Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File:                     PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier:          G14kG1ovbTHEer17cAqU7EmlAtZtMODGBtrH3nYlSoY=
Subject key identifier:   50:FE:87:77:F9:43:A1:FE:57:BC:C8:16:C6:ED:83:F5:4F:FD:77:C7
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer:       /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial:       01A17A71BBCA021891F0EF268B5274B379EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number:          11D2
Signing time:             Mon 26 Oct 2026 23:00:36 +0000
Manifest this update:     Mon 26 Oct 2026 23:00:36 +0000
Manifest next update:     Tue 27 Oct 2026 23:00:36 +0000
Files and hashes:         1: 06Cr8RrUW-YBGOEDpWiR6_6QPIo.roa (hash: FnV3E+psZ9RL4Wm0ZPwY8F8XZvQTXZZNm+8KVQlkwik=)
                          2: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: uTj1+FnsKXzHeIsrUGTMSRSjPGSlAzxNxT+/LaxBfog=)
                          3: pjWOXlpE0b5S_0JGvMVFcwdSSJ8.roa (hash: 3zMko1kxbxLAZVlJgNvxrbIK5O6rX6hf1z6N9QMjOGo=)
                          4: unkGkB8qp1620UotFb6yhd6x1oU.roa (hash: +yKx8BTwISlKJwgwtVb1Joc3L3N9AZY0nFPc0pnvQJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:71:bb:ca:02:18:91:f0:ef:26:8b:52:74:b3:79:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
        Validity
            Not Before: Oct 26 23:00:36 2026 GMT
            Not After : Oct 27 23:00:36 2026 GMT
        Subject: CN=50fe8777f943a1fe57bcc816c6ed83f54ffd77c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bc:dd:2c:8e:70:9c:1b:1d:ff:15:c5:9f:c9:
                    f5:60:8b:9b:5f:8b:78:06:07:81:c7:f1:05:bd:30:
                    3b:46:14:e5:bb:93:03:e0:53:3a:e9:bc:c0:e3:7c:
                    d9:51:47:f2:de:23:d0:ea:2d:81:22:3e:4b:5f:d6:
                    ea:78:3b:d1:c4:11:db:c5:c2:0d:c5:bc:10:0f:2d:
                    d8:b4:7e:b3:e9:46:65:5d:32:e0:3a:55:03:5f:7b:
                    01:06:35:60:34:bb:54:0b:83:bc:6a:b6:30:00:25:
                    42:80:f6:bd:d6:da:84:f1:71:52:ee:2e:01:c7:3a:
                    5a:f2:b4:4d:18:85:ff:23:40:8e:b8:f1:2b:fa:45:
                    42:79:08:16:bf:49:e0:6c:b6:aa:66:3d:f5:5f:60:
                    e1:7b:f4:18:e9:af:9a:3d:ad:55:4f:37:92:1c:22:
                    f8:8b:0d:44:5a:36:98:5f:5a:80:29:c6:d7:b2:74:
                    ff:fb:31:11:0d:5e:de:28:ad:ad:53:40:77:b0:66:
                    27:cc:fa:bb:4d:b0:af:39:c0:c8:ca:8d:75:ee:65:
                    ec:7f:77:b1:21:8f:7f:cf:be:21:51:13:c0:d1:07:
                    b8:50:e3:ef:51:52:0a:60:27:de:0c:a0:20:08:11:
                    4c:17:a6:be:6c:a2:07:fc:76:50:95:1f:8b:ae:ee:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FE:87:77:F9:43:A1:FE:57:BC:C8:16:C6:ED:83:F5:4F:FD:77:C7
            X509v3 Authority Key Identifier:
                keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e9:5f:02:16:d3:b3:a4:ea:bc:7f:57:23:b8:66:1e:03:fc:
         9d:1c:e7:4d:84:7e:d0:cb:f3:e7:f1:51:42:bb:1f:2a:7c:a9:
         70:b0:5b:0d:12:77:34:9f:d0:e0:97:6f:05:c7:88:f2:34:6e:
         7a:3e:67:86:8e:bd:d2:23:01:ed:f0:a7:01:a7:3d:23:f1:1b:
         24:12:58:8b:cb:26:d7:c1:ad:e3:6d:32:b0:34:af:b4:b7:61:
         61:cc:08:93:4a:6d:21:e7:4e:88:92:1d:4c:31:74:65:06:0e:
         e0:43:3c:b7:e4:1f:77:6b:39:44:3c:d8:e8:f3:db:f2:57:d2:
         4a:bd:31:53:48:64:ba:17:69:76:58:0b:a1:42:d8:02:0a:9b:
         fd:7f:3c:9f:a5:42:e7:4a:67:3f:44:7d:fb:60:5a:6c:9f:80:
         88:a5:27:62:99:40:ea:32:35:d3:48:f6:34:d0:76:c1:8f:7c:
         b6:34:fa:49:58:b7:08:ed:a3:bd:92:0d:fc:0f:8e:27:e7:05:
         1a:2a:e1:e9:e7:c5:b2:1f:8c:f4:3c:d7:a1:cc:b1:5b:f5:51:
         56:e1:f1:e3:fa:62:2e:da:10:19:62:b6:ee:ff:16:78:10:ef:
         37:66:29:e8:35:89:fd:a2:f2:ff:60:7d:31:fb:6a:fa:6a:10:
         5d:9c:b6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:59:06 2026 by rpki-client