Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File:                     PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier:          fti2XsNSotXovuMIQ9aid0pdJx01iClTqcyGGi9HiAU=
Subject key identifier:   C3:03:CA:02:C9:7B:AB:25:E1:7C:EC:43:A3:07:13:98:30:1B:DB:9B
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer:       /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial:       01A10C9482610894B8F966D2CB5AA4260BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number:          0504
Signing time:             Mon 05 Oct 2026 15:00:21 +0000
Manifest this update:     Mon 05 Oct 2026 15:00:21 +0000
Manifest next update:     Tue 06 Oct 2026 15:00:21 +0000
Files and hashes:         1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: AvVJUsQvNJXVcjln6e1vE4B/5cvSz54PzfSSAy3tOoM=)
                          2: ZPNFN2SHGEuug7dR3f_5NaqBcYE.roa (hash: 5bnWerfmM11w3yKXSNQNnqjZF9M1e+6+t1oBrlPcPjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0c:94:82:61:08:94:b8:f9:66:d2:cb:5a:a4:26:0b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
        Validity
            Not Before: Oct  5 15:00:21 2026 GMT
            Not After : Oct  6 15:00:21 2026 GMT
        Subject: CN=c303ca02c97bab25e17cec43a3071398301bdb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:04:43:0b:22:af:92:14:bf:50:2f:21:e5:32:
                    4d:fb:50:77:22:97:87:4d:7c:77:db:f3:70:0b:0a:
                    84:dc:9f:28:39:61:36:79:79:53:8c:d3:3e:55:45:
                    33:70:96:e9:a2:3a:0d:b6:d6:44:08:02:90:36:da:
                    5c:87:6e:c6:88:b6:d9:2e:90:b4:ff:e4:e0:36:33:
                    a3:6a:0c:91:78:74:39:da:09:97:d8:66:d1:29:df:
                    25:37:9c:24:22:fa:86:23:e0:35:4f:61:a1:c1:04:
                    67:6a:e3:b3:08:00:ac:70:3b:90:61:05:a9:f5:0d:
                    32:16:92:ee:f3:07:dd:b8:76:4f:0f:53:68:95:6b:
                    8f:2f:e9:ee:a2:af:46:52:f3:07:66:83:f2:21:9a:
                    4f:2f:a6:02:09:b3:89:48:bc:4e:2b:00:50:46:aa:
                    a0:af:31:ad:e0:8c:9b:a0:f0:59:32:9a:7a:25:d7:
                    e5:94:27:d5:80:6a:4a:e2:5c:34:bb:32:73:b3:59:
                    77:09:7a:2f:de:7f:9a:83:89:20:7a:1f:d2:2d:4d:
                    3e:a3:5b:d5:1d:33:0f:af:19:11:01:b5:20:be:13:
                    ab:83:0a:fc:08:e1:b4:10:40:db:1f:14:02:10:97:
                    a1:8b:6b:ad:b9:3f:3d:69:9a:aa:df:c6:29:a7:fc:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:CA:02:C9:7B:AB:25:E1:7C:EC:43:A3:07:13:98:30:1B:DB:9B
            X509v3 Authority Key Identifier:
                keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:07:d9:09:c2:fd:66:ac:9a:49:99:a8:b0:57:06:7b:35:89:
         52:4e:cb:34:27:7d:94:4a:0a:c3:9b:53:45:1e:d7:dd:47:04:
         3e:a2:27:14:d0:33:4a:5d:73:e4:fe:dd:80:48:40:d2:46:b0:
         04:37:f2:74:98:47:ea:10:de:82:aa:db:31:ae:b8:fa:74:d0:
         ce:3f:2b:51:c1:54:39:91:45:9b:0e:5f:17:a2:87:23:be:2c:
         fd:6f:a9:1a:20:e4:3c:28:e7:26:b8:52:c5:f8:fe:03:e6:d2:
         16:e0:f4:da:f2:78:ac:6e:e5:3d:09:63:69:c1:d0:b3:b7:89:
         88:e1:77:09:33:a6:99:2f:53:62:92:45:32:24:2f:64:bb:b2:
         3a:b4:63:34:31:e0:d2:3c:f8:b5:56:26:65:f4:c9:18:3c:3e:
         96:67:87:00:73:b2:54:7b:ad:ca:f9:c6:d8:3e:78:01:b1:46:
         15:32:68:c4:70:0a:e6:42:50:51:2b:45:43:fb:0e:a5:7b:40:
         63:b3:33:8c:e9:9c:3d:73:f7:86:48:b9:18:94:6e:24:a8:f5:
         34:d6:e3:d0:cc:66:92:e4:e4:de:d7:24:98:4d:2e:9d:29:c0:
         ae:80:43:75:30:20:e9:01:28:cb:6a:b8:07:fc:58:bb:8a:45:
         08:34:c3:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEMlIJhCJS4+WbSy1qkJgvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTAyMTRjNjA5YzZjZDY3ODAzYWM3YzczNmVmOGRhNTE3
Y2E1OWQwHhcNMjYxMDA1MTUwMDIxWhcNMjYxMDA2MTUwMDIxWjAzMTEwLwYDVQQD
EyhjMzAzY2EwMmM5N2JhYjI1ZTE3Y2VjNDNhMzA3MTM5ODMwMWJkYjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/ARDCyKvkhS/UC8h5TJN+1B3IpeH
TXx32/NwCwqE3J8oOWE2eXlTjNM+VUUzcJbpojoNttZECAKQNtpch27GiLbZLpC0
/+TgNjOjagyReHQ52gmX2GbRKd8lN5wkIvqGI+A1T2GhwQRnauOzCACscDuQYQWp
9Q0yFpLu8wfduHZPD1NolWuPL+nuoq9GUvMHZoPyIZpPL6YCCbOJSLxOKwBQRqqg
rzGt4IyboPBZMpp6JdfllCfVgGpK4lw0uzJzs1l3CXov3n+ag4kgeh/SLU0+o1vV
HTMPrxkRAbUgvhOrgwr8COG0EEDbHxQCEJehi2utuT89aZqq38Ypp/xPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMDygLJe6sl4XzsQ6MHE5gwG9ubMB8GA1UdIwQY
MBaAFD7gIUxgnGzWeAOsfHNu+NpRfKWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yZTZlZTMtODE1OC00NThlLWEwYWMt
YWU4MWVkYzZmYmQ3LzEvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yZTZlZTMtODE1OC00NThlLWEwYWMtYWU4MWVkYzZmYmQ3
LzEvUHVBaFRHQ2NiTlo0QTZ4OGMyNzQybEY4cFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAfZCcL9
ZqyaSZmosFcGezWJUk7LNCd9lEoKw5tTRR7X3UcEPqInFNAzSl1z5P7dgEhA0kaw
BDfydJhH6hDegqrbMa64+nTQzj8rUcFUOZFFmw5fF6KHI74s/W+pGiDkPCjnJrhS
xfj+A+bSFuD02vJ4rG7lPQljacHQs7eJiOF3CTOmmS9TYpJFMiQvZLuyOrRjNDHg
0jz4tVYmZfTJGDw+lmeHAHOyVHutyvnG2D54AbFGFTJoxHAK5kJQUStFQ/sOpXtA
Y7MzjOmcPXP3hki5GJRuJKj1NNbj0MxmkuTk3tckmE0unSnAroBDdTAg6QEoy2q4
B/xYu4pFCDTDFg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 20:12:48 2026 by rpki-client