Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File:                     PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier:          uujoJEYKlB5e0pzXYOipGSSlaL5NUc86NZTWKQeqUCc=
Subject key identifier:   51:5F:91:36:F4:B9:CB:F3:F2:BA:D1:12:F5:50:9B:E4:3A:9B:0B:6D
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer:       /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial:       01A0024B034E3CDBFABE469E91E971123AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number:          196F
Signing time:             Fri 14 Aug 2026 22:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:05 +0000
Files and hashes:         1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: iOXzqHflZhRkruCB6uWkPfyesS6eAWQWOafGG0i1ltU=)
                          2: uJd7RZN3ZAsoJQnJhc2M-mLjChI.roa (hash: /6Alyhe3uGVuPv9iCIcAX55KfuQ8Pqr9aqLM0Vwt394=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:03:4e:3c:db:fa:be:46:9e:91:e9:71:12:3a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
        Validity
            Not Before: Aug 14 22:01:05 2026 GMT
            Not After : Aug 15 22:01:05 2026 GMT
        Subject: CN=515f9136f4b9cbf3f2bad112f5509be43a9b0b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:74:27:da:06:ba:12:be:fa:17:7c:ad:d1:
                    be:bc:ce:e9:18:40:89:eb:6d:34:60:05:bc:47:45:
                    ce:99:a8:65:26:bb:c2:fe:c2:c2:ec:e1:06:c0:f1:
                    b3:14:33:de:39:f9:19:fb:62:f8:85:32:15:5b:43:
                    5e:04:c4:12:40:4e:02:42:fc:76:0c:f4:18:88:cb:
                    52:4d:61:50:8b:1b:6b:ec:6e:a4:7a:8b:72:8e:f7:
                    0a:68:bf:9f:c7:47:f4:cd:0a:e4:3b:0d:0f:ef:0d:
                    28:31:78:35:38:ad:0d:64:84:a1:74:3b:d7:58:83:
                    ae:13:98:ad:cc:be:83:4f:b6:7c:7e:07:7e:96:79:
                    1a:ad:ce:19:08:2e:d1:84:d0:38:fe:02:2c:bb:60:
                    d1:39:ec:9c:fb:52:38:89:45:cf:79:ec:ee:85:50:
                    6f:c0:55:35:36:41:d7:a4:ff:0a:ee:92:45:a4:2a:
                    e9:10:2b:1f:d5:ff:a0:13:f0:c7:09:47:d7:c0:17:
                    15:18:3a:13:26:c9:9b:34:c9:3c:89:42:89:c3:6a:
                    96:1e:ee:fe:81:c2:84:6f:31:25:97:36:0c:d0:b4:
                    ee:db:4c:72:96:f5:9d:97:d7:0c:d7:16:7d:d9:20:
                    20:d7:1d:b6:aa:31:e9:7b:9d:e9:d3:46:c9:eb:50:
                    79:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5F:91:36:F4:B9:CB:F3:F2:BA:D1:12:F5:50:9B:E4:3A:9B:0B:6D
            X509v3 Authority Key Identifier:
                keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:64:df:c5:ad:6d:01:f0:cd:39:3a:97:7b:7e:76:be:8b:
         0f:eb:23:d0:cd:06:4e:83:0c:db:ce:7b:4c:e6:70:d3:62:90:
         f9:de:12:3a:e0:40:66:1e:cc:62:c1:89:c0:51:62:5e:3e:39:
         6d:02:db:9d:68:8a:ca:06:cf:fe:3f:c3:ac:0e:d5:7f:06:36:
         3f:3d:73:65:3b:cd:85:a4:2f:70:59:dc:24:a8:1d:2a:fb:00:
         1a:3f:6f:ca:4b:f0:f4:43:dd:fc:cb:b0:87:8b:3c:1f:21:57:
         c3:e8:df:95:cf:14:47:4c:1c:e9:65:a6:74:07:b6:80:7a:ae:
         1d:65:29:83:8d:cb:74:d5:ec:0f:17:c0:f2:dc:78:92:c3:af:
         ae:34:6d:d4:36:74:0c:bf:aa:7c:51:4f:fb:d8:9c:3f:ea:5c:
         36:86:83:65:ec:5a:1c:3d:d4:7c:ce:59:1a:1b:c0:8e:65:03:
         1d:90:1f:7b:eb:ff:14:f3:22:4d:76:d1:f2:68:f8:fe:e2:5c:
         80:96:7a:de:83:81:c1:24:6b:57:6f:be:bb:8a:d2:54:a7:e4:
         b2:bb:96:8e:96:26:a5:a9:52:ec:bf:04:0f:3b:f8:82:df:94:
         b3:bb:fb:0c:6d:86:d1:43:e9:db:47:75:d8:5e:83:90:71:64:
         3c:70:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:20 2026 by rpki-client