Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
File:                     PjMt0plMbuiUNhWKLqwfSCkizSo.mft (raw, json)
Hash identifier:          h8xGHdDZQJB+NYCt5EcDic/HEktdYsrifMXBqwoo+R8=
Subject key identifier:   E5:5A:C7:9A:DB:E5:35:3F:A2:DC:5E:22:6C:3E:A2:C7:8C:5D:B9:31
Authority key identifier: 3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A
Certificate issuer:       /CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
Certificate serial:       01A14FF58A7684DBE0013BEA54ADDE4D7543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
Manifest number:          0BC5
Signing time:             Sun 18 Oct 2026 17:00:54 +0000
Manifest this update:     Sun 18 Oct 2026 17:00:54 +0000
Manifest next update:     Mon 19 Oct 2026 17:00:54 +0000
Files and hashes:         1: 8xmLEuWVoq-luhpUPZd1WI6D0Js.roa (hash: j13xyv2Txbt+npMeAxt4bkLbD3ednHhJEFGvJw7Inx4=)
                          2: C-zWCgwAxUcB5PR-BZP8SY0imsc.roa (hash: tH6y5VegxHL/FivasKZlqGMSC8JeobbFVY2ZXp/Rp9w=)
                          3: PjMt0plMbuiUNhWKLqwfSCkizSo.crl (hash: /UlShEj75hHxxRMPL39I5PVih86RqSLa0dAeCaipQAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:f5:8a:76:84:db:e0:01:3b:ea:54:ad:de:4d:75:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e332dd2994c6ee89436158a2eac1f482922cd2a
        Validity
            Not Before: Oct 18 17:00:54 2026 GMT
            Not After : Oct 19 17:00:54 2026 GMT
        Subject: CN=e55ac79adbe5353fa2dc5e226c3ea2c78c5db931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:fd:72:13:e1:ca:a4:26:e6:49:eb:bb:6e:
                    15:c3:1c:dd:21:70:2e:cd:2e:c4:f4:5d:ec:42:56:
                    1b:cc:4d:1d:4c:73:69:cd:9a:8a:51:5b:49:ad:94:
                    fa:04:50:f4:6d:c4:fe:f3:4d:2f:da:57:cf:e7:d9:
                    ca:74:48:fb:51:8c:a3:6d:72:e0:9d:a2:74:48:78:
                    1e:b1:73:fa:f2:a5:81:4e:06:3f:b7:8c:2d:d6:7c:
                    dd:6f:6a:0f:07:66:bd:fc:84:49:db:57:03:a3:ea:
                    1f:03:13:4f:f6:1a:7b:f1:5e:a8:81:6d:61:39:b3:
                    bf:00:88:b9:62:83:be:8d:37:81:db:1b:2d:75:e2:
                    af:79:7d:17:49:7a:e1:04:28:45:1d:16:a6:04:41:
                    01:45:ee:6b:92:06:2f:b5:7e:73:3f:2d:c4:9a:e6:
                    fa:2f:05:9b:96:68:5b:11:04:83:16:19:63:11:b4:
                    11:df:08:fc:8f:0c:d4:3a:82:64:fa:cd:36:16:a1:
                    c2:d3:d2:56:b4:e9:ba:df:df:a9:5c:2b:55:ac:9e:
                    4a:c8:65:b0:f7:c0:cc:ca:33:4a:57:37:2a:82:61:
                    8a:23:6b:9b:b5:31:b2:48:42:08:aa:40:c7:8b:0e:
                    43:39:6e:2f:70:b0:07:cd:04:98:03:49:91:1c:7b:
                    ab:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5A:C7:9A:DB:E5:35:3F:A2:DC:5E:22:6C:3E:A2:C7:8C:5D:B9:31
            X509v3 Authority Key Identifier:
                keyid:3E:33:2D:D2:99:4C:6E:E8:94:36:15:8A:2E:AC:1F:48:29:22:CD:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjMt0plMbuiUNhWKLqwfSCkizSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/608e21-6a40-4711-9c83-d024ad4b7beb/1/PjMt0plMbuiUNhWKLqwfSCkizSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:10:3f:13:ea:10:c7:66:5a:5f:ef:5b:aa:3b:78:0c:d3:73:
         0c:4e:34:b4:40:04:78:1a:ab:5b:89:cc:73:01:4e:5d:15:60:
         93:50:4b:ab:a8:2c:25:84:87:13:b7:2c:37:05:c5:80:00:30:
         b9:3e:c0:e2:fc:4a:cf:0e:6a:98:06:27:7f:41:21:ae:78:56:
         99:19:f0:01:3b:c6:e1:61:82:d2:f4:4c:de:b2:e6:89:d8:9b:
         aa:84:e1:36:ca:4e:f4:03:d5:d7:bb:2a:3a:c2:a6:54:a5:73:
         e4:87:36:2d:b4:75:8b:94:d3:7b:10:1b:8e:47:30:21:79:ba:
         04:8b:92:9b:7f:20:b0:1b:0a:28:a6:f5:4f:d7:4e:6f:6a:e4:
         08:e4:f6:37:38:89:fe:39:57:4b:00:b9:5f:c5:3d:7c:5d:d9:
         97:33:65:df:3c:f6:49:bd:d5:d8:5e:8f:77:19:1c:53:97:8c:
         15:60:b7:0f:e8:74:d2:db:a4:44:40:b3:d5:ea:44:78:c7:ca:
         1b:7e:90:00:ee:f5:29:3f:8e:9c:55:d9:4f:50:9f:0b:53:d1:
         9c:cc:33:c5:e5:5e:be:7a:de:10:dc:fc:25:54:2c:a0:5a:08:
         03:ad:d0:30:bc:9a:24:82:4c:97:8d:96:98:6e:f7:26:75:e2:
         8c:eb:a1:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFP9Yp2hNvgATvqVK3eTXVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMzMyZGQyOTk0YzZlZTg5NDM2MTU4YTJlYWMxZjQ4Mjky
MmNkMmEwHhcNMjYxMDE4MTcwMDU0WhcNMjYxMDE5MTcwMDU0WjAzMTEwLwYDVQQD
EyhlNTVhYzc5YWRiZTUzNTNmYTJkYzVlMjI2YzNlYTJjNzhjNWRiOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU79chPhyqQm5knru24VwxzdIXAu
zS7E9F3sQlYbzE0dTHNpzZqKUVtJrZT6BFD0bcT+800v2lfP59nKdEj7UYyjbXLg
naJ0SHgesXP68qWBTgY/t4wt1nzdb2oPB2a9/IRJ21cDo+ofAxNP9hp78V6ogW1h
ObO/AIi5YoO+jTeB2xstdeKveX0XSXrhBChFHRamBEEBRe5rkgYvtX5zPy3Emub6
LwWblmhbEQSDFhljEbQR3wj8jwzUOoJk+s02FqHC09JWtOm639+pXCtVrJ5KyGWw
98DMyjNKVzcqgmGKI2ubtTGySEIIqkDHiw5DOW4vcLAHzQSYA0mRHHurOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVax5rb5TU/otxeImw+oseMXbkxMB8GA1UdIwQY
MBaAFD4zLdKZTG7olDYVii6sH0gpIs0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMt
ZDAyNGFkNGI3YmViLzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82MDhlMjEtNmE0MC00NzExLTljODMtZDAyNGFkNGI3YmVi
LzEvUGpNdDBwbE1idWlVTmhXS0xxd2ZTQ2tpelNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxA/E+oQ
x2ZaX+9bqjt4DNNzDE40tEAEeBqrW4nMcwFOXRVgk1BLq6gsJYSHE7csNwXFgAAw
uT7A4vxKzw5qmAYnf0EhrnhWmRnwATvG4WGC0vRM3rLmidibqoThNspO9APV17sq
OsKmVKVz5Ic2LbR1i5TTexAbjkcwIXm6BIuSm38gsBsKKKb1T9dOb2rkCOT2NziJ
/jlXSwC5X8U9fF3ZlzNl3zz2Sb3V2F6PdxkcU5eMFWC3D+h00tukRECz1epEeMfK
G36QAO71KT+OnFXZT1CfC1PRnMwzxeVevnreENz8JVQsoFoIA63QMLyaJIJMl42W
mG73JnXijOuhtw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:07:38 2026 by rpki-client