Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File:                     PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier:          8+bIHcUeWPhXcxbWjewDm2yVisDPT0u98FBZ8c+1IX0=
Subject key identifier:   AE:20:E4:2C:B8:39:E6:B3:4A:73:96:F6:32:63:00:1D:05:88:2C:1A
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer:       /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial:       019E1DC7A7FADBF8D002B4694579951F11E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number:          037F
Signing time:             Tue 12 May 2026 20:01:24 +0000
Manifest this update:     Tue 12 May 2026 20:01:24 +0000
Manifest next update:     Wed 13 May 2026 20:01:24 +0000
Files and hashes:         1: 2P0Kjjt5-7UDTZhBwA-FFuDiDYM.roa (hash: e8dlsMoEY5OAzunOS6SXf0tgQsD9v9aE1pqpQ/DOvsk=)
                          2: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: BVo19wWtRacd6uqjkSpcg85Jn3aOw7jTQyQb2YdIeXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:a7:fa:db:f8:d0:02:b4:69:45:79:95:1f:11:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
        Validity
            Not Before: May 12 20:01:24 2026 GMT
            Not After : May 13 20:01:24 2026 GMT
        Subject: CN=ae20e42cb839e6b34a7396f63263001d05882c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:33:bf:34:b2:56:99:e8:f3:0c:33:21:8f:e5:
                    8d:62:ce:6e:dd:b0:71:94:c0:d6:d6:e3:36:18:03:
                    e1:75:ec:91:1a:ef:88:c1:26:7f:5b:4d:3b:a1:f5:
                    1f:3c:60:d2:fa:49:41:56:02:64:08:54:7f:50:ed:
                    00:8f:10:f2:94:bf:89:b3:99:e5:aa:15:b9:15:b1:
                    d2:cb:b6:0a:26:fa:da:43:e3:e8:59:93:3e:7a:f9:
                    cf:a2:f4:d4:9a:f6:b2:04:8d:ec:f5:d6:c5:3b:0b:
                    9d:b9:8d:cf:82:18:0d:5f:ff:31:ca:4c:d1:d9:a3:
                    fe:1d:5b:a1:82:15:0a:5c:3e:0d:bf:21:cd:ed:f2:
                    94:f2:21:a0:51:56:f9:fe:1d:89:cd:85:8f:e0:cd:
                    77:15:c1:69:74:dc:6e:93:fb:80:54:6a:12:ea:91:
                    c8:1e:5f:17:81:57:a2:0c:3b:cc:f3:ca:97:51:2e:
                    9b:5f:6a:ea:c1:e1:9d:d2:a6:73:39:cc:e6:1a:39:
                    a3:49:f6:e8:db:ea:bb:a8:b9:e5:91:fc:21:3a:65:
                    ec:d0:31:7f:1c:0b:39:f4:ce:8d:c6:ef:59:4a:66:
                    eb:36:62:4c:77:69:68:c6:a9:11:f3:55:d9:9f:63:
                    f0:8e:3d:82:cf:f1:da:88:31:9d:db:9d:69:fe:f9:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:20:E4:2C:B8:39:E6:B3:4A:73:96:F6:32:63:00:1D:05:88:2C:1A
            X509v3 Authority Key Identifier:
                keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:eb:eb:b2:de:92:5e:a8:f6:a5:6d:cf:07:16:b7:6f:f6:1c:
         cd:02:13:a6:78:07:ac:c9:e1:0d:af:98:a2:a4:34:9f:bd:bf:
         29:cc:80:a8:c3:92:96:bd:9b:a6:0f:36:f3:1f:30:a5:10:f9:
         b7:db:80:4e:fe:72:1b:f4:a2:03:22:fb:9e:04:7e:84:d9:ae:
         af:b9:49:95:73:55:0f:56:58:4a:2b:48:d2:0d:55:22:10:cd:
         47:71:b0:c5:7d:94:98:2a:e1:b0:8b:09:81:c7:3f:11:d6:f6:
         04:c6:16:77:3c:a3:0e:f0:eb:03:2a:81:17:90:84:54:b6:79:
         d5:e6:ae:12:44:34:fe:55:c5:76:ff:be:0a:90:bb:7e:70:a9:
         5a:2f:5e:12:13:a8:cf:ff:12:a6:e7:a8:2f:b9:08:aa:72:4a:
         df:10:ac:f1:ed:93:ac:06:38:00:c5:c1:29:b6:d7:53:89:61:
         f7:93:79:38:e4:6e:75:49:0b:47:90:cd:60:65:97:25:ef:90:
         9c:0a:6f:53:06:02:79:b4:63:6f:cc:d6:e0:ba:78:61:36:a8:
         86:dc:e1:e1:a0:75:46:06:a1:58:c4:a3:1f:99:70:eb:e4:a4:
         86:f0:80:97:b3:7b:16:90:1f:ec:ec:0b:30:7f:a6:7e:69:5a:
         dc:d2:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:32 2026 by rpki-client