Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File:                     PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier:          ZUhB05/ESVSISjS5fYEf+uXqJInoc+tIvdUPTnLleeY=
Subject key identifier:   12:33:B0:92:3A:55:6D:D9:32:2B:71:A4:B8:FE:0B:E8:2B:F9:90:5E
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer:       /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial:       01A0B12C17C26C91B63C0D7BA858642ABE99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number:          057C
Signing time:             Thu 17 Sep 2026 21:00:51 +0000
Manifest this update:     Thu 17 Sep 2026 21:00:51 +0000
Manifest next update:     Fri 18 Sep 2026 21:00:51 +0000
Files and hashes:         1: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: rAC4KSjQNLQ3yEMwC/iysyue1OGPMaZOOw4szypDqYk=)
                          2: b06IK2jnqaGT2Aa6wapV_ItJbLk.roa (hash: evhqnMI6fxBMtq2kvZ+VYu5aDa3S4q8vrEyodEWm170=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b1:2c:17:c2:6c:91:b6:3c:0d:7b:a8:58:64:2a:be:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
        Validity
            Not Before: Sep 17 21:00:51 2026 GMT
            Not After : Sep 18 21:00:51 2026 GMT
        Subject: CN=1233b0923a556dd9322b71a4b8fe0be82bf9905e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:31:3a:b5:d4:89:96:57:7b:20:f9:5e:30:
                    42:b2:d1:32:d7:54:13:95:49:e7:b9:5c:79:cc:d2:
                    bc:bf:4f:13:ca:2c:bf:a9:f6:55:7a:55:02:27:ed:
                    ed:40:18:cf:1e:80:8c:7d:39:71:d4:9f:a7:40:88:
                    59:11:b2:e9:32:47:9f:c2:2d:14:c9:95:26:89:26:
                    c3:50:a7:81:87:39:1a:a2:56:17:23:2b:8a:22:e6:
                    2c:26:2a:18:21:3c:51:8d:08:65:26:c3:d1:3a:fa:
                    ab:7a:cf:10:95:ff:68:be:70:c3:65:2e:ab:8a:48:
                    14:de:96:81:cb:d3:14:b4:91:b6:bc:98:54:74:86:
                    89:18:a8:cd:64:bd:d4:fd:99:f1:46:5e:17:fc:77:
                    aa:5c:fb:21:4c:13:b3:d7:13:90:fd:a0:3f:d6:60:
                    eb:bd:15:a7:7c:35:6c:54:64:1b:21:a5:30:e7:28:
                    75:4e:35:5f:22:13:e1:93:d9:26:48:4d:73:7b:96:
                    05:96:8a:17:c8:ab:ad:33:bd:5e:43:38:c0:f1:ea:
                    d4:8c:bd:ab:a2:76:6e:ff:2c:1e:0b:15:e3:5b:3f:
                    d8:f6:55:6d:6a:d7:fd:32:20:f0:b9:99:e4:cb:1b:
                    0e:9c:18:6f:cf:21:01:52:e6:77:b0:72:eb:01:c4:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:33:B0:92:3A:55:6D:D9:32:2B:71:A4:B8:FE:0B:E8:2B:F9:90:5E
            X509v3 Authority Key Identifier:
                keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a2:69:21:d4:d0:bf:5d:17:7e:e7:85:ee:8e:9a:16:6f:43:
         c1:f6:0f:8f:28:6f:4c:d4:b5:60:34:59:b0:66:bd:bd:94:19:
         ee:3c:9c:8e:17:fc:c2:59:9d:5e:28:cc:90:e4:1f:61:bc:89:
         64:01:79:23:e3:3e:27:6a:2a:08:04:8c:82:6a:fa:cd:93:3d:
         6b:b4:7a:20:50:96:e7:1c:36:32:10:52:45:a0:4b:a4:19:78:
         f5:23:c2:8d:41:78:64:d2:41:f5:6e:01:69:7d:21:e5:c7:0a:
         ca:29:25:c8:a6:09:86:8f:7c:35:55:9a:22:e0:c2:1c:db:39:
         ce:04:4f:8d:4a:e3:fc:3c:c1:4c:07:a4:57:f6:a9:39:7e:fd:
         7a:69:1f:ee:31:27:79:45:12:0b:15:e9:2d:f3:06:64:9e:e7:
         ef:9e:8b:6c:b2:0f:e1:89:84:0c:2b:79:9e:f3:c1:6a:2c:de:
         ff:c3:ca:84:0e:51:0a:d7:ff:11:89:6c:f5:75:82:bf:b3:37:
         df:98:1d:a7:27:d9:bf:d2:58:ef:94:27:f8:89:59:5d:47:6e:
         53:c9:1b:23:eb:f9:67:fe:f2:bd:5f:7c:6b:06:d8:3d:6c:c7:
         e4:2d:fb:ee:71:3a:92:7a:43:f4:b9:f7:6e:93:7e:2e:09:cc:
         59:79:11:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCxLBfCbJG2PA17qFhkKr6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZDI0ZTA4YzU3NjA3Y2FlYmNjMTljODU1MmVhZTJlOTM1
ZTgyZTUwHhcNMjYwOTE3MjEwMDUxWhcNMjYwOTE4MjEwMDUxWjAzMTEwLwYDVQQD
EygxMjMzYjA5MjNhNTU2ZGQ5MzIyYjcxYTRiOGZlMGJlODJiZjk5MDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUgxOrXUiZZXeyD5XjBCstEy11QT
lUnnuVx5zNK8v08Tyiy/qfZVelUCJ+3tQBjPHoCMfTlx1J+nQIhZEbLpMkefwi0U
yZUmiSbDUKeBhzkaolYXIyuKIuYsJioYITxRjQhlJsPROvqres8Qlf9ovnDDZS6r
ikgU3paBy9MUtJG2vJhUdIaJGKjNZL3U/ZnxRl4X/HeqXPshTBOz1xOQ/aA/1mDr
vRWnfDVsVGQbIaUw5yh1TjVfIhPhk9kmSE1ze5YFlooXyKutM71eQzjA8erUjL2r
onZu/yweCxXjWz/Y9lVtatf9MiDwuZnkyxsOnBhvzyEBUuZ3sHLrAcQ+JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIzsJI6VW3ZMitxpLj+C+gr+ZBeMB8GA1UdIwQY
MBaAFDzSTgjFdgfK68wZyFUuri6TXoLlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wODRmNzUtZDAwZS00M2M1LWJjYTgt
MzZmZDcyM2EzODBhLzEvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wODRmNzUtZDAwZS00M2M1LWJjYTgtMzZmZDcyM2EzODBh
LzEvUE5KT0NNVjJCOHJyekJuSVZTNnVMcE5lZ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6JpIdTQ
v10XfueF7o6aFm9DwfYPjyhvTNS1YDRZsGa9vZQZ7jycjhf8wlmdXijMkOQfYbyJ
ZAF5I+M+J2oqCASMgmr6zZM9a7R6IFCW5xw2MhBSRaBLpBl49SPCjUF4ZNJB9W4B
aX0h5ccKyiklyKYJho98NVWaIuDCHNs5zgRPjUrj/DzBTAekV/apOX79emkf7jEn
eUUSCxXpLfMGZJ7n756LbLIP4YmEDCt5nvPBaize/8PKhA5RCtf/EYls9XWCv7M3
35gdpyfZv9JY75Qn+IlZXUduU8kbI+v5Z/7yvV98awbYPWzH5C377nE6knpD9Ln3
bpN+LgnMWXkR1w==
-----END CERTIFICATE-----
Generated at Fri Sep 18 05:01:24 2026 by rpki-client