Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File:                     pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier:          j3sUBhiYRTYt5ZBym+z4AnPcPjxxyKasxkcdrV6zOCg=
Subject key identifier:   8E:1B:04:E0:04:63:B8:13:60:26:C8:AC:74:A5:EE:6C:64:39:1E:EE
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer:       /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial:       01A0594C1194001F61877FA09D5A84312260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number:          0D46
Signing time:             Mon 31 Aug 2026 19:29:12 +0000
Manifest this update:     Mon 31 Aug 2026 19:29:12 +0000
Manifest next update:     Tue 01 Sep 2026 19:29:12 +0000
Files and hashes:         1: LsSYewZqoEloekxN9olY0ZWErpE.roa (hash: yniEZZxbWYUya3z1wPxXhEtgwAHbS0sqm3BUjgu913A=)
                          2: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: eR3dAkfgZbbuD/HS+ttZeqgfts831YLHyMMuYe633jE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 19:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:59:4c:11:94:00:1f:61:87:7f:a0:9d:5a:84:31:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
        Validity
            Not Before: Aug 31 19:29:12 2026 GMT
            Not After : Sep  1 19:29:12 2026 GMT
        Subject: CN=8e1b04e00463b8136026c8ac74a5ee6c64391eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:af:8f:6a:e3:26:7a:0c:a4:46:a2:a0:2b:
                    81:a3:97:ad:f5:10:42:83:a2:07:8e:cd:9b:0f:6e:
                    f5:e8:b4:83:44:93:8c:71:27:c2:0f:9e:d7:dd:e6:
                    3c:ed:d9:bd:48:c4:39:c5:c6:49:7e:50:85:a6:46:
                    93:7a:3d:d1:ce:b0:47:03:0d:46:0c:ef:0b:a1:53:
                    0c:d1:55:06:1b:0f:e9:29:a3:40:d8:a5:0d:60:88:
                    c5:85:b7:42:a8:3f:f0:18:36:18:04:1d:03:08:84:
                    38:36:0a:27:0c:e1:39:c0:ca:eb:2f:9e:e9:b0:c5:
                    d6:8f:58:cd:d5:b7:bb:87:5c:58:21:05:cd:08:c5:
                    7b:62:37:1a:93:f1:31:77:bd:97:59:a3:79:ac:ea:
                    b6:43:f7:f9:80:9b:86:cf:d2:78:4a:26:cc:14:9f:
                    d5:db:b3:2e:22:d6:dc:be:63:68:8b:9f:f6:5b:1e:
                    e3:d3:48:09:8d:a5:13:b7:aa:7e:3e:33:be:b9:c5:
                    c7:07:73:3c:1c:87:7d:b5:53:67:9e:0d:80:ee:af:
                    b5:01:bc:12:98:55:29:d9:4b:30:7e:ce:60:48:c1:
                    b1:b2:f8:c1:5a:30:a4:84:18:e9:37:7b:18:a9:7f:
                    df:db:b7:04:4c:fe:cd:17:6a:bc:83:a8:0f:af:63:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1B:04:E0:04:63:B8:13:60:26:C8:AC:74:A5:EE:6C:64:39:1E:EE
            X509v3 Authority Key Identifier:
                keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b9:5f:ab:7a:bc:b7:34:db:56:d0:7b:dd:73:ec:a2:e8:32:
         34:5d:b9:f2:9f:64:51:6a:cd:01:23:4d:d7:b3:13:70:f6:17:
         db:cb:4c:6f:c9:88:d1:32:a6:fc:77:b8:f6:c6:27:dc:4b:58:
         50:00:6e:5d:03:86:d8:e3:45:58:0f:16:62:8c:5b:6f:51:9a:
         6d:e5:b3:ae:2a:3c:63:3a:39:0f:1d:bc:d8:9a:df:ee:5e:fc:
         51:41:2a:9b:9e:ae:f4:91:de:a2:86:c5:30:92:b0:6f:24:78:
         f9:02:7e:5c:db:36:ec:b6:8c:6b:a8:1a:61:bd:3f:a1:b2:59:
         ee:8b:be:bd:3d:e1:d8:cd:db:33:cc:e3:d6:c9:5c:6b:90:86:
         91:bd:be:e6:b6:d1:49:4c:b8:25:37:05:a9:4d:24:24:43:b5:
         c3:0b:76:b8:3c:d4:2d:32:0b:56:50:82:d8:ef:48:2c:fd:ec:
         d7:4e:e0:f4:5e:5c:7c:fc:8d:94:3a:20:0c:1b:4e:8b:1c:7a:
         a4:49:86:c2:a6:c7:db:69:19:d1:58:29:85:ad:d2:db:72:01:
         96:7d:13:df:93:5d:87:0b:34:f5:93:ea:dd:6a:d3:40:5c:e8:
         d8:73:35:ac:c8:98:b5:c7:34:12:f1:5e:08:fb:e4:5a:05:23:
         35:7d:cf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:43 2026 by rpki-client