Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File:                     PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier:          46RYH9fH+7Doj6vX27Bn72GDh0kiONmwIKwlM+B1RI0=
Subject key identifier:   F9:F1:6E:CA:96:8C:19:E2:B1:16:D2:DE:26:57:EF:46:FA:D1:57:CE
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer:       /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial:       019F95EE50F62CC89F5647B868D70E2B8E0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number:          0442
Signing time:             Fri 24 Jul 2026 21:00:51 +0000
Manifest this update:     Fri 24 Jul 2026 21:00:51 +0000
Manifest next update:     Sat 25 Jul 2026 21:00:51 +0000
Files and hashes:         1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: Qo9nrmanr9RBnmd25ceZYQs5IyLaOnpkv/L2pipuNuI=)
                          2: ZPNFN2SHGEuug7dR3f_5NaqBcYE.roa (hash: 5bnWerfmM11w3yKXSNQNnqjZF9M1e+6+t1oBrlPcPjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:ee:50:f6:2c:c8:9f:56:47:b8:68:d7:0e:2b:8e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
        Validity
            Not Before: Jul 24 21:00:51 2026 GMT
            Not After : Jul 25 21:00:51 2026 GMT
        Subject: CN=f9f16eca968c19e2b116d2de2657ef46fad157ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:75:de:a8:fb:c7:d7:87:97:da:05:0f:e0:
                    ec:8b:e3:39:79:87:5e:bb:e0:ef:fc:fb:7b:f0:97:
                    91:41:f5:96:7d:52:6c:98:ab:44:a4:da:e6:d2:07:
                    bb:d7:08:f8:48:33:75:99:c1:fc:f3:03:d6:72:ca:
                    2e:89:09:d7:ff:97:12:7b:cd:9d:22:bd:5a:6f:32:
                    bc:b8:47:21:66:2f:17:e0:1b:57:62:c0:db:19:91:
                    1c:c2:39:58:72:86:6e:52:8b:35:6a:fb:0e:9d:27:
                    e4:93:e9:cc:ab:e8:3a:53:33:bc:cd:9f:bc:b6:6e:
                    46:7e:de:76:6a:99:18:0c:3d:62:80:b8:02:c5:8c:
                    e5:41:7b:65:2a:a7:e5:30:06:b6:8d:7d:f9:0e:75:
                    3b:37:60:e2:7e:23:73:96:6e:ba:e1:8e:46:6f:47:
                    e7:07:6b:b6:3d:05:cb:22:4b:2d:30:f7:39:b4:7a:
                    1b:69:31:43:d7:9e:04:57:e9:70:a9:53:ac:39:34:
                    87:e4:7b:0f:f6:ac:d3:b4:59:22:48:b7:96:40:6a:
                    92:90:35:c1:2e:f9:26:39:38:0a:87:32:bb:5c:33:
                    70:ce:b8:09:10:62:27:2c:25:a6:dc:a3:39:1e:b5:
                    ff:fd:c0:66:f3:75:d2:a2:f7:ba:19:0f:7b:fa:34:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F1:6E:CA:96:8C:19:E2:B1:16:D2:DE:26:57:EF:46:FA:D1:57:CE
            X509v3 Authority Key Identifier:
                keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:99:09:6e:5d:1a:46:72:66:91:92:69:f6:40:66:d1:42:ec:
         cf:02:51:b5:95:73:81:1e:92:db:8c:4a:51:a5:ea:53:ab:4c:
         6b:27:dc:d9:5c:44:37:6c:d6:4a:62:60:0b:2c:c0:8f:d4:1b:
         44:c0:62:44:f4:c5:14:9d:99:99:42:49:22:7c:c7:b7:82:a2:
         45:87:2b:d4:62:49:36:93:ab:dc:46:63:68:10:9d:c6:5c:17:
         b5:ac:e5:f2:91:b4:77:40:62:a9:35:22:e1:e5:98:f9:37:7f:
         4f:84:31:28:db:2d:dc:cc:56:72:91:f1:62:36:ec:49:97:5d:
         42:22:6d:ef:fa:df:20:bb:1a:e4:58:b3:c3:0b:8f:c3:33:47:
         71:12:cd:96:c8:4f:c7:b7:47:cb:e6:48:1b:66:b1:bb:c8:18:
         e4:8f:45:8b:a6:a8:e9:1a:7f:7b:f0:c6:f4:9d:5f:a7:65:b9:
         59:21:b0:1c:93:2f:59:92:14:c1:7f:7f:e2:00:25:7d:8b:d6:
         80:34:78:e8:be:a0:99:d0:c4:3e:22:a9:31:98:01:9b:d1:5c:
         97:29:7e:38:bf:d8:46:17:a4:96:c0:7b:5c:3a:c8:1e:f8:f6:
         f9:d9:25:09:6b:6a:8e:ba:fa:c8:db:15:e0:a6:ad:1c:f6:bd:
         25:6d:41:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:11:00 2026 by rpki-client