Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File:                     PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier:          C8AlyRH3uD7HV766nPmqxDkTW1lpVYw5cuCl11yjXjY=
Subject key identifier:   46:D3:B6:F7:47:60:D6:66:EA:B5:C6:62:CC:03:89:88:0E:C0:C1:A1
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer:       /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial:       01A18006F63686B3725F5887EF6E6228E092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number:          0797
Signing time:             Wed 28 Oct 2026 01:01:42 +0000
Manifest this update:     Wed 28 Oct 2026 01:01:42 +0000
Manifest next update:     Thu 29 Oct 2026 01:01:42 +0000
Files and hashes:         1: Kn6pNMJ21QdhHsuAl8WLfOPOkgw.roa (hash: LKs9IYE65ZsbkD0HX6Uw0NvXdkd8X9uC3RZE4DqImaU=)
                          2: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: QgTfOnSELlPWeHK+cjg8dOxP8IimcNBCJSTUu9EqEXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:06:f6:36:86:b3:72:5f:58:87:ef:6e:62:28:e0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
        Validity
            Not Before: Oct 28 01:01:42 2026 GMT
            Not After : Oct 29 01:01:42 2026 GMT
        Subject: CN=46d3b6f74760d666eab5c662cc0389880ec0c1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:b5:ce:eb:63:08:9c:ec:75:c4:be:56:02:
                    9a:6e:b9:b6:00:8e:dc:5b:6a:a9:0e:d1:38:d1:46:
                    d0:df:03:20:04:4e:e6:ac:0e:c6:17:ac:7c:fc:7c:
                    0a:f3:51:69:5d:62:27:c2:2c:f5:3a:8a:bd:af:f4:
                    dc:f2:d0:78:32:05:6c:fb:ac:a7:97:1e:71:c8:c9:
                    e6:25:dd:89:15:bd:8b:31:e2:db:ad:77:c6:99:41:
                    69:dc:bf:7b:cb:b8:fb:02:ce:74:37:07:e9:d7:cd:
                    a8:79:c4:81:69:04:18:5e:d2:55:59:fa:9d:36:99:
                    d9:d0:88:8e:a3:5c:88:06:10:e4:34:8b:76:a6:65:
                    21:0d:79:e0:39:0c:56:59:e6:24:99:8a:58:76:f0:
                    3e:8a:4f:bb:24:85:00:0f:b6:9e:e5:f9:b7:b7:d1:
                    51:4f:0d:26:18:1d:83:a8:6e:6f:34:8e:e1:a2:9f:
                    a0:98:58:e6:70:8a:5c:8c:7c:43:3f:47:b7:c9:73:
                    69:0c:28:a8:c8:d1:a9:ca:e1:01:1f:71:95:58:d8:
                    d4:46:d8:06:c3:31:41:1a:33:d2:3c:32:1b:38:7a:
                    93:db:74:6f:ba:f6:44:72:30:36:00:60:22:eb:e5:
                    29:fe:4b:6e:f3:5c:ef:dc:39:80:79:ad:92:0a:11:
                    3a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D3:B6:F7:47:60:D6:66:EA:B5:C6:62:CC:03:89:88:0E:C0:C1:A1
            X509v3 Authority Key Identifier:
                keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f7:53:a3:d8:d5:9e:da:77:f7:01:23:65:6b:af:8d:0f:61:
         ab:b5:69:1a:49:00:85:ea:e0:40:07:1d:c8:82:e2:1a:d2:74:
         aa:2a:57:f6:32:0a:10:3f:5c:51:a5:88:53:1e:47:37:4e:e2:
         9b:d2:ab:d8:1d:0a:ab:d9:82:22:46:c6:d3:ec:f1:d8:04:e6:
         65:8b:80:c9:69:75:eb:07:88:f0:47:83:64:c7:cb:54:05:e1:
         dc:34:5a:77:ba:fb:e4:20:f0:6f:5f:31:f2:6d:ce:02:ba:b7:
         c6:31:bb:6f:b6:20:de:b3:88:e2:9c:ca:ac:99:9d:7b:6b:33:
         44:19:d5:b6:45:f5:a0:5e:0c:97:b2:e3:92:10:73:49:29:f2:
         d7:a5:4e:e8:5f:72:c1:18:f4:33:d9:03:6b:4d:51:60:58:8c:
         4d:14:e9:91:5c:e4:91:9e:8d:c3:86:e5:a2:bb:34:3a:4f:ee:
         96:97:e0:ee:a0:de:4f:87:32:bd:40:4f:ef:ee:5b:23:76:b5:
         b9:d6:f1:f6:d0:36:0d:c5:b8:a1:43:2f:81:5e:47:54:b5:6c:
         ea:af:3d:18:10:c7:e2:73:c2:e5:39:cd:97:9a:1f:37:77:3a:
         b3:b6:f1:15:8d:8a:2f:e7:6f:9b:03:9c:94:c0:34:ef:36:14:
         09:a4:05:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:27:13 2026 by rpki-client