Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File:                     PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier:          WSktIL0xcoSs8ddT9LsMxn72paxjtVLq0GFmQN6JM9M=
Subject key identifier:   DE:69:91:09:FF:89:04:87:2E:4D:46:06:45:FC:45:83:53:6D:2F:65
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer:       /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial:       01A118CFE7B9E0B6C6F8564ED506E1088FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number:          06E5
Signing time:             Thu 08 Oct 2026 00:00:40 +0000
Manifest this update:     Thu 08 Oct 2026 00:00:40 +0000
Manifest next update:     Fri 09 Oct 2026 00:00:40 +0000
Files and hashes:         1: 4VO4JMCwvHV0sfUNLA59ac2Dg3Y.roa (hash: kJ9VYAuV//vjujGkSWMWi/e+PbUjjVkj9bRtxmow20o=)
                          2: PJqQOsiLgJpBTNtEIXIzADvxDUY.roa (hash: BexP3j7XfBxWmDzuyrg//sFpVDsAMkl0xxF/49mSdTQ=)
                          3: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: Jrl/L5KCAFqMwsQ86CfTmjrjUII2rcHeXFTXyHlLbKM=)
                          4: evCm5rnnAOY-4dGWkj8b6X_UN7k.roa (hash: 5OzvGj9KHpgSdi0IFk8ZcR4dW5jq9NgN8CVEH+7xmDk=)
                          5: ggNVICV3n79luwmtpqxkxLAB9-E.roa (hash: hehy8vJ2pMCobL1Ks6NMf8zuXtrrG4R7n74ZthFaYEQ=)
                          6: htlNfPXeOM_NDL0vMYFjvU5Mm-E.roa (hash: YFlq6LKizZ68CiU9V3egi4UmhmdAdZaBPdKX3CR59h8=)
                          7: jUmexGFaoOAw3tBMp-lAl_uGguM.roa (hash: H359l1rebuuO42B7kkI63dGIEaR0UjiEOl9VIPFGCCg=)
                          8: uj6_1RbcFYiy4iSbzHXMjMdTY8M.roa (hash: OVjAStpjdIoEMhnUSMUk0Ln55rKzOTzbc4j6hvTT0lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:cf:e7:b9:e0:b6:c6:f8:56:4e:d5:06:e1:08:8f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
        Validity
            Not Before: Oct  8 00:00:40 2026 GMT
            Not After : Oct  9 00:00:40 2026 GMT
        Subject: CN=de699109ff8904872e4d460645fc4583536d2f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:6b:18:13:b3:74:eb:14:35:f9:7f:e6:cd:
                    fc:6e:fc:5f:0b:d8:67:d0:7a:66:67:39:85:0e:f6:
                    21:ec:c8:09:1b:af:49:82:20:6d:6b:10:34:9a:12:
                    aa:cc:76:80:59:e9:19:56:6d:14:9a:3c:63:71:69:
                    d6:ae:c1:92:75:a6:91:40:4d:db:5d:ee:d2:6d:1c:
                    3d:bc:47:d0:f9:ef:d7:c9:62:f9:d5:6b:38:cc:f3:
                    3c:72:2f:b9:c6:91:eb:90:b9:da:36:55:b2:81:a6:
                    c9:2f:86:8e:a8:1b:70:c7:37:d2:9a:0c:b8:2f:7f:
                    f6:3c:ef:d3:ac:dd:61:bf:11:c5:76:8e:db:df:56:
                    49:f0:22:0c:22:83:3d:21:76:9e:f7:8c:91:47:c1:
                    78:7c:e8:c4:16:4c:b3:e2:05:8b:95:0a:c6:cf:42:
                    58:b3:a2:65:a1:7b:25:61:e0:b1:33:a5:c3:43:5b:
                    88:04:c5:b9:c5:82:c6:1a:a6:4c:7c:0e:e6:54:48:
                    6c:0e:b5:27:44:47:26:c5:f2:73:25:86:aa:08:5b:
                    5f:34:16:4d:73:b7:30:e8:7f:b4:f1:8e:4c:e8:c8:
                    15:ab:b3:5f:b1:99:5a:b2:9a:d8:89:99:23:ba:32:
                    2d:48:64:85:9d:12:e5:fe:55:43:a2:e3:49:6b:42:
                    30:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:69:91:09:FF:89:04:87:2E:4D:46:06:45:FC:45:83:53:6D:2F:65
            X509v3 Authority Key Identifier:
                keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:64:db:59:fe:e0:a8:9b:14:57:84:c1:15:08:3c:1d:c1:7a:
         c6:30:32:04:6f:17:18:38:1e:8a:b4:6e:1f:a3:9c:2f:b6:69:
         70:b1:46:65:d1:c9:fc:06:a3:ef:26:58:07:64:31:45:bf:d5:
         e8:90:e3:56:58:b7:72:7d:74:39:95:1a:7f:6c:c1:a2:6d:07:
         1c:12:33:d7:31:3c:c2:0f:c6:b0:5b:f2:40:3e:cf:ff:1c:96:
         b9:97:2b:59:28:35:bc:0f:3a:92:fb:de:33:6e:6e:16:b3:e7:
         2a:c4:17:a5:ba:7d:96:cc:e4:14:0a:92:6d:c3:98:c5:2e:e5:
         86:78:b9:3c:6d:cf:79:a9:bc:42:e5:8f:f2:85:22:d7:83:d8:
         05:ff:9c:3f:41:63:0a:ce:27:3e:e5:25:66:28:51:5a:f4:4b:
         86:9f:92:c3:37:bc:5e:67:b8:5c:ce:f6:ba:88:a2:34:7c:28:
         94:0e:3e:60:e5:20:26:0c:3e:97:27:6b:f1:52:3a:9f:fb:de:
         ed:0a:80:a2:cf:a7:c4:f7:14:33:22:dc:85:37:be:f2:65:21:
         45:d0:55:f1:e2:7a:25:4a:47:82:6b:94:1a:df:0d:c5:5a:73:
         1c:2d:3b:3e:5b:2f:82:cc:fb:aa:84:db:d9:51:a0:e0:a4:cd:
         5d:f1:55:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYz+e54LbG+FZO1QbhCI+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx
ZDlkNjQwHhcNMjYxMDA4MDAwMDQwWhcNMjYxMDA5MDAwMDQwWjAzMTEwLwYDVQQD
EyhkZTY5OTEwOWZmODkwNDg3MmU0ZDQ2MDY0NWZjNDU4MzUzNmQyZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7xrGBOzdOsUNfl/5s38bvxfC9hn
0HpmZzmFDvYh7MgJG69JgiBtaxA0mhKqzHaAWekZVm0UmjxjcWnWrsGSdaaRQE3b
Xe7SbRw9vEfQ+e/XyWL51Ws4zPM8ci+5xpHrkLnaNlWygabJL4aOqBtwxzfSmgy4
L3/2PO/TrN1hvxHFdo7b31ZJ8CIMIoM9IXae94yRR8F4fOjEFkyz4gWLlQrGz0JY
s6JloXslYeCxM6XDQ1uIBMW5xYLGGqZMfA7mVEhsDrUnREcmxfJzJYaqCFtfNBZN
c7cw6H+08Y5M6MgVq7NfsZlasprYiZkjujItSGSFnRLl/lVDouNJa0IwFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5pkQn/iQSHLk1GBkX8RYNTbS9lMB8GA1UdIwQY
MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut
NDIyNTIzYzRlNjhiLzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi
LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGTbWf7g
qJsUV4TBFQg8HcF6xjAyBG8XGDgeirRuH6OcL7ZpcLFGZdHJ/Aaj7yZYB2QxRb/V
6JDjVli3cn10OZUaf2zBom0HHBIz1zE8wg/GsFvyQD7P/xyWuZcrWSg1vA86kvve
M25uFrPnKsQXpbp9lszkFAqSbcOYxS7lhni5PG3Peam8QuWP8oUi14PYBf+cP0Fj
Cs4nPuUlZihRWvRLhp+Swze8Xme4XM72uoiiNHwolA4+YOUgJgw+lydr8VI6n/ve
7QqAos+nxPcUMyLchTe+8mUhRdBV8eJ6JUpHgmuUGt8NxVpzHC07Plsvgsz7qoTb
2VGg4KTNXfFVZg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:26:11 2026 by rpki-client