Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File:                     PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier:          fYOdZYkrD1tlhd59Hr+C8cMNiheHxp/k+v4qFwFueTE=
Subject key identifier:   78:38:33:FD:11:CE:74:F5:41:AD:0A:78:A0:73:85:CC:A3:E6:CF:E0
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer:       /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial:       01A1035B9CC5E8855577785B09363463432C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number:          0EFF
Signing time:             Sat 03 Oct 2026 20:01:37 +0000
Manifest this update:     Sat 03 Oct 2026 20:01:37 +0000
Manifest next update:     Sun 04 Oct 2026 20:01:37 +0000
Files and hashes:         1: FcgVbK89FeRjuVyoSQOfN4fWFvA.asa (hash: 22DkZ7JjoLv+BaBD/x8KpQJlMw9ISrjqJDXnZSuMJzI=)
                          2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: j7CW7N9JdvgC0+m+wT1MIIHJthANn83bVMmoSurgmbc=)
                          3: Zn0XhdqYxe8o-jPEi-ZNfcsL5t0.roa (hash: rHtPfci/7WpFrwQjD0oZB4ESw2Ju9X+jUEYp4DLCYRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:5b:9c:c5:e8:85:55:77:78:5b:09:36:34:63:43:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
        Validity
            Not Before: Oct  3 20:01:37 2026 GMT
            Not After : Oct  4 20:01:37 2026 GMT
        Subject: CN=783833fd11ce74f541ad0a78a07385cca3e6cfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:98:00:5d:02:5d:45:44:5f:ce:2b:3b:9c:
                    7b:9e:2d:81:ad:27:55:36:48:66:4a:4f:a1:17:3d:
                    1f:3b:c2:51:2e:53:47:16:1b:62:33:86:06:4a:b4:
                    d8:ae:6b:7c:11:a7:f7:68:1f:e0:2c:f9:66:3d:93:
                    04:ac:2b:ab:1e:46:1b:02:cd:7e:f7:6a:f7:d0:2d:
                    43:24:4c:1e:ba:f8:fb:cc:a4:31:04:3f:76:8d:78:
                    f5:ef:31:ee:b7:3c:49:3c:c6:6b:3c:ef:f8:2f:19:
                    ff:c9:c2:42:58:19:47:53:05:a3:92:b2:a3:88:d4:
                    cf:a6:28:a9:bb:44:e7:d0:6f:e0:39:50:7b:cb:71:
                    2b:44:95:b9:14:ea:2b:3c:4d:98:d4:b6:17:1a:bb:
                    73:f0:e0:b4:fd:86:5e:76:01:4b:1f:07:b2:49:39:
                    0b:be:cc:be:93:1e:25:86:23:2e:73:12:f5:f5:d7:
                    5f:93:c6:d7:96:93:4c:e0:a9:ca:b1:e2:f5:ce:f8:
                    56:9c:7d:2b:7b:df:6c:fa:56:54:bd:43:3d:07:88:
                    63:bf:82:5a:64:f9:f9:02:65:85:cf:a7:d4:b7:cb:
                    22:cc:2c:82:2b:4a:57:69:8e:0e:79:11:6d:a0:a7:
                    de:10:11:15:ba:9d:fa:1b:d7:ce:00:9d:2c:1c:99:
                    b6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:38:33:FD:11:CE:74:F5:41:AD:0A:78:A0:73:85:CC:A3:E6:CF:E0
            X509v3 Authority Key Identifier:
                keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7f:f5:37:2c:d2:81:fe:41:5b:2c:fd:f2:1c:dd:0e:58:1d:
         d9:a1:60:a3:8b:93:f8:60:8b:9c:62:ae:9a:0c:94:62:0d:46:
         74:97:9e:b7:7d:9f:64:11:a0:90:88:8d:48:5b:7b:e8:16:e9:
         e9:90:b1:11:eb:9d:36:64:3c:68:58:5b:15:d4:e6:6d:a7:97:
         3d:56:96:48:12:0d:a6:9e:bc:42:92:4a:cd:a3:b6:f8:23:d4:
         56:43:29:d8:db:69:86:2f:cd:18:58:1e:b0:83:ee:52:33:2b:
         ce:43:26:cb:01:fe:b5:37:f5:25:80:fe:0d:d5:56:ac:7a:26:
         93:89:f3:bd:d4:0b:88:9d:c4:d2:05:a8:73:b3:fe:b8:f2:32:
         fc:72:a4:bc:04:7f:9f:90:f2:cb:73:1d:be:03:28:ad:ae:88:
         68:9c:07:6b:f8:37:44:c3:09:44:8e:56:8c:3e:15:fd:58:e3:
         a3:24:69:b6:c8:07:6b:15:47:c1:78:14:c4:66:d1:8d:ad:92:
         80:fa:1e:3d:4b:d3:a9:05:e0:d4:b2:a4:95:30:15:53:92:0e:
         52:cb:18:9a:7e:db:2a:f2:fd:d6:ff:41:41:40:a2:8a:ad:40:
         23:8f:ca:df:97:d2:58:bb:d3:e6:2d:fa:33:1e:0c:9d:c8:c1:
         a7:78:94:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:04:00 2026 by rpki-client