Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
File:                     PPYV8G0jIox2moX68FEDk9Bk4OA.mft (raw, json)
Hash identifier:          J6/8cKW99YPKytZZTtL04ohIL4qfwZJsjyzHlY7Glso=
Subject key identifier:   8F:76:70:8F:0F:C1:F2:8E:71:FA:B1:B6:4D:AF:5F:FE:2C:40:39:4C
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Certificate issuer:       /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial:       019FA229780D3BF9387412023E3E9DB35D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
Manifest number:          53
Signing time:             Mon 27 Jul 2026 06:00:54 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:54 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:54 +0000
Files and hashes:         1: 2XSKC5_2aJdXis0i0E32cdzCcnE.roa (hash: WPJFZgYN6ewzMbdHq7cQDqzD7p7iGCXVy5MenFdGn80=)
                          2: 4Rp0pYTPzmcpl3vtXAjsk3xrRxU.roa (hash: kFKfBo1lMckvkQ9+DKJA3J99ay1w596AtH69ok/038k=)
                          3: 9jtK5VCtwfIPO7PMzdUupyz2Ui8.roa (hash: OaFSGlvk+qGUsyiydLHzRVOaiJhX1qNhPHfb1bkwDvE=)
                          4: Cxczu6pG_j9G8YgyCFhNWqwjOHY.roa (hash: WwxhEZK9JwB3xoHnIPrE7wXjUmLlZC5xHb6l9AOXBgc=)
                          5: IhnU6UFpK0ZZZ7JoJGYFZAdvlLk.roa (hash: ZMMMD3tfRdZSRuiATRZh0enby+U17qaQ+RlXaiCW2Ao=)
                          6: ML3bi4mx72Ipx4Kg1pME9LQZlRo.roa (hash: hTTuLE8cgZlfa+nvncE4HoPgMuLOWUMunYCYp0aquvs=)
                          7: PPYV8G0jIox2moX68FEDk9Bk4OA.crl (hash: GgWIbryhIau7T/xkmqj8J/NGsDXV1jBbaj0SZB8ElPM=)
                          8: U47iKHcrgk6MFqkfqnJiGQZYHQU.roa (hash: TFdMzY4JMZ5lpBgywZ+gPmSJF7oZ1XI4SO9S+xKiraI=)
                          9: irEMFAfnN5DJcgPJSBaksXnfn40.roa (hash: mu6j7n0AQScT3JUlgc/R13L/QOuGVSxFOFUO28RzL9Q=)
                          10: oxs1tuSUXUJmLqoL27S7ChGx4fM.roa (hash: 9KLCRWwLN8lTVB3jayQYsnUAOfMC7o7LYOk7o51/yYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:78:0d:3b:f9:38:74:12:02:3e:3e:9d:b3:5d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
        Validity
            Not Before: Jul 27 06:00:54 2026 GMT
            Not After : Jul 28 06:00:54 2026 GMT
        Subject: CN=8f76708f0fc1f28e71fab1b64daf5ffe2c40394c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:9b:4a:ff:63:8a:a5:24:e9:0a:c3:af:85:
                    06:56:f4:a2:57:bb:fe:4d:89:fe:b4:02:19:db:0c:
                    9c:f8:c5:cb:b7:3b:32:2d:61:88:8c:ae:ef:49:f7:
                    15:6a:40:53:7a:1c:03:8c:90:26:84:8f:d0:53:a0:
                    82:49:4f:62:cd:24:30:4b:bb:38:80:b8:42:f5:51:
                    26:51:e4:d6:ff:97:a4:03:d5:c6:2e:71:f9:14:00:
                    fd:3c:72:09:fe:76:ee:a7:03:ee:e9:10:db:94:1b:
                    ac:54:0c:28:5f:33:68:0e:ad:89:d6:2c:0d:07:5f:
                    82:d5:6b:f0:9f:90:d1:64:13:57:0a:a1:34:91:8c:
                    80:4d:73:5e:67:6b:92:78:88:5a:91:a3:c4:d6:ff:
                    dd:65:4a:57:4a:a7:d2:e2:f3:bb:32:a7:7c:ca:da:
                    af:dd:63:ac:7a:b0:7a:8d:64:9c:90:22:59:47:99:
                    3f:aa:9f:b8:e9:c4:8e:6e:7e:d5:50:b0:d5:a6:87:
                    15:15:1e:1f:74:36:7a:2a:8c:59:c2:8f:35:c2:78:
                    51:16:1f:07:9b:c0:2e:13:5a:e7:ca:e2:36:73:66:
                    c9:e9:c4:2a:67:be:3b:ab:52:f8:41:62:35:5f:4b:
                    ba:ab:a9:40:06:63:04:2e:2e:13:51:57:fd:b4:da:
                    d3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:76:70:8F:0F:C1:F2:8E:71:FA:B1:B6:4D:AF:5F:FE:2C:40:39:4C
            X509v3 Authority Key Identifier:
                keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c8:9c:47:32:3e:05:54:9f:67:58:3e:a3:ca:b1:2a:6e:63:
         b3:17:46:55:67:46:35:80:11:5c:18:e5:0a:ef:e6:88:86:43:
         c8:aa:ef:ff:06:a8:08:ae:5e:bc:16:af:76:47:8d:43:98:06:
         57:89:d4:17:ac:01:b1:b0:67:08:7d:20:81:82:60:6d:9a:84:
         a5:5f:4b:28:c7:09:20:ef:e5:00:6b:62:2d:a1:09:16:f3:c7:
         c2:b7:dd:89:1d:51:67:2a:85:9a:8f:bf:30:89:f8:ea:3c:1c:
         21:13:40:70:58:81:d5:cf:71:d1:9a:28:ab:69:a7:72:ae:04:
         4c:3c:91:4e:9e:76:63:a0:9c:20:0f:25:a9:77:d0:ff:cc:42:
         9f:6b:f8:12:a7:a2:12:14:f3:5c:a2:48:b9:dd:5a:dc:ef:d9:
         c0:9f:fc:e7:e0:b5:4a:41:e7:2d:10:5e:06:56:66:c0:e0:1b:
         fc:c0:73:6a:ec:8d:d9:c8:bf:cb:2b:30:52:af:62:c9:db:c2:
         3f:b3:7d:fd:2b:d9:6e:45:b0:dd:cf:2a:5e:bf:54:29:d8:40:
         17:be:11:08:5b:a6:f7:ba:f3:0b:5c:18:c4:98:de:43:6f:c2:
         73:a1:7a:a8:8a:8f:5a:3c:ce:0d:2f:7f:09:d7:fa:95:c9:d7:
         bc:2a:81:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:00:23 2026 by rpki-client