Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
File:                     PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json)
Hash identifier:          I1sK3r4JuL+KqPxsnjKuoXb8uG0GHei6BiaLFGbnI9U=
Subject key identifier:   25:52:94:39:1E:C7:D0:54:F9:CF:85:9E:2D:73:B7:EE:82:E9:3C:3C
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Certificate issuer:       /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial:       01A03CA89EB02EC3815BF9CF75BAA55F0FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
Manifest number:          0A1F
Signing time:             Wed 26 Aug 2026 06:01:18 +0000
Manifest this update:     Wed 26 Aug 2026 06:01:18 +0000
Manifest next update:     Thu 27 Aug 2026 06:01:18 +0000
Files and hashes:         1: 0scV3UlCupRHGS6g1h-BrwrwEKU.roa (hash: pa6E5GUAG5mBRmb6nVG4qfg+RLPtEAD+EZ54AovucyE=)
                          2: 1jUxjKBP0ewbKykrBmXN2Uv7y2U.roa (hash: xE6sRa3DTTD5nNX1zDSktxn7FqcwqAPXm9HRxByDF/c=)
                          3: 71Ewp1n9Qo6F0iW_UrrQ0oIN3DU.roa (hash: R2PacJbb/HyRYwcfVm4XOQFUlae+hBB/iU+Z6f163zA=)
                          4: OKfVJiOZcBF7lwrejSVbnp-mJlM.roa (hash: Xi8UZye71hwHlDGIb4Ds6g7ARS6UAoAe2f0dvg0x25c=)
                          5: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: FrNvolxKgaGWMwBPG0HbXozwxz1pSfEjvWHCGatLMpY=)
                          6: rvrvO7khvGz4rJ3nZaxA_U0aIbY.roa (hash: kQhxnU+CRwoQ25mo4Up88vGMY8Gm4YSKOXHtcexGtww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3c:a8:9e:b0:2e:c3:81:5b:f9:cf:75:ba:a5:5f:0f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
        Validity
            Not Before: Aug 26 06:01:18 2026 GMT
            Not After : Aug 27 06:01:18 2026 GMT
        Subject: CN=255294391ec7d054f9cf859e2d73b7ee82e93c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:21:dc:51:f6:0a:36:b3:1f:ad:28:e3:2f:
                    5c:55:2b:d3:99:ce:1f:26:d9:02:25:23:27:2b:a6:
                    fe:94:d8:72:f6:9a:bf:80:a3:cb:0b:50:9d:39:90:
                    b9:48:f7:31:96:3a:37:9c:8c:07:28:33:0f:7a:79:
                    52:0d:9c:9c:0d:16:ec:a7:b9:d8:d6:10:0e:89:e4:
                    c5:e5:5c:81:c0:22:ea:0c:c4:7e:2b:dc:3b:9d:1f:
                    f5:3f:38:8d:a2:88:8e:4d:e7:0e:e2:24:3b:8d:59:
                    3a:53:6a:54:8d:6f:08:26:dd:5a:2b:6c:2c:a6:03:
                    e2:e1:a4:db:2a:7e:89:d7:ab:ab:1b:c3:bd:00:5b:
                    bc:de:03:7b:f4:72:22:62:05:ec:e2:90:f0:fd:c7:
                    b8:75:90:87:28:3f:78:ed:0f:28:88:5c:24:2d:50:
                    88:6b:f4:a8:33:5a:fe:e3:be:94:f8:c7:82:b1:5c:
                    39:2f:52:d6:f0:ef:8a:9f:f0:df:a9:dc:c2:97:5d:
                    6a:00:92:74:22:eb:38:5f:85:94:dd:79:b3:17:c1:
                    ec:05:6f:3b:15:f7:d2:21:31:83:27:33:0b:34:d1:
                    42:27:8f:92:35:76:5b:2e:28:41:bb:07:5f:6f:98:
                    08:91:f7:8e:84:d3:58:db:68:85:4d:93:9c:cc:39:
                    c0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:52:94:39:1E:C7:D0:54:F9:CF:85:9E:2D:73:B7:EE:82:E9:3C:3C
            X509v3 Authority Key Identifier:
                keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:35:1a:61:49:4b:35:af:98:d2:74:85:90:de:ba:8d:ed:41:
         a7:60:80:8f:ba:1f:2b:79:e7:8e:e5:4b:49:ec:ed:db:05:86:
         0a:4a:1b:42:94:80:3a:17:84:0e:36:3e:a1:9e:6b:7f:7f:e8:
         d1:2f:4b:d0:36:10:4b:15:6e:d2:bc:df:c3:43:3a:18:d1:34:
         eb:90:50:c4:47:86:a7:aa:f0:9a:e7:eb:28:04:a2:44:5e:ff:
         45:ab:b2:25:44:b4:84:55:40:91:a3:bd:37:23:21:89:56:0c:
         aa:06:08:bd:c2:54:9d:82:b8:06:fa:ad:16:da:50:40:87:27:
         b4:e3:16:b0:d5:21:3f:02:c1:99:06:f1:f2:fe:6b:a3:c5:0a:
         f0:39:1a:5a:2c:c1:88:bb:eb:15:2f:da:df:9d:6e:28:d4:c8:
         62:ba:ab:9f:10:71:c8:0c:a6:9a:6a:d8:ae:75:fd:96:8b:8a:
         83:e5:75:ad:c7:30:8e:56:6b:e4:88:e5:21:10:41:8b:22:39:
         18:82:ac:73:d6:6b:71:8f:fc:84:15:4c:6f:5d:f5:15:d9:de:
         35:92:9a:be:0e:8a:6c:1f:cf:f0:67:77:6c:c4:45:bd:b4:ed:
         8b:a2:63:5b:e7:22:4a:28:f2:57:89:cd:2c:65:4e:37:e6:e1:
         2f:35:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:08:39 2026 by rpki-client