Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File:                     pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier:          iIojj9C5YfuXgTb/saX981QFDZiYvnz4wVR2WcmYodo=
Subject key identifier:   E5:8F:DB:7B:75:EE:81:F1:38:CA:91:66:C4:F9:B6:EB:24:47:35:9A
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer:       /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial:       019E28B8BC83DC92537822F03A3F731CB9F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number:          10CE
Signing time:             Thu 14 May 2026 23:00:55 +0000
Manifest this update:     Thu 14 May 2026 23:00:55 +0000
Manifest next update:     Fri 15 May 2026 23:00:55 +0000
Files and hashes:         1: C0X3hB3u8LAMqfro5qGT2MbslXM.roa (hash: ONmV+DcOhO6LmIL71sUACRCSy2jq2kSbueB6GNTC6Cg=)
                          2: I9LHF-RZZYWSxcstDpnevIA6riE.roa (hash: vYLGIUfFYxCx7fMsQHhbZTUJyamMIn1ZfEPepnwBTW8=)
                          3: M_Pe4kPwufyP_7D5pkcCD9_LCdY.roa (hash: xe4YBSaFNrSAbOu74w58XW4Su4kogyqAQm6dN9suUj4=)
                          4: Wf1vbg1NiD5zD6wvsCtGoGVp8pM.asa (hash: GYIQ4Ob+P9w6WB9ban+5wDqvxTPLde9MDUHrhHDgOIc=)
                          5: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: D+lwxBJI89njJiQ4osFw4OY3ORzjEbKX1mKuNmLMkj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:b8:bc:83:dc:92:53:78:22:f0:3a:3f:73:1c:b9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
        Validity
            Not Before: May 14 23:00:55 2026 GMT
            Not After : May 15 23:00:55 2026 GMT
        Subject: CN=e58fdb7b75ee81f138ca9166c4f9b6eb2447359a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:06:fe:66:d4:0c:6b:02:c5:fc:25:14:61:
                    dc:67:fc:9e:f1:62:c5:81:94:0d:47:f4:31:7b:4f:
                    db:5f:75:33:a8:63:a4:08:05:0b:a1:56:af:39:76:
                    54:3b:7d:ff:ac:0e:4d:c6:25:fd:0a:6b:cb:ea:cf:
                    34:35:8c:7f:e1:aa:6a:e5:d1:25:f7:8d:0c:5c:78:
                    16:34:32:f1:5b:31:f6:c1:8f:36:34:36:d6:ff:b9:
                    1a:88:e4:d2:c8:bf:af:93:91:25:93:4e:ce:fc:19:
                    8c:29:1b:26:18:7c:e1:3d:fb:02:46:66:fb:be:29:
                    26:28:3b:f0:d5:c9:8e:95:63:c3:7e:b5:d4:75:64:
                    22:4b:28:c7:59:8f:c3:c1:ba:86:30:67:f9:41:1e:
                    89:8e:f7:ec:38:d4:54:fc:bb:c8:82:04:26:f2:42:
                    d3:4d:66:23:96:f6:17:71:63:80:9e:33:c8:86:8a:
                    64:5e:5f:fa:48:72:25:ac:b7:8e:9b:44:a7:a1:4b:
                    8b:ce:01:58:04:14:7f:d8:4d:8a:77:68:85:71:47:
                    5b:c2:4b:b9:02:af:dd:15:43:e8:7e:43:66:e1:89:
                    af:bc:c3:7b:b9:5e:08:e5:9b:fb:6f:35:18:00:0f:
                    28:d9:dc:bd:e2:3d:38:62:95:63:ae:3f:d5:79:81:
                    69:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8F:DB:7B:75:EE:81:F1:38:CA:91:66:C4:F9:B6:EB:24:47:35:9A
            X509v3 Authority Key Identifier:
                keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:36:b3:b1:6c:bb:b6:9b:00:64:79:39:35:42:ad:34:bd:4c:
         1d:df:7a:85:02:13:ab:92:fb:b5:72:aa:15:28:93:eb:3d:27:
         0f:88:63:bd:07:1c:da:71:e0:d3:e2:b7:49:46:93:5c:f2:91:
         b5:59:58:aa:40:a6:e7:59:f0:81:81:d1:31:fc:6d:36:c3:e2:
         00:15:55:cd:58:9b:5d:f9:6b:33:b8:26:70:41:ea:1f:bd:52:
         b7:b2:0d:5d:1a:2e:51:f5:bc:dc:6f:44:e3:bb:20:8f:83:f1:
         42:7b:87:40:4d:85:85:d6:0c:fa:6c:13:93:ff:32:29:af:16:
         13:4c:7e:ff:b2:c7:68:4c:80:6d:c1:9e:f5:da:e5:98:9a:8b:
         06:0f:42:a2:fa:15:d7:e2:3f:33:38:02:8d:c3:41:e1:2b:62:
         78:5c:25:fb:8e:ce:42:3d:03:f2:3d:93:75:c4:bb:a5:83:a3:
         e0:87:e5:d0:5c:25:db:7e:f0:cd:01:66:cc:70:fc:5f:cd:ae:
         e7:aa:0d:6e:7f:a5:51:5d:dd:12:55:12:57:78:d5:6b:64:6c:
         39:f4:99:cc:9a:df:83:6b:e3:24:ce:f8:97:ba:b3:eb:2a:84:
         5b:c9:63:c9:17:a5:16:f6:06:1b:a5:1a:87:b5:16:35:6f:a3:
         f8:c0:4d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:37 2026 by rpki-client