Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
File:                     PPYV8G0jIox2moX68FEDk9Bk4OA.mft (raw, json)
Hash identifier:          RBgITVhvRloClKZT5JXiecXlyxU+xioBypvf72Gn2hs=
Subject key identifier:   34:F4:B7:F5:44:E0:48:D1:67:EB:D1:E9:04:01:DF:F0:9B:15:97:2B
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Certificate issuer:       /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial:       01A17B84BAC304057BBB81C086DDD29A447C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
Manifest number:          014C
Signing time:             Tue 27 Oct 2026 04:00:58 +0000
Manifest this update:     Tue 27 Oct 2026 04:00:58 +0000
Manifest next update:     Wed 28 Oct 2026 04:00:58 +0000
Files and hashes:         1: 2XSKC5_2aJdXis0i0E32cdzCcnE.roa (hash: WPJFZgYN6ewzMbdHq7cQDqzD7p7iGCXVy5MenFdGn80=)
                          2: 4Rp0pYTPzmcpl3vtXAjsk3xrRxU.roa (hash: kFKfBo1lMckvkQ9+DKJA3J99ay1w596AtH69ok/038k=)
                          3: Cxczu6pG_j9G8YgyCFhNWqwjOHY.roa (hash: WwxhEZK9JwB3xoHnIPrE7wXjUmLlZC5xHb6l9AOXBgc=)
                          4: IhnU6UFpK0ZZZ7JoJGYFZAdvlLk.roa (hash: ZMMMD3tfRdZSRuiATRZh0enby+U17qaQ+RlXaiCW2Ao=)
                          5: PPYV8G0jIox2moX68FEDk9Bk4OA.crl (hash: /+SvLH/WQp+Ly91c54RKhxz3g+VfNWIZDYjRv4iknb0=)
                          6: U47iKHcrgk6MFqkfqnJiGQZYHQU.roa (hash: TFdMzY4JMZ5lpBgywZ+gPmSJF7oZ1XI4SO9S+xKiraI=)
                          7: e9dh_bZVkNoSWtlVRmdZV4oNLd4.roa (hash: RmXDKu0x/J+KDA9sUyzcOskX3prxPnKpefo8PsgmTHk=)
                          8: oxs1tuSUXUJmLqoL27S7ChGx4fM.roa (hash: 9KLCRWwLN8lTVB3jayQYsnUAOfMC7o7LYOk7o51/yYk=)
                          9: z8wyxJLGlAXTqfH5la2uG6GI1nw.roa (hash: XRkybT5tKY5hhLRLK887eHgKPw4DoJBhW2TKUry9piE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:84:ba:c3:04:05:7b:bb:81:c0:86:dd:d2:9a:44:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
        Validity
            Not Before: Oct 27 04:00:58 2026 GMT
            Not After : Oct 28 04:00:58 2026 GMT
        Subject: CN=34f4b7f544e048d167ebd1e90401dff09b15972b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:96:10:23:52:8b:38:4b:1e:10:94:f4:ae:
                    6c:5c:a0:be:1f:b2:e1:ed:de:46:d5:5b:49:bd:b0:
                    bb:ed:e5:39:80:a3:ee:47:30:84:07:53:81:a4:1e:
                    7d:7a:dd:b3:3f:9e:fd:c1:6b:d4:c3:8c:93:84:ca:
                    2e:54:7f:58:dd:64:1a:1f:ea:45:3f:b8:03:d0:2e:
                    03:1a:ed:16:1b:cc:d9:9b:6a:fc:cc:cf:3b:1d:d9:
                    d8:a0:61:29:ea:59:46:ef:3c:a0:fe:36:f7:95:52:
                    55:ad:8e:ec:ec:2f:f1:35:f4:97:6b:c5:58:50:d6:
                    92:05:4d:4e:38:70:67:32:e5:4d:51:63:87:49:02:
                    f7:f7:c1:f2:36:98:3f:39:37:5b:42:e8:dd:dd:d8:
                    f0:34:93:a4:61:f1:90:8e:d1:e2:a3:30:ad:ab:9b:
                    73:d4:4f:24:33:58:a3:cb:9b:fc:88:57:4c:95:7a:
                    13:8e:13:13:78:4e:e6:36:3b:92:14:5f:39:73:55:
                    84:5e:9d:dd:f5:97:72:0b:90:7c:7a:bd:5d:16:f2:
                    fc:74:6a:02:f2:90:d3:fa:5d:4e:99:e7:43:e6:d0:
                    fd:32:4c:4c:80:cd:33:c1:7a:31:cb:17:bc:76:88:
                    5a:62:8f:f8:50:c1:ca:3c:1d:86:2b:7d:01:8a:f5:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F4:B7:F5:44:E0:48:D1:67:EB:D1:E9:04:01:DF:F0:9B:15:97:2B
            X509v3 Authority Key Identifier:
                keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2f:a6:13:38:74:98:4c:7e:21:a3:bd:fa:04:f5:fe:ee:19:
         3f:55:3c:32:5e:29:5d:71:e6:41:91:c9:cb:9d:3f:53:7a:5c:
         00:05:c3:bb:7e:6c:4a:68:52:71:a8:85:b4:17:a2:51:25:a6:
         4a:17:72:c5:6e:5b:6c:73:ab:3e:b8:bb:14:c7:33:31:11:f7:
         9e:65:3e:de:9d:53:c4:a2:dd:24:1b:b9:7c:07:7f:ef:68:c5:
         d2:77:da:6a:96:e7:98:54:40:fb:a3:d2:60:14:75:38:cc:bf:
         54:c4:79:ca:cc:4b:27:97:ab:c6:95:6d:e0:bd:90:76:0a:3d:
         57:76:48:e1:4b:87:2f:22:a4:2c:d4:20:d0:03:4a:fa:bf:dc:
         91:61:54:c1:fc:53:53:9b:0c:38:f4:fc:44:f5:ff:d7:24:74:
         d8:c2:14:e4:b6:ed:9d:f9:ae:3b:de:37:94:bf:ac:2c:cc:0a:
         ae:e8:c8:84:61:0a:62:08:5e:37:4b:67:d8:f2:a2:82:3a:79:
         98:76:48:ff:76:ed:0b:4a:cf:29:dc:1c:eb:8f:ae:3f:0f:f2:
         4f:f4:fa:5a:0b:7c:37:c9:ee:05:21:ca:0d:e8:86:50:8c:a0:
         e7:af:78:0b:95:a3:e1:c1:e0:c7:75:dd:fe:1d:cf:1d:20:9e:
         f1:bb:20:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:15:12 2026 by rpki-client