Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File:                     PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier:          PYbknEBCCcYYYZvTkFAP1e2ANCz+VbOjF/oXObiZfR0=
Subject key identifier:   EF:B5:D8:54:F8:B7:F4:4D:0E:D9:A1:60:36:84:53:6F:32:2F:26:80
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer:       /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial:       01A0599FA98B1CA07A1C5ABD55B6791DA3E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number:          0E36
Signing time:             Mon 31 Aug 2026 21:00:30 +0000
Manifest this update:     Mon 31 Aug 2026 21:00:30 +0000
Manifest next update:     Tue 01 Sep 2026 21:00:30 +0000
Files and hashes:         1: Ewp2Al5ax1LZmRmmNwpqPtsvCR8.roa (hash: PsSncA5sbwhm+qYpwUvXOsucHxELXyU7nMC4Byz/38I=)
                          2: NiXEkFa2OyOUnxfMEcQON6yPoNg.roa (hash: dVvuF0RyYBJRRTECbqhrE8YUyCue+Lh92GIKr6FebqU=)
                          3: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: xhVqHu0L8tyhHmuDtJGgGPd/XqA9ZOwgAjuraObCcb4=)
                          4: gQD3MU7TBpEiOjF9SqTJkR2Y3Hk.roa (hash: yBwTOvwiLlTbqshsC+5AZzg1Ya/CKAPiEghYIW9dRIk=)
                          5: q_r4ijQpjXZ8n9KPTw-0C5wgwwQ.roa (hash: zq7FtPgWzADBU+GCudKPhOXhQRXlPBFiAI7EZtoOa+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:59:9f:a9:8b:1c:a0:7a:1c:5a:bd:55:b6:79:1d:a3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
        Validity
            Not Before: Aug 31 21:00:30 2026 GMT
            Not After : Sep  1 21:00:30 2026 GMT
        Subject: CN=efb5d854f8b7f44d0ed9a1603684536f322f2680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:79:88:36:c1:e1:a7:60:d9:cb:a6:e5:65:
                    f3:51:bd:68:eb:3d:7b:d1:61:18:3e:a2:f6:0b:e0:
                    90:42:c6:38:21:36:8b:0e:f9:98:91:ad:1a:0c:00:
                    38:c3:1e:db:76:50:a5:e6:08:c7:c8:53:91:ad:07:
                    28:ca:d4:f6:38:69:e1:73:17:c4:5a:8e:d6:82:ad:
                    ac:4a:d9:e2:b8:ae:29:ee:bf:47:01:02:6e:4e:a0:
                    68:d9:34:bf:cb:6b:02:57:f9:09:84:cc:54:e8:7e:
                    e9:6c:dc:6b:5c:51:aa:dd:98:55:a8:92:91:0c:8b:
                    dd:2a:59:3e:a7:1a:5a:e6:7e:94:4e:72:dc:61:c4:
                    03:f1:30:66:ee:f0:84:da:c7:c2:69:fd:fa:5d:32:
                    84:4b:96:ab:5d:24:de:dc:e1:74:a0:08:15:bf:e3:
                    7a:8b:1d:4f:c1:ee:63:87:4b:7a:dc:15:96:08:b0:
                    27:27:09:49:78:fc:f7:42:aa:0c:e8:f0:6c:fa:aa:
                    83:d5:fe:78:8c:1a:a5:d1:1e:f4:06:42:d0:7e:f4:
                    1d:3e:19:62:82:7e:8d:03:2f:3c:31:d8:ff:e1:30:
                    5c:6e:c4:c8:ce:d4:b7:0d:50:40:a4:10:8b:ea:66:
                    33:6c:63:ba:7b:0b:7b:28:2a:1c:98:f1:61:f1:d4:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B5:D8:54:F8:B7:F4:4D:0E:D9:A1:60:36:84:53:6F:32:2F:26:80
            X509v3 Authority Key Identifier:
                keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:df:9f:09:11:31:4c:10:0b:49:ff:76:7e:e7:96:06:dd:c9:
         2e:f4:0b:5b:28:18:b5:8a:44:80:cd:a1:a9:57:7f:74:e0:10:
         27:64:a6:e8:e2:55:50:9a:68:b9:01:57:a9:d7:2d:ca:1c:72:
         aa:60:35:a7:14:8e:0b:91:ab:c7:3e:55:d5:d7:b1:f3:e3:78:
         8d:78:57:15:4d:cc:38:20:2d:49:56:d6:d5:02:cb:04:a1:52:
         d2:58:08:0c:a7:a6:15:43:8d:a1:3e:b8:1a:2f:07:56:13:99:
         a0:29:42:c1:97:a3:3c:d9:66:9b:6d:36:40:2d:2f:7d:7c:6a:
         33:06:93:d7:19:6e:e1:e2:01:79:ff:02:b3:80:ed:d0:02:2a:
         ad:2b:8a:8b:33:05:03:c0:68:51:a2:fa:fe:6f:74:a2:72:aa:
         e7:5d:0c:38:8d:dc:80:8e:97:76:51:51:7f:d7:6c:2e:11:e9:
         20:90:38:52:96:f0:25:e6:28:4d:86:88:dc:6e:eb:16:09:3a:
         82:ca:ca:d0:80:46:02:f7:8c:73:a4:2c:f9:dc:9c:f4:70:c3:
         8e:b6:e2:19:4d:67:fd:b6:ae:6a:51:9e:9a:37:5c:62:39:64:
         57:4b:91:42:e3:3e:ec:df:a8:22:20:94:81:e2:17:0c:82:e9:
         7c:a6:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:33:53 2026 by rpki-client