Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          fiTZAmKEq8GxZrRsy5GdjcvxL89AZZEiE54e1np2e5w=
Subject key identifier:   FA:43:EC:EE:E9:1D:BE:D8:10:6C:92:54:DC:83:D8:33:D4:DA:12:EE
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       019FFBA3F976BC52477795101BFCB0BBF8C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          19FE
Signing time:             Thu 13 Aug 2026 15:00:54 +0000
Manifest this update:     Thu 13 Aug 2026 15:00:54 +0000
Manifest next update:     Fri 14 Aug 2026 15:00:54 +0000
Files and hashes:         1: 3LaL7uXB-UYgWuSk1gGwpH4emtk.roa (hash: SZi8GiIOhAGOw0aZ9QVtTEgPlEhqv8CHu5L26uxGnTw=)
                          2: OKvF1jZUD1oQ8vjnPvKbRctzA_Y.roa (hash: TURUpo5c7V3B7eiBvFVs4P/z+qyI+1sdNbYu2NhorzE=)
                          3: Op5GYXPNrxg_HfwVEuFZeHOadM4.roa (hash: uIjeZZuq23pgTgw8/rbcHVuGWjLz/Rc1HlKQEVLAUp8=)
                          4: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: K5wBgSwQyitP9G+1hp6xvmnwXwA55dGs+Jd3BqItZm0=)
                          5: kFJJEyTKADp1baTJnM1zkurd-AY.roa (hash: 6YWt+74Liha4YiPIKXVwr09uzTbyh63tPVdg3eh1Ecw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fb:a3:f9:76:bc:52:47:77:95:10:1b:fc:b0:bb:f8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Aug 13 15:00:54 2026 GMT
            Not After : Aug 14 15:00:54 2026 GMT
        Subject: CN=fa43eceee91dbed8106c9254dc83d833d4da12ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:a1:d8:bf:36:bd:d3:a0:a1:b8:0c:cf:98:
                    44:57:a5:04:23:03:ea:a6:86:61:8e:df:f8:9c:0a:
                    b8:cb:5a:dd:cd:1b:65:54:70:81:cc:43:5e:f0:30:
                    05:8e:95:d1:f5:2c:32:f8:78:ab:24:e6:a5:e2:4b:
                    e3:3c:72:6f:87:3b:95:65:88:ee:56:0a:47:f7:4d:
                    d6:41:95:e5:43:07:be:75:e7:e1:33:82:bf:5e:4e:
                    9e:6f:4b:1e:dc:a4:d3:71:04:4c:c0:bc:22:ff:c2:
                    cd:2f:c1:22:07:93:54:d4:8c:7e:85:b5:6f:b3:69:
                    e9:3b:bf:ed:8f:57:fd:0a:c3:0c:ef:fe:8b:fe:fb:
                    be:f6:f6:5e:4c:86:c8:d3:c3:70:d2:d7:f4:07:fb:
                    26:3f:61:d2:e4:5c:83:d0:e2:82:0f:48:df:42:2b:
                    71:2d:e7:15:67:03:b9:1b:a3:a3:75:6f:c2:42:a4:
                    38:9a:b2:da:ce:ea:37:4d:35:46:a4:e9:dc:00:45:
                    f9:ac:a0:84:23:94:02:a6:32:81:fa:b7:bc:03:a2:
                    c3:98:fb:3b:bf:95:87:ec:07:91:26:4d:5e:a8:00:
                    8d:c5:a6:01:dd:5d:5a:90:33:75:f7:88:42:5c:ad:
                    b0:5c:cf:07:5d:ca:b8:93:dd:06:e2:dc:b8:3b:63:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:43:EC:EE:E9:1D:BE:D8:10:6C:92:54:DC:83:D8:33:D4:DA:12:EE
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8a:12:70:5e:60:70:3f:46:4b:4d:ba:a1:10:1e:5c:1e:7b:
         b3:20:5f:b5:da:80:7a:31:10:02:cb:2a:cf:a3:6c:fa:d2:08:
         67:5d:58:f0:42:80:06:d1:6a:b8:61:81:7c:2e:17:d6:f8:c2:
         43:68:b2:ba:a2:7e:38:70:7c:55:9b:9b:2b:b4:29:f7:c9:aa:
         33:74:a1:45:cf:4c:1c:a8:32:56:e3:36:c3:65:ca:ce:fd:0a:
         b0:b2:d4:f0:98:6b:a9:bb:c7:98:75:81:11:f9:5a:1f:e7:ec:
         da:62:04:0a:4d:b3:18:31:65:c2:ed:a0:f4:a1:87:e2:6f:71:
         8f:af:c9:4e:48:2a:71:a5:bf:33:c7:52:71:93:6f:5b:3e:da:
         83:be:dd:b5:55:9c:b8:07:06:f4:9b:94:b5:ab:b1:80:c9:b7:
         b5:29:1b:92:18:59:df:15:ca:7b:76:2f:17:4b:cd:ab:72:19:
         80:98:bc:ef:89:bc:f0:ab:da:c3:2c:6f:e6:c1:18:7f:47:44:
         cf:34:36:36:51:58:c3:9f:0f:6d:dc:64:4d:3a:67:a5:d2:75:
         e7:36:b9:87:04:fe:2b:ec:45:d8:a7:cc:8d:9e:69:4c:f8:f0:
         16:88:c4:0f:8b:00:0b:d4:01:b2:d9:c9:e1:ca:94:b7:36:87:
         19:c0:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:13:35 2026 by rpki-client