Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
File:                     PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json)
Hash identifier:          5zfciACOG758seb4h4PTTc1J543z1qHOvJZguTnUaWo=
Subject key identifier:   DA:9E:29:A0:71:1C:DF:40:D7:2F:75:8B:64:CD:79:88:A7:52:FF:30
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Certificate issuer:       /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial:       019F1152DF0C0733EFDCE45F2B4B2ECB81C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
Manifest number:          0984
Signing time:             Mon 29 Jun 2026 03:01:11 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:11 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:11 +0000
Files and hashes:         1: 0scV3UlCupRHGS6g1h-BrwrwEKU.roa (hash: pa6E5GUAG5mBRmb6nVG4qfg+RLPtEAD+EZ54AovucyE=)
                          2: 1jUxjKBP0ewbKykrBmXN2Uv7y2U.roa (hash: xE6sRa3DTTD5nNX1zDSktxn7FqcwqAPXm9HRxByDF/c=)
                          3: 71Ewp1n9Qo6F0iW_UrrQ0oIN3DU.roa (hash: R2PacJbb/HyRYwcfVm4XOQFUlae+hBB/iU+Z6f163zA=)
                          4: OKfVJiOZcBF7lwrejSVbnp-mJlM.roa (hash: Xi8UZye71hwHlDGIb4Ds6g7ARS6UAoAe2f0dvg0x25c=)
                          5: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: NfE4fA2hxFDLXHLLbAxAE8m0/mWw7y2y5ycfJMm0R1w=)
                          6: rvrvO7khvGz4rJ3nZaxA_U0aIbY.roa (hash: kQhxnU+CRwoQ25mo4Up88vGMY8Gm4YSKOXHtcexGtww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:52:df:0c:07:33:ef:dc:e4:5f:2b:4b:2e:cb:81:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
        Validity
            Not Before: Jun 29 03:01:11 2026 GMT
            Not After : Jun 30 03:01:11 2026 GMT
        Subject: CN=da9e29a0711cdf40d72f758b64cd7988a752ff30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:f2:0a:9b:c5:8b:23:6b:1c:67:30:19:92:
                    e1:87:04:4c:9f:b4:ca:e0:d5:8e:d5:7e:a3:20:45:
                    5f:ab:ef:f1:f4:81:0e:94:ea:56:b9:b9:d7:26:c1:
                    23:6c:b5:d0:50:29:e6:3e:bc:d5:d1:49:7e:5d:1e:
                    67:e8:88:63:a0:4d:58:09:ca:71:e0:88:56:1e:a4:
                    cf:c8:62:fe:f7:79:fa:0a:70:76:ae:b5:fe:f6:1b:
                    66:4f:bb:00:2f:0b:a7:bc:c0:93:8e:9d:f0:47:e5:
                    b7:83:1b:19:4b:7c:92:6e:4d:b2:0f:8f:d5:21:e2:
                    f9:e9:dc:88:01:7d:ef:3d:34:78:f5:76:71:4f:a7:
                    9c:40:43:5b:7b:ce:00:fb:9d:b7:b7:98:1c:82:37:
                    ee:0b:cd:06:83:1e:84:7d:1d:13:d0:8c:a5:8f:3c:
                    4f:b3:39:90:95:8d:95:46:d3:93:27:fe:0d:36:62:
                    a0:e4:de:9c:b4:e4:40:da:aa:45:5d:8f:6c:e9:42:
                    2c:ae:1f:85:73:79:c6:53:28:f4:ac:23:26:d5:cc:
                    47:e0:32:e7:f7:f7:eb:18:1e:01:b6:c6:15:ce:9b:
                    51:86:4b:e4:ad:96:ad:4b:d0:27:49:dd:ab:1a:1a:
                    89:eb:d5:a3:c8:23:ee:75:ab:43:6d:4b:a4:dc:c6:
                    d3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9E:29:A0:71:1C:DF:40:D7:2F:75:8B:64:CD:79:88:A7:52:FF:30
            X509v3 Authority Key Identifier:
                keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:84:34:24:c6:01:52:df:58:75:b9:64:41:03:cf:c7:58:cc:
         53:c4:2c:9f:86:32:bb:f8:30:fc:20:cd:ca:57:88:49:de:7e:
         06:01:08:c5:5f:ad:62:bb:e5:0e:26:6c:0a:05:b3:a9:80:9c:
         48:26:52:c2:6e:ba:b9:bd:7a:f6:7b:8b:23:fc:d8:a8:6a:53:
         18:cb:76:dd:66:86:35:67:48:39:0b:7a:24:a2:f2:0f:8b:99:
         bc:d8:0a:39:a1:f3:09:fb:dc:45:a4:0e:5e:78:fe:cb:a3:9b:
         ee:aa:2a:7f:66:80:0e:e3:81:1b:1b:ae:a3:6d:36:09:27:80:
         6a:b2:e6:d3:b7:0c:be:7c:3b:3c:b9:17:2b:e5:0c:cb:2f:1c:
         77:4c:22:0b:7b:d0:bb:3a:3b:ca:17:ef:30:ca:96:4f:3b:21:
         11:bd:51:a8:c3:fd:73:1a:87:6d:a4:f6:e3:aa:ef:30:9e:8a:
         da:f0:b4:e5:19:64:51:7a:0b:b6:d9:61:2a:6b:19:62:f4:7f:
         b9:72:af:0b:60:67:1f:b8:f3:57:b8:8d:84:86:d5:bd:b9:53:
         8a:52:77:ce:36:dc:54:4a:1f:a4:19:89:af:e7:6d:0d:3a:34:
         2d:46:4d:8b:4d:2f:0a:92:e8:7c:a1:cd:c0:34:88:86:f3:e8:
         65:41:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:34:14 2026 by rpki-client