Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File:                     PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier:          Gz+mpRMcdhIGyaWBD2Y7mGo7SsMXIE8SqP1lHbbdpMU=
Subject key identifier:   50:5F:E3:AF:16:73:CB:3C:23:4F:62:18:19:98:32:07:B8:17:25:19
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer:       /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial:       01A113E12C6BD0475AC0E6614E2FF42C60E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number:          075F
Signing time:             Wed 07 Oct 2026 01:01:26 +0000
Manifest this update:     Wed 07 Oct 2026 01:01:26 +0000
Manifest next update:     Thu 08 Oct 2026 01:01:26 +0000
Files and hashes:         1: Kn6pNMJ21QdhHsuAl8WLfOPOkgw.roa (hash: LKs9IYE65ZsbkD0HX6Uw0NvXdkd8X9uC3RZE4DqImaU=)
                          2: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: /NmNN2gREcLU/wpqB9qk9tN4fkmIc2lC3aX1FO9CVmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:e1:2c:6b:d0:47:5a:c0:e6:61:4e:2f:f4:2c:60:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
        Validity
            Not Before: Oct  7 01:01:26 2026 GMT
            Not After : Oct  8 01:01:26 2026 GMT
        Subject: CN=505fe3af1673cb3c234f621819983207b8172519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:73:f8:ad:61:2c:9e:f5:e8:34:50:17:06:
                    e3:7b:09:bc:d5:a9:d4:1b:d1:a1:a6:4a:cf:b4:27:
                    56:1a:f4:d5:46:32:81:58:d4:6f:59:59:9b:00:84:
                    68:4e:44:a2:ab:c9:1e:c4:5a:7e:d5:38:c3:01:27:
                    f4:77:7f:aa:28:cc:ff:e8:31:ca:c8:19:7c:2e:45:
                    d7:ba:85:46:63:93:3b:c4:be:1b:c3:45:5e:82:72:
                    12:2b:f3:db:96:7d:ac:72:db:0a:3d:c5:19:d4:1c:
                    82:6b:ba:9d:88:b2:7f:36:e0:4b:cb:05:3c:02:1f:
                    92:ad:82:77:3f:86:25:5d:62:a7:73:ec:ed:82:5c:
                    b9:d2:db:02:8c:9e:36:ed:49:d2:c5:7e:fb:54:be:
                    e0:41:a9:cc:31:be:72:42:47:71:3e:c6:80:c3:46:
                    f8:22:30:ef:14:8b:be:32:db:0d:d4:b0:0c:0b:15:
                    dd:b5:22:a8:f5:11:ee:9e:79:62:1e:60:48:c4:50:
                    1e:d7:e5:40:bf:cf:03:63:70:73:7e:30:1b:2a:5f:
                    86:bd:4e:d6:a7:58:a8:4a:8e:6d:c2:91:9a:dd:8c:
                    71:13:8e:08:9d:61:f5:7f:72:e5:3e:82:4e:0c:d5:
                    5e:09:40:fb:a7:c8:ef:01:d8:77:1f:e5:e2:24:ba:
                    5a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5F:E3:AF:16:73:CB:3C:23:4F:62:18:19:98:32:07:B8:17:25:19
            X509v3 Authority Key Identifier:
                keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8d:b4:7f:a9:f4:31:30:24:53:2a:f6:f9:24:69:e6:28:a3:
         88:79:4d:e2:67:03:97:b1:d2:29:bb:3a:fa:03:93:f2:45:4c:
         9a:a6:79:0d:92:2e:01:67:da:55:5c:39:96:2e:8b:91:c7:4a:
         61:2b:1b:f8:5c:90:77:cf:28:4a:2e:76:da:59:b0:4c:51:c7:
         3a:7d:f3:4c:83:d2:59:4c:5a:58:98:26:ff:60:de:75:8e:28:
         d7:ae:08:11:92:c7:78:af:12:28:71:33:38:c2:a5:07:79:a9:
         37:aa:91:af:d4:ce:f7:6d:ee:79:a6:e2:31:8b:e9:3c:51:3c:
         d1:e6:76:c9:ed:c9:58:e8:22:0e:16:24:80:5e:6b:65:73:28:
         37:ac:11:97:9d:99:c1:e8:16:94:df:a0:d4:1a:a7:24:a0:d3:
         29:4a:71:b7:b8:f8:26:40:11:1d:97:22:29:12:d9:af:62:29:
         a6:c7:43:0d:c5:f1:16:3b:70:6e:5a:63:27:3e:a7:be:fe:4b:
         c7:db:e0:53:4f:d4:49:08:05:83:fb:b0:26:2d:dd:46:50:13:
         d5:53:46:9c:3e:da:ff:a7:e9:a9:33:a4:2e:62:90:e7:54:ef:
         23:a9:ad:ce:47:b9:bc:dc:38:20:d1:f5:fc:f2:d4:5a:f5:72:
         fc:6d:b3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:42:18 2026 by rpki-client