Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
File:                     pi8tPCadk1InaQsot_vdlT4entw.mft (raw, json)
Hash identifier:          0AC5UzIkCMq4Ju88xoMvXddcBlLNByiXW6Q7UW2GBWQ=
Subject key identifier:   3A:3D:3A:AE:C4:35:A3:DE:41:C9:22:EB:D2:63:53:5C:AA:99:2B:F9
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Certificate issuer:       /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial:       019E1D903478414F562A6A7C9DE9AB35B006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
Manifest number:          0DC3
Signing time:             Tue 12 May 2026 19:00:50 +0000
Manifest this update:     Tue 12 May 2026 19:00:50 +0000
Manifest next update:     Wed 13 May 2026 19:00:50 +0000
Files and hashes:         1: 8hDvXAFXtwTiaPxitWHApgLE65k.roa (hash: EiRwFtmOo1DVVx7O1xctBpgvgnvAfczha5+H5oxZvkk=)
                          2: FrgtLDHlGMWP7-Ol00IvZZoBesM.roa (hash: T567K72LlQfx3PglnXUfayy6bFn0FIimheQaqSUapwY=)
                          3: PIBAi-NbloODmSiDeKc6jb9ihv4.roa (hash: R3IFcDR+URbSvkybKJ/Sj9TwLvQjyr3A69qpjrCDlEE=)
                          4: ga1BrMjD7wY_QoN5ExMTad0kou0.roa (hash: /2/Lg7lZekU4p6NvtnYYz9mRfacgER7O7n79Ibm5W4s=)
                          5: lplNqf06vua3DkgbqqhwRpQX5y4.roa (hash: yaa0RKonl28mWEtrN2B7tlLyBAqCTM4woPMQSkOo7wE=)
                          6: pi8tPCadk1InaQsot_vdlT4entw.crl (hash: mTdYG07VIHaUBQ4RXmxRAHad9+P6iUDNSOAlITOYNzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:34:78:41:4f:56:2a:6a:7c:9d:e9:ab:35:b0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
        Validity
            Not Before: May 12 19:00:50 2026 GMT
            Not After : May 13 19:00:50 2026 GMT
        Subject: CN=3a3d3aaec435a3de41c922ebd263535caa992bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:a4:4e:cd:b6:73:f9:c7:17:11:91:08:f7:
                    f8:54:85:cd:18:b1:77:66:85:44:bb:74:24:ff:13:
                    d8:22:e1:57:05:a5:4c:46:82:25:ba:04:1c:ac:b4:
                    b8:5d:3d:d1:05:2c:e0:5e:70:ab:62:c9:94:9c:86:
                    f7:1a:2b:e1:28:a5:0e:04:1c:bf:70:50:27:66:b5:
                    c4:e9:ae:4c:5f:b7:a1:f8:c3:55:d5:9a:75:e3:ce:
                    f3:4b:0f:0d:c2:a0:9d:8b:4a:20:83:fe:ee:bd:96:
                    14:86:a7:b6:23:53:27:d2:08:33:55:38:44:be:64:
                    b3:6f:e8:d9:8b:1c:6c:05:fa:85:6b:01:2d:3b:e4:
                    59:2d:0c:59:7f:9e:4e:5b:5c:bd:3e:a2:79:08:d9:
                    4d:cf:b4:20:59:9f:85:9e:ef:08:38:6a:0f:1a:e8:
                    af:c1:80:87:7c:14:d7:1e:34:67:78:6f:5d:57:67:
                    47:97:43:1f:0c:ec:bd:d2:76:47:77:81:48:1f:a7:
                    81:6f:8a:c8:6e:ed:aa:b5:ee:41:a2:87:07:bf:10:
                    a4:88:aa:6c:ed:de:cd:20:7f:5c:1e:c8:d7:60:e2:
                    fb:bb:0c:f0:70:8a:64:9d:10:48:8e:7b:97:4f:91:
                    26:d1:3c:d2:ed:5a:75:d3:f6:61:23:ef:18:40:bf:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3D:3A:AE:C4:35:A3:DE:41:C9:22:EB:D2:63:53:5C:AA:99:2B:F9
            X509v3 Authority Key Identifier:
                keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:77:05:7d:82:7f:21:66:4f:bd:82:5e:d8:d7:4c:18:fb:b1:
         89:67:fb:8f:38:5a:5f:5a:76:46:1f:cf:68:82:b6:d3:10:04:
         a0:79:80:10:3b:6a:36:de:2c:e8:96:d6:3d:c6:ee:91:7c:a7:
         80:23:01:c8:76:78:c8:d4:65:49:44:a5:3e:b2:42:0a:da:71:
         b6:24:e5:31:e7:b0:33:ca:6d:45:c3:e9:c2:c7:04:61:d7:52:
         c4:4c:4e:c7:ea:4b:ad:f1:00:f7:ee:ea:2b:dc:9c:4d:7f:d6:
         a8:36:f7:76:97:36:fc:8a:6e:80:72:fa:f0:0c:4b:78:67:42:
         3a:dd:93:07:f1:e6:0a:a7:b4:1f:3a:0c:27:c8:e2:66:93:fd:
         00:0f:a1:17:72:6b:99:35:36:bd:c7:f9:99:14:b1:e5:2c:ed:
         56:54:2a:e6:a8:10:42:da:5b:65:c6:03:8e:0b:7b:c0:23:57:
         30:ee:3d:4e:32:33:9b:12:c9:f7:68:9d:6a:16:40:de:58:04:
         08:7c:a4:40:72:3d:d2:f0:14:29:fe:f8:45:51:f2:68:44:98:
         1f:b3:e4:9f:60:50:e2:26:5a:b6:39:a8:21:16:94:ae:3e:8b:
         3a:19:87:6d:cb:2b:ca:7f:d6:db:1b:70:71:a3:94:10:2d:9a:
         b3:49:06:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:33 2026 by rpki-client