Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File:                     pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier:          FfOeJBCo4T+L0N+Gm3nWOIFHPvMxbdzLn0O74VewfA8=
Subject key identifier:   A7:04:F9:23:73:E7:28:2A:5F:58:32:43:58:8F:84:E9:26:C6:AE:79
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer:       /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial:       019D37F6FFEB15AD521EC30A85609CEFC48A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number:          055B
Signing time:             Sun 29 Mar 2026 05:00:27 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:27 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:27 +0000
Files and hashes:         1: e753LkUtZdPOHhc1jXD6UBTKdAI.asa (hash: QxMQuuavAVTbwrJf2pty+8SMFCYB7PU0/p/Emd0Ybrg=)
                          2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=)
                          3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: 2fYHPJVX8/Hn4V68t5F8DqoHEYfJe33Nq0sgnoR92G0=)
                          4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:ff:eb:15:ad:52:1e:c3:0a:85:60:9c:ef:c4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
        Validity
            Not Before: Mar 29 05:00:27 2026 GMT
            Not After : Mar 30 05:00:27 2026 GMT
        Subject: CN=a704f92373e7282a5f583243588f84e926c6ae79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:0d:59:75:f2:5b:db:06:11:52:ef:8e:28:
                    79:b7:f0:fa:e2:13:cb:f7:6e:1d:65:f0:9c:00:63:
                    5d:3b:3e:01:52:60:82:6c:7a:70:f3:93:cd:8e:88:
                    d7:e0:25:a7:ed:f2:74:05:ec:d9:db:96:7b:77:6a:
                    3b:fb:fb:00:d6:2e:a6:76:e0:f8:6b:45:6a:1d:db:
                    8d:ef:a0:59:16:32:83:5f:98:09:33:79:76:97:9e:
                    de:49:d0:cd:a9:da:e0:49:8c:0a:70:d9:aa:83:5b:
                    f3:e2:12:76:f4:66:6f:97:86:3b:99:78:c1:96:5b:
                    c4:cb:b7:fc:bb:91:27:d9:a9:10:ad:e5:f1:1a:1d:
                    cb:52:89:96:74:c5:38:e2:22:9b:0f:f0:43:28:c3:
                    f2:d4:23:b2:7a:33:49:1f:de:67:28:76:b3:8e:65:
                    bc:b8:e1:e3:d4:7d:9d:18:59:a5:54:e9:d6:b4:6b:
                    e7:49:09:c1:db:0c:e8:37:ad:8a:03:85:f2:dd:d5:
                    79:40:e3:fd:8d:60:8e:d0:a7:68:fc:2e:9c:b5:22:
                    8e:86:c9:10:d5:5f:4e:8c:07:c5:77:95:38:1b:88:
                    8a:56:52:f4:30:7c:38:ba:5e:8e:f7:ef:24:27:fb:
                    cc:be:01:72:e8:51:ff:53:53:51:61:3b:4f:b6:90:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:04:F9:23:73:E7:28:2A:5F:58:32:43:58:8F:84:E9:26:C6:AE:79
            X509v3 Authority Key Identifier:
                keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:39:4b:28:7b:0b:cd:7d:4e:e1:ce:aa:6e:64:00:b1:04:
         42:1a:a0:30:d2:64:d3:4f:ff:5a:02:4a:a0:ef:81:5c:e4:2c:
         e3:1d:45:3b:5c:7a:78:ba:78:13:6c:02:80:35:ee:23:34:46:
         3a:38:05:40:7c:88:31:ec:b9:1e:f0:2b:6c:27:85:bf:2b:16:
         66:3a:94:f3:cf:ec:ca:f9:cd:8c:c1:2e:f5:ce:46:f5:78:91:
         38:23:7e:0e:39:25:3d:79:c6:eb:36:60:a6:bc:8b:e1:16:ba:
         59:ac:57:5c:b4:11:42:7e:47:e7:7d:cd:b9:49:88:ed:95:4d:
         23:32:4c:e4:f5:63:ce:62:33:99:0c:19:6f:9c:8a:9b:10:f5:
         2d:60:ca:01:8b:66:f6:a2:a2:69:74:ed:9a:b4:72:d4:4f:cc:
         c2:9b:4e:06:e8:b6:6a:e7:a2:97:8f:06:4c:09:ef:8a:05:8e:
         bc:36:d0:83:2e:f2:72:03:9f:7d:3c:31:d1:bf:14:07:98:ad:
         78:d7:e8:73:19:a7:4e:66:ee:f2:30:14:fa:3c:63:97:0b:8b:
         74:cb:96:9c:47:9d:b9:7d:25:e8:69:fd:3c:3c:07:66:61:a9:
         70:01:b4:55:9e:8a:5b:e3:79:e1:52:2e:28:fd:09:fa:9c:6d:
         83:88:72:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:57 2026 by rpki-client