Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File:                     PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier:          uExiHkt8HviG1AonTHvz0OMokuyekP3IGUmvVSGC85c=
Subject key identifier:   B9:67:E4:9E:64:F8:6B:89:AB:9F:3E:E1:6E:BD:A7:90:B7:09:E2:71
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer:       /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial:       019FA14D8E09EE54A229B434056BB829A42C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number:          078B
Signing time:             Mon 27 Jul 2026 02:00:42 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:42 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:42 +0000
Files and hashes:         1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: R7nd1c0MJqeQQaWzocQIS4ilsdow1JZSAxZBwB100qI=)
                          2: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (hash: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:8e:09:ee:54:a2:29:b4:34:05:6b:b8:29:a4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
        Validity
            Not Before: Jul 27 02:00:42 2026 GMT
            Not After : Jul 28 02:00:42 2026 GMT
        Subject: CN=b967e49e64f86b89ab9f3ee16ebda790b709e271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:9c:60:eb:ae:39:7c:13:ec:b5:83:07:52:
                    46:7b:a9:2a:2d:ce:13:4a:2c:91:80:e4:96:83:de:
                    bb:f8:9e:63:b7:e9:82:c3:fd:60:77:c9:7d:40:7f:
                    af:cf:e2:7b:20:87:94:c4:5c:b8:bb:4d:15:11:5e:
                    0d:98:1f:b0:fd:74:75:79:79:39:3a:af:01:7b:3a:
                    aa:d2:92:41:d0:4d:34:42:62:f7:59:5e:09:f2:2c:
                    63:52:28:c9:3c:a4:18:7c:4d:57:d1:96:52:41:28:
                    76:57:13:1c:6e:a1:df:fc:25:6f:3c:91:3d:2e:35:
                    ce:d1:b8:7b:f9:f9:f0:70:79:99:02:67:66:54:54:
                    9c:49:4c:0d:e4:2c:25:16:11:70:2c:1d:67:e4:5b:
                    ff:40:46:83:20:a5:e0:e4:41:2b:c4:11:dd:b8:20:
                    7e:51:6b:07:2a:34:dc:2b:db:85:06:45:e2:cb:ca:
                    dc:7d:92:b6:13:93:9c:77:8e:68:c0:64:6a:7e:a5:
                    99:ab:7e:dd:fd:93:5b:b7:bd:a1:35:eb:7b:22:50:
                    8c:2d:05:41:99:b1:bd:20:fe:03:f9:83:06:92:74:
                    61:cc:1b:01:6b:3b:31:ef:d7:c7:50:93:a9:db:3d:
                    03:94:c8:eb:4c:1c:7b:64:6e:40:9e:f2:b9:8a:f5:
                    76:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:67:E4:9E:64:F8:6B:89:AB:9F:3E:E1:6E:BD:A7:90:B7:09:E2:71
            X509v3 Authority Key Identifier:
                keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6d:8d:32:e4:d2:d0:f6:3c:46:93:82:fe:5e:02:06:a1:19:
         6a:98:1b:29:59:c4:d4:4b:94:50:23:8a:29:fe:40:f6:10:95:
         7e:0d:8d:66:bf:49:e5:cf:78:95:d3:5f:dd:d7:78:b4:a1:cf:
         8a:e5:76:4e:8e:ad:fb:bf:33:a7:27:a0:53:05:60:4c:31:56:
         97:ed:e9:5d:9c:8f:b6:69:5b:ed:99:e1:85:23:59:48:76:18:
         e7:65:07:bf:d5:ff:4d:1b:a4:2a:e0:ed:b3:b1:7b:e4:f3:18:
         5b:9f:f5:b7:f8:6f:7f:a6:a1:4e:a8:2d:c1:d1:53:56:e6:5e:
         55:0d:ab:a2:bc:4b:e6:fd:e0:e4:6f:a3:84:b7:ba:83:19:3c:
         73:c8:34:d4:9f:1e:2e:dc:43:db:b1:16:b8:60:c7:02:b8:03:
         2b:ff:5a:1e:12:f7:cd:74:10:47:c6:5c:2f:e7:2a:87:53:3c:
         9d:6f:e5:5c:f5:b3:ac:ef:f2:e7:cf:9f:99:d5:ea:f9:06:70:
         a4:57:f7:f4:cc:5e:aa:4f:2a:d2:32:a4:e3:2e:09:f7:b7:d2:
         35:f8:fb:32:64:0c:11:b9:97:12:ad:52:73:6d:bb:12:00:56:
         e8:b2:dd:0c:73:51:67:7a:fd:65:37:be:9a:7c:13:0b:29:ab:
         b4:a7:00:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:55 2026 by rpki-client