Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File:                     PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier:          MGGQqkJUKdIdjSU2YgP0Lx8R15zlSCEkN6fN7GaGJpg=
Subject key identifier:   9B:46:5B:8A:0A:1E:B5:17:4A:7C:52:B4:B6:54:01:64:FC:65:AE:CF
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer:       /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial:       01A17C9793C033890D2F9B65C94B3357D1D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number:          0E74
Signing time:             Tue 27 Oct 2026 09:01:10 +0000
Manifest this update:     Tue 27 Oct 2026 09:01:10 +0000
Manifest next update:     Wed 28 Oct 2026 09:01:10 +0000
Files and hashes:         1: NIh5X-X78HnV8OD004txMFNbvjM.roa (hash: 94RoT+RPhL7upzRI0H0wJCdguwdTer9SXhjbnB7fpSY=)
                          2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: fCi+2k8U0WOnCy/DsPNwb+bv8TQGKLzgc84lJO12K30=)
                          3: Tj-tszmPMOIdicR6OTt8f45Zya4.roa (hash: 38F17CYyilIBIc43xJOnaUQedazOErXtC4iNosY91dA=)
                          4: lFg7etq0z0bKQ1hcHnNof59N474.roa (hash: ur6JqNagspmUw5cjbkW9rFW1qoAf9GaSzlWdaC/M+ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 09:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:97:93:c0:33:89:0d:2f:9b:65:c9:4b:33:57:d1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
        Validity
            Not Before: Oct 27 09:01:10 2026 GMT
            Not After : Oct 28 09:01:10 2026 GMT
        Subject: CN=9b465b8a0a1eb5174a7c52b4b6540164fc65aecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:82:f0:e0:10:29:0c:e2:b4:e5:7b:17:7e:
                    e6:9f:c0:35:81:19:c4:84:9a:c5:43:cb:f3:a3:72:
                    aa:43:15:fe:db:93:ba:bb:5d:8e:f8:41:3c:a1:2b:
                    2c:1e:d4:a4:d5:d3:67:fe:4a:c3:2c:b0:6e:6e:be:
                    ca:53:61:90:2f:ff:c0:39:a7:03:f6:89:04:8c:a1:
                    17:23:3b:24:db:dc:e4:5f:9d:99:96:74:75:dc:76:
                    1a:04:a7:2e:7d:18:49:15:e3:f6:f7:1d:71:86:6c:
                    e6:d8:47:02:75:76:40:b6:47:22:82:c1:2b:bc:57:
                    9e:28:cf:40:b3:82:22:11:1c:6e:b4:dd:fc:0d:4d:
                    f1:07:3a:62:ea:27:5a:de:f7:00:d4:f0:3c:11:38:
                    13:b2:1a:9e:13:63:6d:be:d9:a2:00:41:9b:da:21:
                    5e:09:9d:47:81:aa:04:be:bf:05:ea:93:0a:54:33:
                    0a:4e:0d:5d:70:7b:6c:22:64:ae:48:ed:3a:a2:f7:
                    6c:d0:58:aa:6e:35:1a:f5:fa:f7:25:6c:4a:db:85:
                    d4:f2:c3:98:d0:53:cd:19:49:a5:79:cc:b2:1c:7d:
                    62:63:66:75:51:70:98:4f:41:8a:b4:ea:e8:77:8b:
                    2a:b4:d2:c3:b2:f0:e8:21:d6:dc:0e:4a:eb:09:f3:
                    2e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:46:5B:8A:0A:1E:B5:17:4A:7C:52:B4:B6:54:01:64:FC:65:AE:CF
            X509v3 Authority Key Identifier:
                keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0b:f3:ba:5f:5f:49:e0:48:5d:1c:1e:a9:ab:ec:77:88:04:
         88:21:e6:b3:1c:78:90:3a:99:c3:c2:06:c4:3f:da:ed:8c:39:
         f6:a7:0d:12:62:47:db:0d:77:26:6e:ee:64:0a:d2:10:22:19:
         b3:96:6c:16:fb:74:43:57:71:4b:95:8a:88:97:52:25:c3:0d:
         f7:f2:41:05:e3:78:76:77:3e:10:5d:14:1c:bc:09:ce:fc:b9:
         ce:11:60:ba:9b:d2:d3:ac:87:d8:89:a5:e1:8e:e2:0a:84:31:
         0a:5a:60:4f:2e:cc:68:7c:15:56:f8:7f:b8:56:bc:b1:c1:e9:
         c6:91:09:42:53:76:ee:33:04:03:08:95:4c:c4:bb:80:93:79:
         d2:bd:ee:87:8f:22:29:de:58:aa:7d:87:20:a6:6a:ea:51:d9:
         f4:cd:5c:46:bb:2b:fe:e9:b2:2d:73:09:6e:24:3a:19:17:90:
         59:c5:73:c9:93:ec:30:f4:6a:2c:08:fe:be:82:04:bd:06:4d:
         55:10:69:b4:da:b9:c1:df:69:f4:23:9c:a5:e1:bf:95:78:82:
         2c:de:5e:fd:ec:5f:f0:1e:12:c8:51:8b:54:d4:2b:c6:8b:45:
         83:d2:45:e5:d7:fd:8e:82:26:38:bf:57:bb:87:61:ec:e6:d5:
         9e:61:ab:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8l5PAM4kNL5tlyUszV9HWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZTQ5YjE4NDRmZTQ0MjJhZmJlMTBjZGQyODE5Yzc0NDgy
NzdlNjUwHhcNMjYxMDI3MDkwMTEwWhcNMjYxMDI4MDkwMTEwWjAzMTEwLwYDVQQD
Eyg5YjQ2NWI4YTBhMWViNTE3NGE3YzUyYjRiNjU0MDE2NGZjNjVhZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc6C8OAQKQzitOV7F37mn8A1gRnE
hJrFQ8vzo3KqQxX+25O6u12O+EE8oSssHtSk1dNn/krDLLBubr7KU2GQL//AOacD
9okEjKEXIzsk29zkX52ZlnR13HYaBKcufRhJFeP29x1xhmzm2EcCdXZAtkcigsEr
vFeeKM9As4IiERxutN38DU3xBzpi6ida3vcA1PA8ETgTshqeE2NtvtmiAEGb2iFe
CZ1HgaoEvr8F6pMKVDMKTg1dcHtsImSuSO06ovds0FiqbjUa9fr3JWxK24XU8sOY
0FPNGUmlecyyHH1iY2Z1UXCYT0GKtOrod4sqtNLDsvDoIdbcDkrrCfMuHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtGW4oKHrUXSnxStLZUAWT8Za7PMB8GA1UdIwQY
MBaAFD3kmxhE/kQir74QzdKBnHRIJ35lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgt
MGFjOWI0ZDdlYWI3LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84MWIxODgtMjU1ZC00OWM3LTlmOTgtMGFjOWI0ZDdlYWI3
LzEvUGVTYkdFVC1SQ0t2dmhETjBvR2NkRWduZm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQvzul9f
SeBIXRweqavsd4gEiCHmsxx4kDqZw8IGxD/a7Yw59qcNEmJH2w13Jm7uZArSECIZ
s5ZsFvt0Q1dxS5WKiJdSJcMN9/JBBeN4dnc+EF0UHLwJzvy5zhFgupvS06yH2Iml
4Y7iCoQxClpgTy7MaHwVVvh/uFa8scHpxpEJQlN27jMEAwiVTMS7gJN50r3uh48i
Kd5Yqn2HIKZq6lHZ9M1cRrsr/umyLXMJbiQ6GReQWcVzyZPsMPRqLAj+voIEvQZN
VRBptNq5wd9p9COcpeG/lXiCLN5e/exf8B4SyFGLVNQrxotFg9JF5df9joImOL9X
u4dh7ObVnmGr9w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:39:54 2026 by rpki-client