Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
File:                     PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft (raw, json)
Hash identifier:          CxYgiIEiwNi2Hk8xhjVRc1U3h4rllI3+P1qi3XRt8Eo=
Subject key identifier:   FA:23:6F:23:8A:44:3F:FB:3E:62:06:25:51:0E:FB:8C:AC:B3:28:E9
Authority key identifier: 3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E
Certificate issuer:       /CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
Certificate serial:       019D382DCDD9DE09CD11AE7714E6FF50660C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
Manifest number:          055D
Signing time:             Sun 29 Mar 2026 06:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:19 +0000
Files and hashes:         1: PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl (hash: xtnqXKKXi6xGX3ST3dFv5sSpQA7xkDcSN38hO3Zz0A4=)
                          2: ZzwBIXUIf-pGbIiz_7UAqAEAXjw.roa (hash: Z1fTc8LEyy3vBAnK6iovMLGRojKde+nTCvKGqeFlN88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:cd:d9:de:09:cd:11:ae:77:14:e6:ff:50:66:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
        Validity
            Not Before: Mar 29 06:00:19 2026 GMT
            Not After : Mar 30 06:00:19 2026 GMT
        Subject: CN=fa236f238a443ffb3e620625510efb8cacb328e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:e6:b7:6e:f5:43:4f:fd:cd:bd:d1:2a:00:
                    f4:cc:73:da:6c:98:49:c0:34:b7:52:a5:0e:2a:48:
                    70:16:5c:dd:4e:6c:33:ca:18:60:32:40:f8:db:55:
                    6d:21:41:9c:ac:7b:16:22:fb:3a:52:a2:d0:3c:74:
                    35:dd:18:ad:04:94:40:12:c9:42:98:b9:62:76:6d:
                    9d:e6:6d:ef:bb:c8:23:f5:98:14:c7:1d:31:10:09:
                    bd:2c:60:0b:c8:ec:74:8e:9f:09:58:32:2e:4b:a4:
                    f4:86:d4:d6:32:fd:24:f9:bf:9f:1b:78:e5:b6:17:
                    5d:29:20:85:b9:d3:de:ef:2d:3a:74:73:82:a7:66:
                    3c:16:d5:53:40:7f:c4:3f:e7:2b:5b:a7:32:d0:67:
                    a9:cc:c1:e7:c2:93:84:e6:0d:3c:7f:45:7f:74:fc:
                    19:58:03:29:97:b5:c6:14:5e:55:88:3a:f9:89:b7:
                    77:cc:15:c5:50:a2:c4:78:6e:24:34:0f:57:87:c8:
                    ea:cb:34:77:8c:44:7a:8e:aa:b4:89:cf:e9:e2:ba:
                    20:1c:1b:30:b0:5d:48:71:d7:3e:3e:bc:aa:74:27:
                    48:30:03:bc:29:5e:40:1b:67:7e:4c:f6:c4:d4:d2:
                    81:4d:a2:54:8b:29:c3:ec:cb:f3:8c:57:5f:53:85:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:23:6F:23:8A:44:3F:FB:3E:62:06:25:51:0E:FB:8C:AC:B3:28:E9
            X509v3 Authority Key Identifier:
                keyid:3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:67:7b:ff:08:0c:1d:6e:95:d6:ed:6c:3a:32:19:c8:b3:3a:
         41:73:67:fc:f6:df:3c:98:11:a6:7b:ec:5e:44:45:82:89:45:
         30:40:06:1f:0c:cd:60:7e:48:68:84:a4:b8:74:2f:cb:74:63:
         f0:52:96:a3:5d:a9:45:e9:70:0c:74:91:1b:ef:dc:d8:c6:d1:
         97:e8:c2:dd:38:d2:78:64:dd:52:58:79:f9:b9:cf:23:cf:d0:
         cb:07:c2:96:0e:91:d1:de:59:93:08:f1:44:c5:3b:a6:e2:e7:
         20:9c:3d:4d:cf:5d:c3:95:6a:d3:58:0c:cb:cc:1f:7f:62:11:
         87:ad:76:ec:77:7b:f2:c5:79:32:79:bd:da:60:26:77:1d:ac:
         31:d6:de:ce:9e:06:cc:9e:37:3e:24:92:b6:e8:21:7c:31:7d:
         fb:11:97:e2:37:a7:bf:c8:b5:eb:a9:d0:dd:b9:cd:a1:8f:57:
         ee:ca:24:68:64:17:e7:43:8a:d9:b0:1b:93:91:61:4a:11:77:
         86:97:be:93:35:ea:3b:e7:9f:71:c4:1e:b1:e7:bb:82:16:6e:
         17:d1:86:d6:44:93:dd:a9:7d:10:55:1f:7f:db:b3:36:16:24:
         db:77:21:4a:a0:81:14:a2:2a:ee:0e:3b:79:96:33:d2:05:cd:
         65:63:4f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:35 2026 by rpki-client