Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
File:                     Ph_ROPEC19yxWDtElBAvD-WH5F0.mft (raw, json)
Hash identifier:          RukdoYM6N9NUmK8blgDXqrJLfdv5rzUojJQb3UyW5xc=
Subject key identifier:   CB:3C:EB:64:C6:27:32:A6:14:AD:85:3A:13:B3:8F:B2:02:3E:D6:0F
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Certificate issuer:       /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial:       01A002EFCFE7071ECD2CADE66C922CE89F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
Manifest number:          1A04
Signing time:             Sat 15 Aug 2026 01:01:05 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:05 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:05 +0000
Files and hashes:         1: 5WlkBW9jzB02ilWwcESnZBhBZcw.roa (hash: BeHCp8no7SRXOueP/j4ph7p2OgVkylIBkA/kOhEkKPk=)
                          2: Ph_ROPEC19yxWDtElBAvD-WH5F0.crl (hash: Vn8uPSXS8eiYkA/rFIRm3ucWwZbY1PeRga2wEmzSr0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:cf:e7:07:1e:cd:2c:ad:e6:6c:92:2c:e8:9f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
        Validity
            Not Before: Aug 15 01:01:05 2026 GMT
            Not After : Aug 16 01:01:05 2026 GMT
        Subject: CN=cb3ceb64c62732a614ad853a13b38fb2023ed60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d3:16:bb:11:08:87:44:43:06:92:49:f5:77:
                    9f:1d:9e:f5:d8:59:c8:6e:5e:3f:81:6d:e7:3c:88:
                    25:63:c6:39:14:ac:7f:8e:7b:e5:62:6f:88:91:dc:
                    cc:47:a1:33:96:df:83:39:3e:02:37:b6:33:8c:d0:
                    ec:99:b3:9a:a8:b2:e2:8b:fe:fa:28:0a:a3:41:a5:
                    d4:7c:45:a3:71:ab:93:12:b4:55:9a:65:c7:10:6d:
                    f7:f8:fd:44:de:b4:f1:1f:2c:e2:77:06:8e:9b:ee:
                    d3:60:d4:dd:5a:f3:36:47:45:fb:d3:54:12:51:27:
                    aa:dc:8c:e3:14:6d:b3:bd:45:6c:54:a0:2d:9b:e3:
                    ff:0e:91:f6:83:30:96:12:f6:86:04:64:4b:99:d7:
                    c4:60:a1:ac:49:29:89:c0:15:48:a1:d9:03:e1:f8:
                    c8:1a:82:1c:04:a3:e1:97:1d:3f:67:ad:54:0f:18:
                    56:35:7a:38:01:18:a9:7e:7c:3c:64:fc:69:d5:d0:
                    24:0b:0e:61:42:5c:b7:be:bf:8b:52:1d:9d:5c:77:
                    ee:6d:9f:5b:36:6e:06:20:17:1f:cb:4c:41:84:21:
                    28:86:b3:90:1c:68:fd:89:b7:f5:d7:f8:19:9b:89:
                    6a:10:ee:13:89:3d:a6:a5:63:de:60:45:a8:ea:39:
                    ee:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3C:EB:64:C6:27:32:A6:14:AD:85:3A:13:B3:8F:B2:02:3E:D6:0F
            X509v3 Authority Key Identifier:
                keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ad:17:ef:d8:7e:e5:56:45:d8:4f:15:88:0e:c5:4d:ab:c7:
         9b:16:db:8a:65:7f:97:05:de:f4:b2:22:79:ca:ec:7e:c7:ee:
         6c:51:9b:d7:0a:8c:80:18:05:6b:d1:89:19:63:11:c0:2d:b9:
         49:1c:a6:e7:20:98:05:14:34:96:51:7f:a8:58:ff:22:2d:2d:
         f5:a7:a8:c8:09:0b:97:43:20:f6:1c:e0:f6:67:aa:1e:92:2a:
         ac:19:94:de:27:e7:dd:e2:de:25:a5:2f:d4:82:ac:48:a6:b8:
         75:52:dc:49:3a:aa:39:2d:01:9b:4a:9a:d5:47:18:db:3b:b7:
         4e:65:b4:8e:25:2e:7c:4e:c9:4d:ac:ff:d7:cc:96:42:ce:2c:
         2c:1f:02:0b:48:b9:ec:68:4b:6b:06:67:e1:06:25:1f:cc:17:
         8e:47:6d:30:28:43:2e:7c:88:32:24:5c:93:21:b3:12:41:bd:
         ba:6b:c3:46:f1:f3:ae:61:ed:c0:72:ac:22:b2:8a:69:3b:7a:
         8d:12:a2:27:4b:b9:d5:e4:ce:95:cd:24:f5:fe:55:99:87:fd:
         c6:c0:11:55:88:ee:c1:3a:8f:a4:7c:f3:e3:4d:14:a3:61:f3:
         fc:d9:df:a4:ca:f1:51:76:4f:d0:cd:47:3e:78:f3:53:b5:85:
         92:d9:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:26 2026 by rpki-client