Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File:                     PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier:          SRzPOfMmeLaBHe8ppl/i1auFwl8iaycWxCCoPIKU0Rg=
Subject key identifier:   70:7B:61:14:21:18:3D:78:13:33:DA:7B:47:F3:31:B4:00:CF:F1:8F
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer:       /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial:       01A155C1920C9B4C31CE9A06B15FE4F1CE47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number:          086D
Signing time:             Mon 19 Oct 2026 20:01:51 +0000
Manifest this update:     Mon 19 Oct 2026 20:01:51 +0000
Manifest next update:     Tue 20 Oct 2026 20:01:51 +0000
Files and hashes:         1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: vo6LFB7RlS6KiA/ur29RMxtRGa8Y+AnGtdaXxIaQHAM=)
                          2: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (hash: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:c1:92:0c:9b:4c:31:ce:9a:06:b1:5f:e4:f1:ce:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
        Validity
            Not Before: Oct 19 20:01:51 2026 GMT
            Not After : Oct 20 20:01:51 2026 GMT
        Subject: CN=707b611421183d781333da7b47f331b400cff18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:67:73:f1:f7:cb:9b:f2:cf:27:2a:79:1d:
                    9f:d8:48:1b:c4:8a:2b:1c:69:0b:c6:c7:7c:36:43:
                    ae:65:fa:53:45:ae:88:b2:17:57:7e:c6:cf:ab:ab:
                    37:91:43:c2:c0:75:39:35:c2:c3:47:bc:3b:93:c7:
                    2a:94:d2:c7:34:dc:67:71:f6:d3:a6:16:6f:50:e4:
                    b8:50:f1:38:15:bb:b2:50:9f:10:92:f5:ff:d8:4d:
                    74:8a:6b:1e:9f:bb:29:58:0c:bb:7e:6b:c2:ee:ed:
                    67:2c:b6:e0:37:4a:6f:67:2a:33:cf:89:fa:35:c7:
                    71:6f:70:8f:cd:ff:6b:56:47:38:7d:26:59:8c:55:
                    ce:f8:b0:bc:e3:a2:88:65:5d:73:78:e0:46:ae:c8:
                    e5:d3:ad:fe:38:16:45:df:00:51:65:28:40:f6:79:
                    a5:e2:45:49:e8:f1:f9:45:40:04:fa:68:36:72:4d:
                    21:94:55:b4:0e:4d:1d:c5:ac:1e:a9:2a:ec:4e:58:
                    75:88:54:2f:88:e2:b8:0c:6d:42:db:f3:b7:bb:f8:
                    df:07:df:42:be:e0:84:ce:a2:21:35:ed:8e:72:3d:
                    21:81:17:14:8b:b1:fc:1c:e7:64:56:19:09:8a:8f:
                    27:08:fe:dc:92:c5:65:43:8d:72:0c:63:cd:98:12:
                    96:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7B:61:14:21:18:3D:78:13:33:DA:7B:47:F3:31:B4:00:CF:F1:8F
            X509v3 Authority Key Identifier:
                keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:69:b1:c4:7a:32:98:b6:93:75:8d:f5:c8:9c:ca:dd:17:5f:
         cf:d1:b4:65:c6:3b:d4:e6:8b:83:b2:ea:24:a0:40:bb:3e:f5:
         4b:a2:86:22:3e:7a:35:11:ab:03:c0:dc:0a:25:5e:58:1a:b6:
         56:6a:90:e9:68:40:eb:e7:ed:4c:a0:ad:ed:4b:17:c1:91:05:
         ed:cb:eb:9e:52:7a:0d:c4:61:4f:f8:9d:86:9a:6b:ad:84:33:
         3f:e5:a7:44:f2:5a:97:40:70:a5:0a:81:c6:28:4a:f7:80:b3:
         2f:f7:ed:67:80:97:3d:7d:03:7f:e2:32:51:e2:20:5d:b2:1b:
         26:5f:71:03:22:c8:77:5d:fa:1c:b4:2f:56:e2:db:61:1c:ac:
         f9:a3:9d:3e:35:67:41:8e:0e:3f:ca:30:ef:60:41:8f:06:be:
         70:cf:9b:39:1c:c2:c6:27:3e:74:f8:98:27:b7:4f:bb:71:cb:
         24:e0:a6:38:6b:0a:70:9e:34:9e:db:b6:7e:56:41:74:9e:94:
         da:f6:3d:22:6a:64:88:87:04:7e:09:fb:b0:20:30:2b:18:09:
         97:ac:68:e8:d7:6e:71:6f:42:e6:e4:ff:dd:fc:3f:f1:2f:8b:
         f2:21:0f:ba:0c:dd:04:f4:36:87:83:c7:f7:01:5c:5d:b3:a0:
         13:82:45:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:44:39 2026 by rpki-client