Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
File:                     psCc_RV4gUqM0dgdyGyJD9X6hmE.mft (raw, json)
Hash identifier:          qghxQC8iq3og6N5f5+LsoVV5Fhl53a4Uj32XO8+vhjM=
Subject key identifier:   14:5C:53:DF:F1:EB:F6:6F:C8:51:12:24:D3:DB:25:F7:75:28:B8:DF
Authority key identifier: A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61
Certificate issuer:       /CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
Certificate serial:       01A0016FF51DD56DAF0271CE59979DD182BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
Manifest number:          0CD2
Signing time:             Fri 14 Aug 2026 18:01:49 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:49 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:49 +0000
Files and hashes:         1: 0X-8DIn3BuQjjBQ9eCsjsW8Dcg8.roa (hash: LbQ/hnkbU7PVWvL7lVNJeSAVtKBQkfLZPhP9e++JU6s=)
                          2: ffX3VsckZLc4-RcWXfaxE7WOdc0.roa (hash: gI5X7EBuAWJm9swpecj8XXe2ZApaNA07hJoO/xei8RE=)
                          3: hz7lj2eZQUoABeI9x4fVkCFHdyQ.roa (hash: xUeXDDyBDFWaWumwKndxvSVmNo5fikQ4qnOyoheblN0=)
                          4: psCc_RV4gUqM0dgdyGyJD9X6hmE.crl (hash: o9kXhfurZTheTEqs6QoQ3UF9O/NrHFlL4em7odpxrws=)
                          5: yXIuz2r0HYRszCngCfGufOSDzZ4.roa (hash: T/tuU4P0COLsvy6rNb8d4mecjKkzZxnFo2OajUbzoUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:f5:1d:d5:6d:af:02:71:ce:59:97:9d:d1:82:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
        Validity
            Not Before: Aug 14 18:01:49 2026 GMT
            Not After : Aug 15 18:01:49 2026 GMT
        Subject: CN=145c53dff1ebf66fc8511224d3db25f77528b8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:4c:1e:75:0e:ee:45:40:b9:a1:bf:bf:cb:
                    ce:03:bd:91:d0:ae:c3:2c:f6:55:d9:df:3c:f9:a5:
                    06:db:31:9d:ec:d0:94:7c:0d:73:0a:56:ad:2f:a2:
                    49:38:a8:db:21:9e:fe:d1:d8:57:71:ad:40:05:50:
                    25:49:9a:c8:49:61:bc:66:56:0e:4c:44:bd:a5:34:
                    71:7b:07:0c:85:d6:dc:c8:f5:14:78:f8:bc:92:50:
                    7c:7b:4a:23:cf:71:e7:cb:d0:43:25:f8:fd:6b:54:
                    f7:b2:20:2a:88:ca:94:72:91:03:8e:17:88:a5:b9:
                    2f:c2:1e:86:6a:e8:eb:56:da:4b:1a:21:91:52:82:
                    30:27:1d:18:5a:8a:5a:39:e3:89:dc:9a:3f:26:bc:
                    ac:7c:c4:ee:de:fa:d8:ad:e3:39:02:8e:54:20:ca:
                    21:3c:fb:f6:41:cc:46:4d:ae:18:a9:cf:9b:1e:c9:
                    02:a9:de:b2:24:7a:cb:60:52:ea:58:c3:28:b7:55:
                    c5:76:cc:2a:76:a8:2d:43:90:f7:fd:fa:ad:86:b8:
                    9a:07:86:ca:09:d2:8f:e0:f0:ff:3c:5b:80:b6:34:
                    0b:16:c3:99:8e:f4:47:ee:87:0e:53:e0:2a:f3:ea:
                    2a:1f:2b:36:ee:aa:0c:de:d9:df:39:f7:c0:35:08:
                    6f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5C:53:DF:F1:EB:F6:6F:C8:51:12:24:D3:DB:25:F7:75:28:B8:DF
            X509v3 Authority Key Identifier:
                keyid:A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:51:c2:99:31:0b:d4:eb:16:13:35:2f:34:e5:0c:f4:50:7a:
         09:2e:c8:c5:ab:83:11:9d:ce:92:38:9e:ce:8d:89:7c:12:17:
         af:e3:b0:89:c6:27:e6:5d:4a:c6:73:81:01:c5:69:27:df:7b:
         73:49:96:bc:39:b6:77:ca:64:af:dc:2b:83:8e:d9:54:df:55:
         b2:a4:16:a4:d4:f1:b8:5d:73:db:28:b8:6f:4d:2b:e3:de:32:
         82:8d:0c:24:d0:fe:89:fb:eb:a4:7b:3d:94:4c:38:1e:77:b4:
         69:db:ea:1b:32:74:49:d3:79:59:9c:d7:33:76:a3:db:13:98:
         13:dc:d9:8e:96:e8:a8:cc:e2:f8:b4:0c:6d:1f:5c:de:ec:48:
         4a:1e:64:71:ce:7f:31:ec:d7:3e:f7:28:46:19:5f:b2:a0:19:
         2e:9f:b7:66:d0:ea:60:54:0b:3f:74:2b:06:fd:5c:f0:8b:18:
         83:81:45:aa:0b:98:5f:d1:74:81:81:37:b2:be:95:7f:4c:9a:
         12:96:93:20:66:e4:0d:ee:5f:81:26:46:34:58:0d:23:a9:c3:
         92:72:ad:9f:42:d9:30:eb:71:ce:5d:76:7e:12:0a:d8:3f:58:
         25:30:17:8f:65:71:32:85:c0:59:81:61:7b:f5:2e:fa:a2:c3:
         91:64:54:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb/Ud1W2vAnHOWZed0YK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YzA5Y2ZkMTU3ODgxNGE4Y2QxZDgxZGM4NmM4OTBmZDVm
YTg2NjEwHhcNMjYwODE0MTgwMTQ5WhcNMjYwODE1MTgwMTQ5WjAzMTEwLwYDVQQD
EygxNDVjNTNkZmYxZWJmNjZmYzg1MTEyMjRkM2RiMjVmNzc1MjhiOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw99MHnUO7kVAuaG/v8vOA72R0K7D
LPZV2d88+aUG2zGd7NCUfA1zClatL6JJOKjbIZ7+0dhXca1ABVAlSZrISWG8ZlYO
TES9pTRxewcMhdbcyPUUePi8klB8e0ojz3Hny9BDJfj9a1T3siAqiMqUcpEDjheI
pbkvwh6GaujrVtpLGiGRUoIwJx0YWopaOeOJ3Jo/JrysfMTu3vrYreM5Ao5UIMoh
PPv2QcxGTa4Yqc+bHskCqd6yJHrLYFLqWMMot1XFdswqdqgtQ5D3/fqthriaB4bK
CdKP4PD/PFuAtjQLFsOZjvRH7ocOU+Aq8+oqHys27qoM3tnfOffANQhvLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRcU9/x6/ZvyFESJNPbJfd1KLjfMB8GA1UdIwQY
MBaAFKbAnP0VeIFKjNHYHchsiQ/V+oZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHNDY19SVjRnVXFNMGRnZHlHeUpEOVg2aG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wNzYyZGEtZDY2Zi00ZGNiLTljN2Yt
ODAyYmI1MWExYmVkLzEvcHNDY19SVjRnVXFNMGRnZHlHeUpEOVg2aG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wNzYyZGEtZDY2Zi00ZGNiLTljN2YtODAyYmI1MWExYmVk
LzEvcHNDY19SVjRnVXFNMGRnZHlHeUpEOVg2aG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVHCmTEL
1OsWEzUvNOUM9FB6CS7IxauDEZ3Okjiezo2JfBIXr+OwicYn5l1KxnOBAcVpJ997
c0mWvDm2d8pkr9wrg47ZVN9VsqQWpNTxuF1z2yi4b00r494ygo0MJND+ifvrpHs9
lEw4Hne0advqGzJ0SdN5WZzXM3aj2xOYE9zZjpboqMzi+LQMbR9c3uxISh5kcc5/
MezXPvcoRhlfsqAZLp+3ZtDqYFQLP3QrBv1c8IsYg4FFqguYX9F0gYE3sr6Vf0ya
EpaTIGbkDe5fgSZGNFgNI6nDknKtn0LZMOtxzl12fhIK2D9YJTAXj2VxMoXAWYFh
e/Uu+qLDkWRU4g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:18 2026 by rpki-client