu 15 Oct 2026 15:02:00 +0000
Manifest this update:     Thu 15 Oct 2026 15:02:00 +0000
Manifest next update:     Fri 16 Oct 2026 15:02:00 +0000
Files and hashes:         1: 0X-8DIn3BuQjjBQ9eCsjsW8Dcg8.roa (hash: LbQ/hnkbU7PVWvL7lVNJeSAVtKBQkfLZPhP9e++JU6s=)
                          2: ffX3VsckZLc4-RcWXfaxE7WOdc0.roa (hash: gI5X7EBuAWJm9swpecj8XXe2ZApaNA07hJoO/xei8RE=)
                          3: hz7lj2eZQUoABeI9x4fVkCFHdyQ.roa (hash: xUeXDDyBDFWaWumwKndxvSVmNo5fikQ4qnOyoheblN0=)
                          4: psCc_RV4gUqM0dgdyGyJD9X6hmE.crl (hash: QR4552W9TECgxf1niOWgRgbIWd9SPYIscNcvuT/BG+w=)
                          5: yXIuz2r0HYRszCngCfGufOSDzZ4.roa (hash: T/tuU4P0COLsvy6rNb8d4mecjKkzZxnFo2OajUbzoUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 15:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:15:9e:1f:a4:f2:51:ff:d0:7b:a3:e2:ee:55:51:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
        Validity
            Not Before: Oct 15 15:02:00 2026 GMT
            Not After : Oct 16 15:02:00 2026 GMT
        Subject: CN=bb28cf5956d9e172fd7b0cdcac2a2b47f4f4c10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:f7:30:3a:f2:8d:80:c1:fe:1c:8f:30:f4:
                    9c:d7:d4:70:9c:1e:2f:b0:51:08:b6:b0:57:f6:e1:
                    2c:85:21:18:55:e2:e7:70:f8:ad:2e:f9:2a:de:5f:
                    de:8b:da:7e:99:20:78:8d:02:a0:d0:32:ba:e8:8a:
                    77:0b:76:54:bd:fe:74:b8:31:28:6f:75:10:2c:cb:
                    ee:c6:0e:ec:08:c1:a9:f0:55:a9:3a:8c:a2:d5:f4:
                    f7:6a:1c:76:68:d5:9e:3a:2f:13:fe:32:4b:43:d7:
                    eb:05:b1:73:d1:ff:04:0a:93:aa:9a:07:c8:c5:8f:
                    8d:a5:57:5e:66:16:06:81:db:85:ca:39:20:c8:b7:
                    5a:09:86:7f:03:29:0c:60:06:b1:43:77:2a:a7:86:
                    9c:d5:e0:16:2a:a6:59:48:4a:90:37:c8:89:8a:ce:
                    54:b8:14:ae:ad:35:a2:0e:6f:10:d0:09:76:5b:87:
                    bd:99:f4:54:59:08:9b:bf:6b:2f:06:83:87:30:78:
                    19:1f:16:62:b6:ca:5c:33:35:1e:c2:eb:73:b7:8d:
                    20:ac:d0:3d:ed:ea:46:eb:6a:d6:04:00:04:a5:92:
                    5c:43:ac:c1:4a:0e:ec:b9:52:62:48:54:5f:67:3e:
                    24:11:27:e4:23:fd:b8:c0:41:3e:28:ec:c6:04:be:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:28:CF:59:56:D9:E1:72:FD:7B:0C:DC:AC:2A:2B:47:F4:F4:C1:0C
            X509v3 Authority Key Identifier:
                keyid:A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:80:51:56:72:66:66:0f:94:f3:30:6c:b2:30:fd:c9:2e:ef:
         46:e7:af:14:c0:58:fd:9a:79:7f:fd:9f:ad:67:b3:09:a8:a6:
         eb:fc:db:a0:a5:ef:f6:a1:0d:f1:4e:e9:8e:e4:55:9c:ae:d7:
         a0:93:e4:2b:c5:b1:d0:c7:b0:cc:bb:d1:96:78:e9:82:aa:7d:
         11:f7:12:2c:84:05:75:45:b6:88:b4:0b:d4:6e:bf:60:a2:35:
         f3:70:f4:24:ec:49:c1:15:1c:db:43:19:49:65:bd:2e:8f:3d:
         f8:be:f4:23:50:22:0d:b7:59:59:5f:71:aa:2c:fe:0d:92:99:
         d8:e6:ab:c4:79:7d:6e:04:9b:2b:aa:ea:e8:aa:fb:b6:2d:95:
         b0:96:a3:8b:a5:5c:df:b7:cc:81:fe:54:5c:58:3f:3c:74:9a:
         6f:26:07:58:40:5f:c6:66:2e:9b:9a:5a:4a:08:c8:58:6b:b3:
         10:c9:69:b4:f7:d2:2f:ca:29:d8:5b:bb:38:67:68:10:c6:18:
         f1:63:45:a7:f7:4d:b3:88:74:40:ed:34:6a:f7:cd:51:1e:b4:
         20:13:af:04:2d:cd:1a:2b:59:2d:b7:ab:11:e6:23:32:72:de:
         24:20:a9:0a:07:4f:da:95:fe:a8:20:b1:d6:95:8d:cc:07:16:
         05:fe:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:36 2026 by rpki-client