Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
File:                     psCc_RV4gUqM0dgdyGyJD9X6hmE.mft (raw, json)
Hash identifier:          k/FUxJ2KplCT3f6Viu4rAMLoDMdq3HKSJRX+Jiolj9U=
Subject key identifier:   18:AE:1F:65:B6:AF:5E:8E:1B:AD:85:38:5A:AE:0D:89:E5:58:7C:09
Authority key identifier: A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61
Certificate issuer:       /CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
Certificate serial:       01A1DEA7868C923692D66121C4F5387F4E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
Manifest number:          0DCA
Signing time:             Sun 15 Nov 2026 10:01:23 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:23 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:23 +0000
Files and hashes:         1: DfxAOUp-rDNO_5WQQSqKIvCmaLc.roa (hash: 7HglMns9O/wggFmKJ6yj/+eh0kL/gxgtz4sDIU/w2wg=)
                          2: ffX3VsckZLc4-RcWXfaxE7WOdc0.roa (hash: gI5X7EBuAWJm9swpecj8XXe2ZApaNA07hJoO/xei8RE=)
                          3: hz7lj2eZQUoABeI9x4fVkCFHdyQ.roa (hash: xUeXDDyBDFWaWumwKndxvSVmNo5fikQ4qnOyoheblN0=)
                          4: psCc_RV4gUqM0dgdyGyJD9X6hmE.crl (hash: zQr8e8bUgDBrYjKncL/LYom/DBLtSrqttlvpMwr970U=)
                          5: yXIuz2r0HYRszCngCfGufOSDzZ4.roa (hash: T/tuU4P0COLsvy6rNb8d4mecjKkzZxnFo2OajUbzoUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:86:8c:92:36:92:d6:61:21:c4:f5:38:7f:4e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
        Validity
            Not Before: Nov 15 10:01:23 2026 GMT
            Not After : Nov 16 10:01:23 2026 GMT
        Subject: CN=18ae1f65b6af5e8e1bad85385aae0d89e5587c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:06:fb:8b:18:4c:e6:90:2f:61:8b:6d:d4:
                    37:27:3b:ed:41:e6:68:6c:1d:da:cd:45:1b:0b:81:
                    fe:ed:bc:44:7c:77:fe:23:2b:74:00:aa:89:a1:a5:
                    6b:33:40:b8:53:84:1d:ea:7b:77:66:fc:93:07:53:
                    7f:df:fc:d5:c7:ae:44:0b:d3:1d:df:8c:82:2f:d9:
                    c6:f5:fe:5b:6e:01:3c:c6:ba:01:45:f8:be:7f:c4:
                    78:61:85:4b:58:d4:e3:e6:0a:43:6e:3a:db:1c:32:
                    d7:40:cc:15:8f:8c:3b:8c:21:44:e9:d0:09:2d:7f:
                    b3:6d:fe:71:18:22:5b:9d:a1:e7:9f:e1:d0:48:1b:
                    41:21:14:d1:8a:ef:82:74:bc:6e:dd:6d:02:2c:50:
                    7c:3c:be:85:ea:48:97:7c:3a:a8:f9:62:b8:62:b5:
                    9b:ec:0a:b3:a0:cd:56:99:d3:6b:21:ea:e5:6c:ff:
                    c6:b9:c9:0a:76:88:1c:c5:a5:9d:ea:e4:b4:4c:cd:
                    db:8a:53:ef:d3:b2:10:78:76:c6:b5:48:2d:14:0a:
                    72:c9:2a:f2:11:e5:30:7b:af:51:ea:e1:e7:76:9c:
                    ea:ae:69:95:60:41:f5:12:bc:7f:bc:d8:70:19:a3:
                    a5:18:97:10:46:d1:dc:05:2b:37:6f:a2:3b:c8:2c:
                    3a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:1F:65:B6:AF:5E:8E:1B:AD:85:38:5A:AE:0D:89:E5:58:7C:09
            X509v3 Authority Key Identifier:
                keyid:A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:60:51:05:f7:52:1c:78:5c:72:e7:f6:e0:dd:6a:af:68:da:
         da:22:c4:64:24:6f:d8:6a:4a:8f:73:79:04:21:e3:f7:2b:03:
         2c:63:04:cc:ba:07:d6:92:59:44:aa:e2:13:79:8a:9b:38:de:
         4a:5e:b9:55:20:5d:b5:aa:43:32:53:ee:d5:00:32:88:c2:e8:
         22:b3:87:39:1d:fd:e9:02:83:3c:8e:24:02:ba:f4:2b:c9:1a:
         d8:0a:14:7e:b5:a6:c3:3b:34:9b:a7:b0:08:65:aa:45:73:c6:
         9a:d2:5e:e3:a8:4f:8d:5f:85:85:75:dd:f2:16:a7:ed:34:f1:
         a8:e9:3a:34:85:b6:89:be:2f:fb:ae:e2:f6:51:3a:5d:a5:c8:
         5b:02:86:34:e7:0b:ac:8e:f8:57:d1:0e:bc:38:77:68:dc:a4:
         8c:39:59:08:ed:34:70:8e:0d:e5:e6:0f:c3:e9:95:52:26:06:
         93:95:6d:b4:2a:7b:d2:ed:69:4b:08:13:1c:5a:26:f6:73:33:
         b6:01:19:e3:4b:8b:23:86:00:c2:1f:b5:c3:03:10:5d:1c:55:
         e2:8b:32:a7:2e:db:6d:37:99:dd:15:ce:12:1a:66:26:67:0f:
         21:43:b5:b9:12:69:ad:cd:75:96:62:81:b0:e7:1e:b3:ae:5b:
         88:56:72:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:04:19 2026 by rpki-client