Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
File:                     pPC-25eOGSjR6XDKLtlpNxGP_2g.mft (raw, json)
Hash identifier:          Oca6Knx5r49RCP1jVb1smYDlUYNCgXiBq/jz21eAguU=
Subject key identifier:   57:68:24:5F:24:54:27:F6:DF:B0:C3:A6:CF:84:2D:3E:C4:3F:BF:83
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Certificate issuer:       /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial:       019D2772DCCEB8812E9B1B7107422E46AE0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
Manifest number:          1208
Signing time:             Thu 26 Mar 2026 00:02:12 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:12 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:12 +0000
Files and hashes:         1: i0Opx7elnQLrytJFk1gVJFatVmw.roa (hash: NjWTI7Ls1hzUuifszjZ9jtLVnxuLMN8Y2bX/MbcavFE=)
                          2: pPC-25eOGSjR6XDKLtlpNxGP_2g.crl (hash: rF0Ex0MZx9SLUzXC5KDOwYw9Fyx4bTj7y7Sa6raya0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:dc:ce:b8:81:2e:9b:1b:71:07:42:2e:46:ae:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
        Validity
            Not Before: Mar 26 00:02:12 2026 GMT
            Not After : Mar 27 00:02:12 2026 GMT
        Subject: CN=5768245f245427f6dfb0c3a6cf842d3ec43fbf83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:83:87:14:36:25:16:bc:00:8b:46:5f:57:
                    9e:61:43:c5:0f:16:54:12:01:e8:4c:67:0b:b1:fb:
                    f1:a4:1e:80:df:bd:31:e0:8e:a6:14:2e:a7:bd:79:
                    20:e9:cc:3e:7d:19:bd:86:a0:00:20:84:a1:fe:0e:
                    fc:5b:3b:81:89:ed:ae:7d:1a:0a:0d:4a:36:86:fd:
                    c6:1f:35:60:2d:38:9a:01:ec:a8:78:e0:aa:5a:18:
                    7a:e5:71:43:b2:6b:1b:b0:51:2b:81:b8:32:a5:f2:
                    3b:40:b6:3c:33:7a:5d:5d:5c:9f:29:e8:b9:48:bb:
                    41:88:18:0e:02:79:8d:6b:b8:e9:e6:56:5d:a6:9b:
                    81:b2:b2:72:36:18:b8:3f:87:b9:2c:0e:e3:b6:37:
                    f5:fa:5f:fc:d1:eb:75:70:3f:32:f3:e5:cb:6f:cf:
                    a0:7a:26:61:54:de:e7:2b:5d:cd:f7:de:8b:14:c0:
                    09:1a:42:ed:53:f7:ea:67:3d:42:a6:15:99:7a:95:
                    09:a1:2a:3c:f5:51:be:d4:e2:05:07:8c:cf:2c:34:
                    fe:17:48:63:bd:f2:84:5b:6a:4b:25:15:23:73:20:
                    37:f0:28:a6:e2:34:32:c2:b4:0d:8c:08:48:94:99:
                    f1:de:cb:ce:6d:6c:2f:17:00:7f:1d:ff:13:7a:ba:
                    51:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:68:24:5F:24:54:27:F6:DF:B0:C3:A6:CF:84:2D:3E:C4:3F:BF:83
            X509v3 Authority Key Identifier:
                keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:e8:fc:e4:1a:14:5a:aa:a8:41:62:b6:7b:27:36:aa:9c:
         af:af:49:ee:87:c6:0f:64:d7:d8:4a:1f:47:80:fe:8e:91:f2:
         7e:ac:eb:d2:cd:2c:96:1c:af:f2:45:04:fc:3f:6d:20:05:89:
         a9:00:d1:4f:5e:86:50:21:40:58:c9:9c:2e:52:35:36:c7:9f:
         26:88:82:84:5a:b2:3e:75:96:63:d0:f9:34:d7:30:d7:4c:36:
         1d:25:21:f6:ed:5a:55:a3:70:48:9f:7d:d9:43:ea:5f:b2:73:
         fc:ff:d6:eb:66:96:57:9e:31:ca:82:88:43:02:88:54:ce:5b:
         78:7e:0c:c3:34:a5:8e:ae:66:06:02:ec:6a:a8:fe:f1:0b:bb:
         06:8c:43:ad:df:ab:70:e2:3f:62:93:ce:68:97:c0:1e:57:ed:
         e5:d4:5c:51:ca:21:3e:a8:5e:df:3e:24:e7:ff:f8:ee:13:2a:
         a7:01:68:12:1f:37:f9:14:05:f0:f5:6f:e3:a6:be:e3:d9:76:
         d3:0a:30:5b:d5:22:6d:9a:39:e7:12:07:d1:c6:ed:41:78:b7:
         e8:c8:71:98:9f:ef:e9:64:c6:c7:af:f1:03:b5:89:f4:61:70:
         ed:d9:a4:8d:e7:f1:35:ab:53:9f:c4:1b:b0:a5:dc:40:9b:43:
         c4:0c:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:38:24 2026 by rpki-client