Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File:                     PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier:          FqtJGz0WoGmc50OWP7aMDiEgHCAF1BmTpqOOqVAuvgQ=
Subject key identifier:   46:91:30:48:E7:26:90:DA:3C:CA:A6:1A:E4:F3:28:C8:A2:F4:76:32
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer:       /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial:       019E1FEC5B8456EF470FCD30D17C5E8E0685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number:          098F
Signing time:             Wed 13 May 2026 06:00:44 +0000
Manifest this update:     Wed 13 May 2026 06:00:44 +0000
Manifest next update:     Thu 14 May 2026 06:00:44 +0000
Files and hashes:         1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: 7sfVc3ydoeIkyzV8LsJvvEbpP7/1U3c7PlRZoAaTxmI=)
                          2: SRouw1ACmOxsP7DYIDJnot7Wy0M.roa (hash: Axkim79AjMG7Hlgx6O/xdzgLE7UsB+oDhwA5WGJg0Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:5b:84:56:ef:47:0f:cd:30:d1:7c:5e:8e:06:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
        Validity
            Not Before: May 13 06:00:44 2026 GMT
            Not After : May 14 06:00:44 2026 GMT
        Subject: CN=46913048e72690da3ccaa61ae4f328c8a2f47632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:95:6d:b2:a7:df:83:d8:6f:dc:ff:26:6e:
                    24:27:89:ca:73:07:88:73:95:2e:ee:41:3d:9d:64:
                    d6:62:27:19:57:45:7b:4f:75:d2:73:38:be:93:33:
                    a1:6d:30:bd:7d:c1:71:8f:e8:27:94:77:71:98:3a:
                    23:db:db:fa:5b:a7:e7:55:ae:ea:6a:d3:2e:a7:cf:
                    da:d7:6d:1a:56:ec:b6:22:66:da:0e:74:64:c1:31:
                    41:86:0a:cd:75:6f:4b:c1:e0:fb:f4:17:35:46:b3:
                    31:74:7b:9f:e6:d3:82:89:ad:80:08:86:6c:33:14:
                    de:0b:6f:1c:d8:5f:76:82:0c:44:26:76:55:22:9c:
                    77:f5:e1:4f:88:2a:dc:d1:41:78:bf:ce:f4:d8:80:
                    be:26:0e:db:1d:62:9c:9c:d0:2a:b1:9a:76:c6:52:
                    19:45:86:cb:4a:ac:6e:83:8a:34:53:ad:6f:2b:f5:
                    53:2d:74:40:c4:33:23:18:ac:20:8e:8e:14:59:23:
                    a0:c2:72:62:e6:4f:a9:28:51:8b:e3:af:f3:0a:9f:
                    25:8d:bd:c3:0e:e3:72:14:47:89:84:6c:24:47:d9:
                    92:ca:6e:0e:7f:d5:26:34:99:53:02:1d:18:86:d6:
                    b4:72:10:b1:f6:b4:3c:5e:b7:29:b4:6a:2a:0f:e5:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:91:30:48:E7:26:90:DA:3C:CA:A6:1A:E4:F3:28:C8:A2:F4:76:32
            X509v3 Authority Key Identifier:
                keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:37:93:77:06:a0:5b:5e:37:14:10:92:a6:f2:37:c8:89:8a:
         65:a2:e3:bf:eb:1f:bd:9e:53:c5:76:73:d4:b2:40:70:90:67:
         81:8e:d3:e6:05:bb:d5:75:e1:68:be:df:5d:4a:ac:80:72:4f:
         52:5c:be:92:2e:be:59:db:69:e4:bd:2b:48:a3:87:28:4b:99:
         9e:e6:7a:ab:cf:c3:a6:8e:2d:2c:9f:f0:73:fb:a7:2a:7f:18:
         ca:63:f2:a2:e3:aa:c3:25:d6:87:6c:d6:5e:42:e7:e5:c2:00:
         cd:a8:a7:08:22:3e:d1:87:d1:26:a3:96:c0:bc:b2:f6:ea:70:
         bc:ef:f6:2b:87:21:b0:39:8f:7b:0a:96:5d:0a:11:f8:a1:e6:
         9a:35:be:ba:05:5a:0e:5d:8e:39:c2:21:63:1a:cb:88:a7:68:
         4b:de:2e:59:0b:73:24:22:34:a6:ab:4b:23:fb:87:0b:dc:bf:
         4e:50:de:ef:d5:59:9d:13:a6:ed:c1:9c:79:88:50:6e:10:47:
         10:b3:b5:f5:8b:cb:2c:df:cb:1e:b2:0e:cb:b1:59:72:28:2f:
         d7:e5:a7:67:80:54:21:34:05:13:0d:52:d0:74:38:12:ed:83:
         9c:75:55:5f:f5:04:62:0b:d6:19:03:dc:a9:e8:59:6e:79:fb:
         6c:23:f7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:57 2026 by rpki-client