Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File:                     PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier:          oILfihBd9G4GuiuC0xG0ilMXpvDugkzukMmI3xtsyvs=
Subject key identifier:   25:20:3B:BA:25:91:99:BC:AE:65:F1:A2:37:B2:C2:B5:CF:79:77:54
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer:       /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial:       019F9F5F206F70C0024223376DDD54FBF652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number:          10DC
Signing time:             Sun 26 Jul 2026 17:00:39 +0000
Manifest this update:     Sun 26 Jul 2026 17:00:39 +0000
Manifest next update:     Mon 27 Jul 2026 17:00:39 +0000
Files and hashes:         1: 06Cr8RrUW-YBGOEDpWiR6_6QPIo.roa (hash: FnV3E+psZ9RL4Wm0ZPwY8F8XZvQTXZZNm+8KVQlkwik=)
                          2: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: ueh4j2I0rjG80jflasiauVimtMAzD0Y/OIA3DlkBdGA=)
                          3: pjWOXlpE0b5S_0JGvMVFcwdSSJ8.roa (hash: 3zMko1kxbxLAZVlJgNvxrbIK5O6rX6hf1z6N9QMjOGo=)
                          4: unkGkB8qp1620UotFb6yhd6x1oU.roa (hash: +yKx8BTwISlKJwgwtVb1Joc3L3N9AZY0nFPc0pnvQJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:5f:20:6f:70:c0:02:42:23:37:6d:dd:54:fb:f6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
        Validity
            Not Before: Jul 26 17:00:39 2026 GMT
            Not After : Jul 27 17:00:39 2026 GMT
        Subject: CN=25203bba259199bcae65f1a237b2c2b5cf797754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:82:8d:4f:b0:22:59:42:cc:57:0f:f8:47:84:
                    36:90:ce:aa:72:65:a3:a6:e9:d8:f9:64:07:38:13:
                    88:b0:97:e1:66:7e:9b:34:ed:21:75:ee:52:58:e2:
                    e7:a5:07:4d:ca:ba:27:31:a5:84:5e:6a:2a:de:8a:
                    56:2d:df:96:76:ca:3c:bd:83:88:1e:17:80:6b:80:
                    f0:49:fa:c5:39:a9:07:ec:4b:bc:e1:f7:d8:83:3b:
                    a7:bd:6f:49:86:11:61:55:fe:e5:e1:69:06:56:2e:
                    24:5b:5c:41:24:d7:c4:a3:99:19:ad:a3:ed:a4:f2:
                    7b:40:16:95:21:5b:6e:c7:14:7f:28:5f:ae:cb:29:
                    75:fe:f8:d4:cc:16:aa:f4:8a:01:7d:fc:7b:c7:a5:
                    01:d3:07:ef:e4:28:4f:c8:82:0b:e9:48:5c:65:e6:
                    57:42:4a:5e:95:99:eb:aa:c0:0b:3f:eb:f8:59:81:
                    2c:21:19:8a:dd:98:56:5a:d0:bb:30:63:f7:90:a7:
                    b6:0d:99:50:18:d8:83:be:ac:e2:02:f5:f9:1a:7c:
                    63:25:88:fa:dd:89:5d:d0:ef:ee:f2:0d:23:56:c1:
                    fc:df:12:48:af:00:02:d0:1a:80:2d:ad:b8:fe:e5:
                    53:26:ab:51:c0:d1:65:7f:92:0a:23:a5:8a:a1:e4:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:20:3B:BA:25:91:99:BC:AE:65:F1:A2:37:B2:C2:B5:CF:79:77:54
            X509v3 Authority Key Identifier:
                keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:78:75:f6:d6:c2:41:6d:30:d8:eb:f9:c0:2c:d3:2b:9f:1f:
         84:a8:b6:6d:7c:f2:2f:95:b4:6e:a7:8c:14:c4:a0:33:14:f4:
         81:54:20:ae:f3:35:78:50:82:9f:52:dc:31:2c:75:69:87:57:
         78:5c:8f:a8:79:d1:47:17:a9:f0:1f:d0:16:d9:3c:56:8f:b6:
         c5:5a:94:fd:e5:f0:fd:0c:14:9f:40:11:a9:ba:5f:17:84:29:
         ec:20:68:00:e5:5b:d2:e6:78:be:59:d8:b8:dc:cc:b5:49:d4:
         5f:2d:de:7d:37:27:59:e3:53:71:25:1d:9e:e6:27:4c:05:12:
         d5:a9:d0:90:25:fb:5f:7f:f7:77:3d:15:e4:51:f0:be:bd:01:
         0a:72:89:4b:fd:44:83:9c:f1:25:a4:fc:75:41:21:a1:15:3e:
         b6:23:aa:8e:83:9f:ef:6c:ac:60:08:f6:a8:92:30:46:52:12:
         ce:16:80:ac:fb:7b:33:9f:ad:f4:87:cf:b6:f8:f3:2e:19:e7:
         d1:4e:76:23:57:f4:4c:24:a5:05:4f:0a:32:28:44:3b:bb:81:
         9e:77:97:1a:d3:a7:8e:0f:22:b6:b7:fe:ed:d0:21:bf:5b:4b:
         23:aa:a8:6e:25:f3:2f:46:39:6e:65:93:c4:13:82:b4:4d:72:
         92:50:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:37:13 2026 by rpki-client