Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File:                     PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier:          wHaozwByABAj2mJ86Quc86HDwK+Rd5KaUyeTqJoTVm4=
Subject key identifier:   51:77:0E:63:B6:2C:38:87:C8:CF:F6:BE:66:44:3A:CC:2C:4D:F4:E4
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer:       /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial:       01A0024B7DD3E0EBAF6DF8CA014A85F9C059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number:          0BB9
Signing time:             Fri 14 Aug 2026 22:01:36 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:36 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:36 +0000
Files and hashes:         1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: 1ESD9FYaOIqkRiA09g+pAjIKnXjEBEbAzHfwq1pZGfQ=)
                          2: o2oMp4w_9TGCM9aisNXx6hIf0dE.roa (hash: 5zj6ry4dUTAYdyPOXRmxJv5IwbCW/zphAyYpf0E3ouc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 22:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:7d:d3:e0:eb:af:6d:f8:ca:01:4a:85:f9:c0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
        Validity
            Not Before: Aug 14 22:01:36 2026 GMT
            Not After : Aug 15 22:01:36 2026 GMT
        Subject: CN=51770e63b62c3887c8cff6be66443acc2c4df4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:94:b3:c1:68:b8:0d:df:eb:10:4f:51:5b:
                    51:7b:83:e6:8f:a8:25:7f:14:9d:b2:17:f7:12:88:
                    2d:28:91:3b:23:1f:67:9e:8c:20:9f:fa:6a:26:44:
                    fe:89:50:b6:79:1c:47:58:2d:41:1c:b8:83:ba:80:
                    a2:67:ab:04:15:66:33:b8:87:64:25:37:51:c6:13:
                    9a:3a:0b:74:ec:75:e0:7a:a8:82:41:65:0d:f8:c0:
                    6b:f0:20:e8:21:94:03:2f:c5:fe:13:13:df:9e:00:
                    b1:17:70:e8:ca:f1:e4:6b:80:3f:34:00:ad:05:92:
                    3f:d5:e4:cd:c5:f0:58:f5:6f:33:f4:e2:47:a4:7e:
                    2a:f6:77:6a:79:e5:a6:ab:e7:3e:0e:07:32:9d:6e:
                    f1:f8:61:13:01:14:63:5a:93:c9:31:93:08:ed:58:
                    c2:4a:ff:3d:68:fd:34:fc:87:af:d8:fd:d8:ed:99:
                    67:8d:93:fc:45:d7:64:a3:88:f7:b9:be:2e:ff:a9:
                    a3:e9:9a:41:12:4a:82:68:7c:ce:25:aa:0d:1f:34:
                    d7:31:bd:d4:f5:e8:5d:7b:68:9c:c3:96:ce:48:26:
                    8d:4e:45:c9:5c:23:e7:ff:6d:52:03:37:06:05:1d:
                    09:05:6f:d0:a2:0f:6c:b9:3d:4e:d7:77:b6:2c:6b:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:77:0E:63:B6:2C:38:87:C8:CF:F6:BE:66:44:3A:CC:2C:4D:F4:E4
            X509v3 Authority Key Identifier:
                keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ca:b3:30:35:66:86:c4:ff:9a:5c:4e:4c:22:01:7a:97:54:
         3a:ce:0a:d2:8b:70:8b:94:19:42:c0:8e:3b:68:b8:fd:43:ba:
         72:9d:c1:85:00:4b:87:76:b0:fc:04:4c:c0:fa:fb:a1:d3:04:
         99:0f:2e:40:40:54:1b:06:b5:49:68:3d:2e:8c:60:a4:8c:d1:
         02:1a:f9:91:ec:50:66:ed:c3:62:2b:0f:ed:7c:95:13:3a:31:
         63:39:35:4d:a5:c4:25:6a:34:c0:42:db:37:06:10:9b:bf:8c:
         75:51:af:c0:82:e6:4c:f0:63:db:d3:78:06:e4:ed:56:59:05:
         e7:b6:f7:25:cf:7b:95:5c:a5:69:7f:05:de:fc:7b:60:a8:4a:
         a7:e9:8e:91:22:ff:e7:04:c7:00:9a:6a:c8:94:7d:bc:a6:42:
         33:3f:37:ea:bd:1f:6a:a0:d0:02:66:97:42:ec:74:4a:8c:f4:
         65:db:f5:99:83:08:b1:5c:3f:39:78:42:62:78:31:cc:99:37:
         52:78:af:62:c4:86:12:70:bf:5b:0d:0f:f4:84:43:31:ab:98:
         04:f7:19:02:e4:d5:eb:a2:40:9d:cc:ae:31:9d:8c:53:e9:15:
         78:1e:5c:72:df:7a:dc:1e:5e:17:4a:35:5c:4b:48:46:67:5a:
         3e:92:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:54:30 2026 by rpki-client