Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File:                     PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier:          T2PgOvBX6dLaXO/XBCUOFjEOocZjlx7p+QqeKlqZRxQ=
Subject key identifier:   3F:2F:0A:6F:29:E4:6C:BB:C7:3A:B6:C3:33:34:95:EE:1D:14:27:DE
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer:       /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial:       019FF75A794B580E40B908706F82DF248CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number:          192A
Signing time:             Wed 12 Aug 2026 19:02:09 +0000
Manifest this update:     Wed 12 Aug 2026 19:02:09 +0000
Manifest next update:     Thu 13 Aug 2026 19:02:09 +0000
Files and hashes:         1: 1-UtCMLoYpQTccw0rAaKnjr3aeP4.roa (hash: N8latQNhGiEjvdqVYf+HsgaWPueV4r0S9nawy713xeE=)
                          2: 1-aNnq3G-3Uph4CDICNHGtMEexzM.roa (hash: COcKotvyQgXvt7JUDGUl9yoEfHAlHiTxt2Sp6dfcn4M=)
                          3: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: tKuHFXUXBjvn8x76wg7F4HEa/gk08Sd5pBbkVBvmObw=)
                          4: Zae_gMNSGLYpjvDka3zKlP-S3hQ.roa (hash: KFAqhbt9W5g+ZaeRsfu703acWAo0iC27yLXUw/eFD2k=)
                          5: dBqvOag7Vn6SMH5-RRqsLXHXhvA.roa (hash: l+RlXCW7RTqPoNsvx1EDw/ugEa8VniO9ekXCbH/csAk=)
                          6: eIAvi_fRWFUTaXHfkY48zizgI6I.roa (hash: zlK7AxneUnvHvJcK0AMBNR80xbI0s9cOUQ5f2N58mBk=)
                          7: qKaLblB6qI7Bd1B3Rur2rBZuS4k.roa (hash: 2Pg6qLHfXJRZqX0rlw8NIomHNhgYfbLO7yWS70r3WDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 19:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:5a:79:4b:58:0e:40:b9:08:70:6f:82:df:24:8c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
        Validity
            Not Before: Aug 12 19:02:09 2026 GMT
            Not After : Aug 13 19:02:09 2026 GMT
        Subject: CN=3f2f0a6f29e46cbbc73ab6c3333495ee1d1427de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:7a:39:36:c2:56:fa:15:c1:53:72:fa:5b:
                    aa:5e:ac:ab:2f:40:e9:b1:de:48:e4:c1:e6:2b:34:
                    69:e7:64:b8:59:9b:cb:16:b9:ff:5a:22:d5:59:ca:
                    98:e1:ef:0e:f5:c8:49:ac:a2:7c:05:4d:5a:fb:68:
                    a7:a8:67:ab:bb:aa:16:b3:ac:63:68:f7:b6:c5:53:
                    74:1f:74:6e:ee:25:db:a9:d8:f0:c0:39:da:e6:09:
                    a6:5a:5c:2a:13:11:59:13:e8:b1:12:79:26:db:a9:
                    04:a0:48:57:28:b9:92:12:47:e8:5d:94:6f:df:86:
                    da:5d:bf:cb:1e:e8:4c:c2:0a:fe:f5:bc:ff:3b:80:
                    0b:31:ca:b7:0f:aa:68:e6:a3:a4:cc:e2:ec:1b:e3:
                    b1:a5:ec:f9:3f:00:89:53:54:68:75:1b:12:26:85:
                    9f:0f:1b:35:60:34:4e:6d:40:41:92:ce:73:74:f8:
                    33:bc:33:a5:ee:ab:56:b2:24:49:e3:ea:4c:40:5b:
                    a7:85:fc:ae:dc:6f:8c:5a:b1:cd:8d:14:ca:39:f2:
                    a2:ac:a9:ec:c5:ef:64:99:27:44:d0:a0:df:71:79:
                    17:ab:09:0f:5c:3f:7b:f7:4e:89:3b:ec:74:e3:b2:
                    7e:0e:4c:96:42:d5:78:64:c3:9b:c3:de:dc:55:e4:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2F:0A:6F:29:E4:6C:BB:C7:3A:B6:C3:33:34:95:EE:1D:14:27:DE
            X509v3 Authority Key Identifier:
                keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:df:07:6d:ae:30:22:e1:4c:59:2b:65:ac:bd:7c:71:82:66:
         5c:6b:4b:23:04:f5:25:fd:71:b7:73:ce:f8:2d:ac:2a:59:85:
         88:94:85:e4:00:0d:e2:0d:26:d8:f6:83:7f:28:fe:d9:a9:01:
         23:dd:b4:2a:ce:3e:f5:eb:fc:61:50:70:fc:cc:81:0a:e0:a2:
         c6:b9:f2:44:65:d4:d0:63:2d:02:54:ec:5d:75:5d:3d:be:51:
         14:c6:da:ad:a6:39:95:4e:b9:73:79:d4:2b:1a:6e:a6:a3:60:
         29:b0:3b:f2:c0:15:08:e5:fa:e0:d7:dc:d6:e7:2a:23:fe:7e:
         3f:49:c3:e4:6d:a9:cd:1d:2b:f4:94:54:aa:65:fb:4b:c4:49:
         b6:19:70:b4:19:52:14:db:78:d2:50:cd:dd:53:06:97:b7:aa:
         39:c6:3d:4d:03:86:da:01:a6:f8:38:63:8d:2a:b9:3f:1f:e5:
         c7:ed:09:f1:fe:d2:2f:80:d8:1d:ee:33:0a:3f:0a:a5:27:e8:
         4b:3d:9f:67:14:7d:17:59:00:78:c6:07:56:af:7e:c9:de:26:
         90:8c:a0:c7:44:43:80:ee:cb:df:db:35:01:14:05:74:18:bb:
         70:32:fc:1b:68:ea:67:a7:a0:e7:14:e3:80:d9:b8:81:30:3a:
         5f:f5:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 05:31:43 2026 by rpki-client