Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
File:                     PFEOIbocnWAFiRMCVaNpKPHI8js.mft (raw, json)
Hash identifier:          8sHzp9AoI7CC0FpgPjZHzP7Zve5klrjf7caeeAnx/BM=
Subject key identifier:   82:01:4B:A6:21:28:16:2C:EA:1D:A7:04:3A:D6:8B:D1:10:07:B5:13
Authority key identifier: 3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
Certificate issuer:       /CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Certificate serial:       019F935AC4971877F00B916AB6B393588CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:27 +0000
Files and hashes:         1: 0vMwcO-prVCBiJ1HH4N8JQBbTFg.roa (hash: DDQIEVV7Bq568hIRJt4vCWeNTR0mribCMhLMaet0/Xs=)
                          2: FX65EUsBfwC3KYo7_xOGFuEzOJk.roa (hash: KHm9K/+5wb0bpzl81mZXqyHKMzk0Qwhwf/+PXfXSvuY=)
                          3: J_NAqgVioUH73xW524wNxtH7C6E.roa (hash: tIH8jdWye/GvM9gQvJIJ7V27p73rrL92FZ33H+k5YoQ=)
                          4: OHMkQc20XLUuhWG9TR6YUIfUeNQ.roa (hash: Q/okgqIrrRu57dOM1pUZVReELn18xaaSWaDkfsqY+zY=)
                          5: PFEOIbocnWAFiRMCVaNpKPHI8js.crl (hash: dDknF1+PKxE/3U32OwSGCEEPYmlVrCm5ZB4NE7zPtWM=)
                          6: b4ljpqvJJ99yhvWp5OXK-V_rwA4.roa (hash: uWVsOUuJFYO4g8DznA/hJUwAXuQNluCi4DapHS7DI2c=)
                          7: u17kqdLSyyJq5U0Zxqr0EXjDmmI.roa (hash: MsgYyS7H7F1Fay5YAf1h7SpoZxvLFnXiACTNhjQnhyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:c4:97:18:77:f0:0b:91:6a:b6:b3:93:58:8c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c510e21ba1c9d600589130255a36928f1c8f23b
        Validity
            Not Before: Jul 24 09:00:27 2026 GMT
            Not After : Jul 25 09:00:27 2026 GMT
        Subject: CN=82014ba62128162cea1da7043ad68bd11007b513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:60:fd:66:d0:8c:6e:c0:48:22:bb:e4:25:
                    b0:bb:ae:9d:75:0c:cf:e6:2a:79:a8:0f:95:24:66:
                    f5:12:fe:c2:f4:f1:5b:7d:e7:73:58:7b:3f:c6:90:
                    2e:22:ac:7c:44:8f:7f:56:c9:6c:81:8e:14:6b:2f:
                    15:d7:7a:7d:42:3d:d3:24:f5:fd:79:44:6a:c8:28:
                    8f:5f:c2:05:42:49:2c:41:0b:6b:7e:76:30:5b:4e:
                    cf:08:f1:86:5f:88:a5:a7:fe:4f:33:e5:e0:76:92:
                    ee:8e:f5:f6:c4:34:b4:55:7b:0e:b4:4e:7c:93:fe:
                    7e:f0:c6:eb:b3:d4:23:5a:0a:4c:58:e5:eb:d1:8c:
                    7b:15:28:79:33:9f:99:ab:e0:c0:96:38:8e:16:80:
                    9d:40:dc:f4:ed:d2:ec:4a:07:1f:b5:44:54:32:2a:
                    27:c0:80:e4:2c:17:ff:ce:88:9d:05:55:ab:5b:11:
                    50:6b:96:75:c7:23:9b:2f:98:4e:7d:bb:52:7e:0a:
                    b1:9c:44:a2:84:d9:cc:7d:77:0c:d3:09:6e:e0:5b:
                    48:72:00:65:bb:a4:d9:27:ca:7b:57:23:ef:a4:52:
                    25:e0:00:87:0c:0e:0a:93:e8:88:00:be:31:44:e5:
                    1a:b8:3e:5a:cc:f1:9f:55:ee:fa:6d:c7:2a:68:e8:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:01:4B:A6:21:28:16:2C:EA:1D:A7:04:3A:D6:8B:D1:10:07:B5:13
            X509v3 Authority Key Identifier:
                keyid:3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:86:0b:9b:df:d9:9d:c2:b9:d7:10:90:c0:82:1f:94:36:17:
         39:9d:01:62:79:23:60:d6:f2:84:c1:33:3f:fe:47:c8:6a:8e:
         53:88:e9:6d:7a:b5:09:40:4e:a9:fb:a0:d3:69:dc:cd:81:ef:
         a4:20:77:9a:d4:d9:a6:88:b1:21:08:c1:75:ef:74:d5:ea:ca:
         77:95:89:82:d3:af:25:4a:a8:c1:11:be:b9:d3:fa:7d:78:1a:
         51:42:aa:8f:25:16:ef:24:dc:81:16:1c:1a:be:dc:df:36:6d:
         64:4e:1b:44:e3:e7:dd:9f:7a:4e:b6:61:05:16:e3:65:6b:c0:
         64:27:37:fa:71:a9:18:e5:8a:19:fd:0e:ee:c7:a7:bf:6d:88:
         de:d0:3d:06:91:95:04:b2:46:ad:2d:09:04:04:fc:39:e2:b7:
         0a:af:eb:c5:c7:df:ce:a8:be:47:2d:9f:dc:5b:d7:a6:01:70:
         36:42:09:12:f1:0b:17:24:8e:6c:cc:14:fb:f7:ac:45:b3:f6:
         11:db:36:85:5b:1f:54:8a:c4:f6:9a:10:8d:66:1d:06:fe:dc:
         63:84:aa:55:c3:b2:00:23:d6:13:f2:0b:63:ec:ac:25:f1:01:
         ce:6d:08:ea:f5:fc:4c:d3:33:82:53:91:d0:ef:1e:5c:0c:ee:
         91:26:c9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:44 2026 by rpki-client