Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
File:                     Ph_ROPEC19yxWDtElBAvD-WH5F0.mft (raw, json)
Hash identifier:          8g5YPIxyS98SlOgKLPESWOUU1R7rKeWoYOpiONu9mnc=
Subject key identifier:   84:1C:1D:F2:4A:6E:49:80:EA:94:61:E7:B1:FF:9E:4F:A0:BF:6F:4E
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Certificate issuer:       /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial:       01A1494F61409F76A0AF2949AF44F487C695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
Manifest number:          1AAD
Signing time:             Sat 17 Oct 2026 10:01:41 +0000
Manifest this update:     Sat 17 Oct 2026 10:01:41 +0000
Manifest next update:     Sun 18 Oct 2026 10:01:41 +0000
Files and hashes:         1: 5WlkBW9jzB02ilWwcESnZBhBZcw.roa (hash: BeHCp8no7SRXOueP/j4ph7p2OgVkylIBkA/kOhEkKPk=)
                          2: Ph_ROPEC19yxWDtElBAvD-WH5F0.crl (hash: aApZCWr50VSPe//LMYvFW20mJ1jB8oeuDNSZDUct0z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 10:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:4f:61:40:9f:76:a0:af:29:49:af:44:f4:87:c6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
        Validity
            Not Before: Oct 17 10:01:41 2026 GMT
            Not After : Oct 18 10:01:41 2026 GMT
        Subject: CN=841c1df24a6e4980ea9461e7b1ff9e4fa0bf6f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:9b:99:5f:f2:cd:71:b3:9f:11:c6:06:7c:
                    11:e0:c4:c1:e9:ae:c4:bf:38:16:b3:48:8e:cb:76:
                    c9:07:d6:4e:9a:75:6f:37:fd:24:27:cd:3e:0d:db:
                    bf:73:3d:58:93:9f:59:68:76:43:5a:4c:3a:29:1f:
                    2d:71:64:f9:a5:e1:18:25:97:d2:74:55:47:43:83:
                    31:9c:a2:ad:7f:fb:02:94:2b:ff:29:07:13:91:43:
                    fc:7a:8d:bd:ed:ef:d0:e8:78:21:3e:25:f7:20:a9:
                    b4:a5:58:d1:9e:5b:fb:6e:03:b8:24:3c:2a:b2:f6:
                    bb:9e:bd:83:1f:30:90:1c:42:ff:71:5d:99:3f:78:
                    06:69:4e:d5:b3:df:f1:b6:2e:45:79:c0:72:08:f2:
                    ec:a6:e7:24:90:f8:88:65:bf:4f:55:8f:7a:50:49:
                    03:65:09:3d:02:33:d5:43:35:c6:aa:d3:6d:d0:f6:
                    d7:70:54:b3:a3:55:09:e1:9c:90:80:b2:b8:8a:4b:
                    77:0e:d0:84:fe:0f:8a:a9:e6:d9:76:c9:dd:9e:a1:
                    f6:d3:af:a4:4b:3d:e6:b3:44:66:07:ba:32:75:b6:
                    2d:f6:72:f5:01:1e:4a:16:41:4f:b4:3c:14:08:8f:
                    ee:c6:1b:c7:07:5a:6c:3c:f0:7e:75:04:1b:c4:2b:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1C:1D:F2:4A:6E:49:80:EA:94:61:E7:B1:FF:9E:4F:A0:BF:6F:4E
            X509v3 Authority Key Identifier:
                keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e3:f3:97:1d:56:0a:e2:fb:99:22:d7:2b:a1:49:71:d5:25:
         6f:94:c7:13:23:45:31:06:88:12:3c:73:b7:b1:67:ab:c0:94:
         48:36:9c:1d:23:b0:8b:02:26:a9:8b:6f:59:60:44:0c:6b:23:
         7c:21:f7:d7:f5:ad:82:3c:b9:c4:6f:31:29:8e:2c:f2:00:1e:
         e4:1c:eb:ad:09:d8:60:e6:3b:47:8c:79:67:a4:e4:51:f7:b8:
         c2:b4:88:5c:81:b1:87:7b:59:2f:3b:9b:d1:b8:20:7c:31:d1:
         3a:e6:2b:4d:ef:ae:3d:8f:cb:d7:91:ce:1b:0a:25:2c:33:92:
         74:ea:cd:2b:36:3e:d9:5b:20:dd:fd:60:d7:0e:34:5f:cd:99:
         fe:a4:26:03:e6:b2:f7:85:9e:97:58:50:27:a4:35:c5:22:0a:
         cd:82:df:3c:8b:08:40:6c:2a:c7:a8:7f:99:a7:6c:04:2c:d4:
         29:5c:90:b1:c0:9d:af:68:48:68:72:39:f1:74:18:9e:65:bf:
         ce:0f:f3:28:60:5d:2c:87:35:64:bb:85:93:4d:12:34:44:21:
         8c:e4:5c:12:a6:41:2c:22:aa:40:e8:ae:e2:ef:59:12:66:a8:
         df:e5:1d:1d:6f:6a:20:0f:0e:d8:b9:e7:02:c4:cd:95:bb:3c:
         0a:e1:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:27:04 2026 by rpki-client