Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
File:                     PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json)
Hash identifier:          tJ/SDJFuvNW+P4wYpoeeWYdwTJwvSMv3B1Eyr04y/nM=
Subject key identifier:   2D:91:D1:1C:0B:BD:C5:D4:E7:D2:8A:BC:18:20:52:A0:65:21:E7:C0
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Certificate issuer:       /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial:       019D2A72A62C7A5D2066867C38AD058DA96E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
Manifest number:          189D
Signing time:             Thu 26 Mar 2026 14:00:49 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:49 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:49 +0000
Files and hashes:         1: 0M2CPdV7Xjvt7nrRqNi49Y_5Q0w.roa (hash: /s2MC65jvamRWE4E3LzZLmVB6N6rAH4buP8PZFgnBKc=)
                          2: 4bNlVON9xCdsARp_CZ5ll0ht23Q.roa (hash: r8pI01bxr501PmXiSeH2G+Xx+qveym+0Uqo3tM8jR6I=)
                          3: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: sMarX96Wv8rU7u6wFjz+HUUVHhc+qK/1ay6YjnDhQyQ=)
                          4: SRrECMJ3ZMD_TfSXLnYqpll22u4.roa (hash: qizHkZ1GpDS36mFIdR1OgqUp05JcTddRBFeSdEQ59Wg=)
                          5: hd00NiPZ1KbbE5ODb-CMk8sWFr4.roa (hash: ivJHfYiQfBFcxIzEkszt8mO2O17yh2Xq/VLRYE4MQxY=)
                          6: v39I0Zjco7iTKjESnYevB85gpxs.roa (hash: h5IwzouSq0u0o63m4FX0dLx1gQy0nggHUf/mhXSXzYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:a6:2c:7a:5d:20:66:86:7c:38:ad:05:8d:a9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
        Validity
            Not Before: Mar 26 14:00:49 2026 GMT
            Not After : Mar 27 14:00:49 2026 GMT
        Subject: CN=2d91d11c0bbdc5d4e7d28abc182052a06521e7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b1:8e:1e:e5:94:5e:b8:60:8a:7d:6c:a2:78:
                    78:33:78:d6:15:23:1b:07:22:7c:36:68:ab:e9:f6:
                    e2:3c:1e:2d:25:7b:ca:a7:42:15:ac:a5:10:bb:ec:
                    48:c3:60:a9:21:9b:54:42:15:1b:f2:5a:9c:86:b6:
                    28:86:2f:b5:3f:e1:6e:0a:f5:be:21:09:29:53:8d:
                    6a:9b:36:51:2e:bf:36:bd:f8:24:e6:62:f8:bc:5c:
                    5d:a1:e3:d3:77:55:fb:f0:67:97:8b:98:e7:26:bc:
                    93:8b:db:53:32:c5:90:fc:f9:63:ab:e5:20:74:7a:
                    30:44:70:86:6d:4e:8c:68:c0:b5:54:cd:dd:16:4e:
                    ef:3e:6f:b2:b0:71:e7:d8:3c:27:44:e3:d6:af:39:
                    0a:c3:a8:6f:55:74:f4:68:91:1a:15:d2:f3:35:40:
                    3e:33:21:06:d6:18:e2:12:9a:61:cb:0d:e5:b3:d5:
                    19:35:8d:f5:ee:5f:2a:bf:04:c6:df:ae:a0:03:97:
                    8f:71:88:64:62:9d:14:3a:49:3c:a3:31:aa:0f:24:
                    42:fc:63:80:ae:ee:42:05:f1:4a:99:fd:3f:5b:fc:
                    23:e7:c1:c5:5b:79:c2:0c:4d:b6:87:2e:b9:f1:59:
                    b2:73:e1:0e:98:2e:f7:c7:df:ce:7f:5b:39:af:08:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:91:D1:1C:0B:BD:C5:D4:E7:D2:8A:BC:18:20:52:A0:65:21:E7:C0
            X509v3 Authority Key Identifier:
                keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:a9:c5:3c:6a:f2:59:5d:6c:d8:ab:33:4d:5a:b6:0e:b4:
         a6:a3:84:c8:b7:6a:43:f7:cc:40:45:c7:4c:d7:ee:87:a6:b0:
         13:8e:af:0d:4a:cd:97:f9:07:74:d1:98:e5:aa:b8:6a:db:77:
         bf:aa:3d:e6:94:7d:e8:4a:f0:6a:0f:49:4b:b4:21:ce:b0:79:
         b2:a2:77:2a:d1:f7:ea:50:df:dc:fe:2b:bd:3d:d0:53:35:80:
         31:ec:3b:8b:f2:af:16:c5:50:f1:66:e7:30:d7:d8:c2:64:c2:
         4d:b1:45:16:d7:ca:1d:c8:64:2f:4f:94:08:5c:bf:cc:57:3f:
         3c:e6:bc:6b:80:18:42:a1:74:31:13:bb:66:e5:3f:2c:65:83:
         b6:f3:47:58:2c:e2:76:9b:79:5e:95:65:c8:95:de:a2:2c:77:
         47:49:02:0c:03:cb:71:76:b3:01:57:72:a0:d2:40:c2:99:10:
         e6:76:1f:e2:f1:38:6d:65:ea:93:3b:30:91:b2:92:51:3c:bb:
         c9:5c:a9:6e:e5:dd:68:61:9f:6f:80:d1:b5:45:3b:1c:0c:50:
         f8:ea:44:8a:47:9d:d8:c3:dd:82:5f:4d:af:52:cc:88:47:e3:
         0a:b2:d7:a2:d8:51:59:cc:b8:07:1f:95:11:04:12:67:07:65:
         d4:40:0f:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcqYsel0gZoZ8OK0FjaluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh
ZGY1OTgwHhcNMjYwMzI2MTQwMDQ5WhcNMjYwMzI3MTQwMDQ5WjAzMTEwLwYDVQQD
EygyZDkxZDExYzBiYmRjNWQ0ZTdkMjhhYmMxODIwNTJhMDY1MjFlN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rGOHuWUXrhgin1sonh4M3jWFSMb
ByJ8Nmir6fbiPB4tJXvKp0IVrKUQu+xIw2CpIZtUQhUb8lqchrYohi+1P+FuCvW+
IQkpU41qmzZRLr82vfgk5mL4vFxdoePTd1X78GeXi5jnJryTi9tTMsWQ/Pljq+Ug
dHowRHCGbU6MaMC1VM3dFk7vPm+ysHHn2DwnROPWrzkKw6hvVXT0aJEaFdLzNUA+
MyEG1hjiEpphyw3ls9UZNY317l8qvwTG366gA5ePcYhkYp0UOkk8ozGqDyRC/GOA
ru5CBfFKmf0/W/wj58HFW3nCDE22hy658Vmyc+EOmC73x9/Of1s5rwgKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2R0RwLvcXU59KKvBggUqBlIefAMB8GA1UdIwQY
MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt
YTkzODhmMzFiNDdlLzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl
LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQapxTxq
8lldbNirM01atg60pqOEyLdqQ/fMQEXHTNfuh6awE46vDUrNl/kHdNGY5aq4att3
v6o95pR96Erwag9JS7QhzrB5sqJ3KtH36lDf3P4rvT3QUzWAMew7i/KvFsVQ8Wbn
MNfYwmTCTbFFFtfKHchkL0+UCFy/zFc/POa8a4AYQqF0MRO7ZuU/LGWDtvNHWCzi
dpt5XpVlyJXeoix3R0kCDAPLcXazAVdyoNJAwpkQ5nYf4vE4bWXqkzswkbKSUTy7
yVypbuXdaGGfb4DRtUU7HAxQ+OpEiked2MPdgl9Nr1LMiEfjCrLXothRWcy4Bx+V
EQQSZwdl1EAPPg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:25 2026 by rpki-client