Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File:                     PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier:          ws8Bjwm1+prmfpAZJVleD+nthsNuDOY/+88aAXgPRjs=
Subject key identifier:   EA:3B:2B:4E:85:90:39:FE:A8:23:0C:63:CE:5D:00:4E:B9:26:E1:BA
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer:       /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial:       019FA14D961B09A392BAF5456F27BA4E2056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number:          069E
Signing time:             Mon 27 Jul 2026 02:00:44 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:44 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:44 +0000
Files and hashes:         1: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: KVSWSRB7XN+rPIRpS8bfGPFFC1npdLXUShm9WyWSFyE=)
                          2: X9x54sAG8w3l-mHNMKHxAPO9ltI.roa (hash: xlwxDru5yEZFAMpF66c13VJUz7UoYnf6iZAymM3Fcv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:96:1b:09:a3:92:ba:f5:45:6f:27:ba:4e:20:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
        Validity
            Not Before: Jul 27 02:00:44 2026 GMT
            Not After : Jul 28 02:00:44 2026 GMT
        Subject: CN=ea3b2b4e859039fea8230c63ce5d004eb926e1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:ce:d2:fe:bb:25:96:cc:a9:c3:80:7f:fe:
                    dd:77:76:4d:41:0b:ad:64:41:c7:e0:19:40:9e:07:
                    32:91:c0:2c:19:7c:a0:86:f8:ee:78:22:fc:ec:27:
                    36:93:bc:54:32:56:54:f1:7b:a7:a6:b6:63:3a:3b:
                    6d:96:ad:62:b8:49:79:88:8f:2a:8c:da:1c:17:07:
                    c5:31:fe:7b:63:48:07:57:2b:2c:5b:67:29:60:c1:
                    18:a1:89:13:e6:df:81:a3:1e:cb:5f:67:e9:54:d3:
                    b6:04:b2:94:ac:c5:4e:fe:84:8d:39:76:05:0c:76:
                    c9:a8:25:14:3a:ee:cf:53:f9:04:4e:33:e2:24:64:
                    d8:93:1c:15:0f:c8:3c:fb:f8:22:7e:e2:0f:bd:fe:
                    46:73:94:51:64:41:b4:17:0e:d5:37:d7:f3:d3:90:
                    d6:f7:47:a0:90:c7:9c:5e:77:22:61:5f:a7:8d:8f:
                    26:c0:da:70:9c:57:73:af:43:81:93:51:b4:04:7c:
                    64:e7:60:74:7c:e6:44:ad:f5:3f:eb:d3:84:c0:de:
                    ee:2f:47:09:73:b0:3c:58:15:95:a2:cd:ad:25:cb:
                    4f:20:e9:c5:fd:69:f3:70:0a:5f:0b:d4:91:da:d0:
                    5b:c7:27:41:84:cf:28:54:14:67:e3:62:66:9c:89:
                    71:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3B:2B:4E:85:90:39:FE:A8:23:0C:63:CE:5D:00:4E:B9:26:E1:BA
            X509v3 Authority Key Identifier:
                keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:6d:f0:f8:a5:80:95:1a:cf:4f:64:e7:2b:80:c0:33:16:39:
         cd:ef:65:89:42:35:4a:13:7d:f6:41:7a:34:74:b6:7b:1f:82:
         3d:a6:94:50:93:ec:30:75:4c:36:d2:73:73:ed:cf:bd:8f:4b:
         d5:29:48:c5:55:74:a8:a6:76:1c:0a:00:84:04:97:e0:13:a2:
         a3:29:32:b9:39:44:9a:42:3d:0d:0d:57:16:61:01:7f:f0:86:
         82:e7:0b:0c:20:b7:35:36:6b:c6:85:8a:72:db:b6:99:fe:b8:
         56:a2:b0:9e:ff:38:87:43:0b:fc:c7:8a:57:24:e8:ae:30:ef:
         91:f2:46:48:86:68:c3:7b:35:92:b2:28:28:c6:7d:cf:a8:71:
         e3:2b:7c:00:8b:f4:a5:d3:c0:6b:d0:6d:89:d9:7f:47:8b:97:
         15:59:a7:58:55:a4:04:9c:71:95:2e:f3:14:e8:a4:a5:41:7f:
         12:0c:9a:ed:e6:a6:ad:ce:ae:b3:9a:ca:d2:4b:be:d8:aa:3b:
         fe:e4:81:b7:98:8f:8b:92:75:70:eb:10:19:e9:09:47:8c:0c:
         8c:00:83:8d:88:78:49:cd:ee:be:b4:1a:ec:e0:ad:48:4e:4a:
         ea:15:94:39:21:38:38:ce:94:8a:05:bc:1f:b0:a5:97:2b:1d:
         5e:9b:a4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:57 2026 by rpki-client