Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File:                     pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier:          EYStbfDsF240lDF24sYkbEiQQhNKDKW+wXCiIQh0HnY=
Subject key identifier:   C6:6D:90:72:35:56:BA:97:8A:7A:4B:C6:BB:91:4E:7F:92:78:B3:DD
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer:       /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial:       019D397790288D30E46FD228B4A7DECFBCE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number:          0276
Signing time:             Sun 29 Mar 2026 12:00:30 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:30 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:30 +0000
Files and hashes:         1: lha0ZmedDVL5ojeX6XufkbgdzDc.roa (hash: aql9eZoUUBsK6RGXxorryRAzls71w3x+Yu3C3M/JeMA=)
                          2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: +FxMn4NHdSXbzwryHzMNbO4Q7B4LLgqg/0Mr16ID5XU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:90:28:8d:30:e4:6f:d2:28:b4:a7:de:cf:bc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
        Validity
            Not Before: Mar 29 12:00:30 2026 GMT
            Not After : Mar 30 12:00:30 2026 GMT
        Subject: CN=c66d90723556ba978a7a4bc6bb914e7f9278b3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:3a:b3:12:4e:a3:40:31:44:5e:bf:8b:50:
                    a5:d6:ed:56:6a:c5:f4:a6:bc:53:e1:26:43:65:ff:
                    f7:aa:11:a8:b3:18:f7:3d:1a:37:4d:73:9e:16:91:
                    14:12:98:99:da:85:59:ff:d8:e3:94:a4:99:d5:b1:
                    c9:37:02:72:15:e2:59:ca:d1:4d:98:34:1c:28:21:
                    18:10:86:b9:c5:17:1a:bc:9c:79:88:03:0d:ae:44:
                    b5:66:56:24:37:24:0f:0d:07:ea:4c:19:7f:22:f6:
                    d3:8d:1b:8e:78:49:38:47:46:32:12:fe:9e:1a:19:
                    c2:e5:f9:c7:6f:fe:5a:08:30:1d:6a:fb:e3:97:37:
                    a8:01:bf:d7:37:60:64:07:b6:00:4b:7d:b8:35:1f:
                    05:91:d5:da:3e:3c:23:28:00:3b:78:e9:26:68:6d:
                    9e:a6:28:8b:01:88:4e:c1:79:ca:e5:52:a5:21:d2:
                    4a:88:2e:67:03:fa:71:8e:28:a2:20:0e:aa:86:4b:
                    5a:9f:7d:86:aa:64:16:89:df:cf:f1:4c:45:af:40:
                    a2:26:84:12:79:cb:ad:af:69:ce:44:e8:c5:59:1d:
                    fe:ff:7a:a5:15:92:a3:f8:05:9a:20:8f:3f:03:1e:
                    09:ab:0c:ef:e6:12:14:c5:a1:2d:7b:9d:27:b9:35:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6D:90:72:35:56:BA:97:8A:7A:4B:C6:BB:91:4E:7F:92:78:B3:DD
            X509v3 Authority Key Identifier:
                keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:53:50:e4:8f:14:ca:9a:d7:00:d7:20:2e:9e:95:a7:b8:f8:
         7c:f1:c3:6d:64:82:5a:90:c5:b4:fb:68:fa:d3:e9:d4:f1:af:
         e8:00:2e:6d:ba:fb:ae:d4:71:8e:1a:82:be:8d:ec:84:19:10:
         7c:16:74:b0:6c:a0:62:de:e4:07:61:16:e8:78:19:ee:ce:b8:
         cc:a3:62:a4:c6:83:9d:33:2a:d6:bd:26:de:db:c7:69:f5:d3:
         44:1d:82:ce:c9:aa:71:38:fc:d5:ab:83:62:74:83:a6:99:69:
         05:5a:52:50:87:99:1e:9b:13:d4:47:bd:0a:0e:0f:1b:bb:96:
         09:43:fa:8c:f0:89:2e:c9:de:f1:44:83:6d:69:9a:eb:4f:01:
         b6:90:58:c0:78:77:47:4a:63:49:42:01:a1:b8:58:0f:91:74:
         78:47:51:c0:95:93:d3:d8:28:7a:9a:8c:5b:71:60:64:84:e2:
         81:db:e6:b2:0a:b4:3c:fc:36:b2:0c:74:91:55:58:0e:fc:11:
         ef:87:b3:4c:00:77:a3:17:8c:98:93:64:f6:37:ab:35:6e:21:
         fc:bd:85:2c:2a:b2:bb:0e:05:32:02:5a:6b:d6:2c:14:59:82:
         2f:88:bb:cb:e2:6d:08:86:b9:71:b9:c2:99:9d:b9:20:cc:d8:
         6d:7d:7a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:28 2026 by rpki-client