Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File:                     PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier:          M/OQPUHMQVFcb6JVpyLW9Eg48JJ4x7hm7UBEjoyzZQw=
Subject key identifier:   48:05:01:A3:89:A1:76:DA:90:47:03:2C:65:D0:FD:83:B4:36:ED:27
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer:       /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial:       019E1F477717EA8A9AFDF3B80459696F40A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 03:00:37 +0000
Manifest this update:     Wed 13 May 2026 03:00:37 +0000
Manifest next update:     Thu 14 May 2026 03:00:37 +0000
Files and hashes:         1: 5ApvAMni12n_Tl97hQfErFu1d6c.roa (hash: CMR/4LXkDxQdsem1khNHlRD0gmxgV2kLwB9hrxJKQb0=)
                          2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: vTXMS7jMs44dl8oOsDGtPZu/a8z9UIHvV9StIwC3p88=)
                          3: XuBRU-qTaIe3iIMhEcyOCN_o1WE.roa (hash: aMfF2+emhhqGrwHfGQBas1ojIcyc28sSmp2XmBjy3No=)
                          4: kq8a46tLEeqaFqiTieRfOg3LWKo.roa (hash: qYlRFmIgG79GEajldFvoiEkS/VYV56G5bugYQU8ZN5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:77:17:ea:8a:9a:fd:f3:b8:04:59:69:6f:40:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
        Validity
            Not Before: May 13 03:00:37 2026 GMT
            Not After : May 14 03:00:37 2026 GMT
        Subject: CN=480501a389a176da9047032c65d0fd83b436ed27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:14:53:91:7c:f7:0d:7e:ff:98:43:46:20:
                    30:87:c6:a0:96:95:9a:32:ba:1c:01:9f:c2:50:a7:
                    b2:7b:c8:c3:93:bf:7c:6f:47:c5:87:c6:57:25:b9:
                    7d:b3:b7:89:d7:69:8e:51:c5:66:33:b6:60:fd:73:
                    c3:de:3c:27:63:c0:5d:d3:08:c2:1e:c4:ac:22:ad:
                    f6:45:e7:82:31:ec:19:0a:96:0a:72:80:79:30:1e:
                    fe:1b:60:0c:fa:d3:2d:db:22:0a:7a:cd:f1:45:24:
                    02:cb:9d:5a:19:b3:42:12:34:85:6e:0e:e0:7e:87:
                    31:f4:7b:09:61:15:d2:f2:26:a2:a3:dc:0e:bf:a6:
                    30:66:de:0f:79:58:a9:1e:6f:0e:b2:1f:fd:d0:45:
                    e9:d2:8a:7c:39:ef:ff:40:e6:9a:1a:5b:6b:70:9a:
                    17:96:9b:0d:75:3f:60:83:f1:95:b1:90:23:10:64:
                    b0:a5:e1:23:d8:06:c0:77:91:ef:fc:04:73:8d:c5:
                    92:34:d8:31:79:64:60:a9:f0:aa:9f:7b:2c:f2:29:
                    b5:03:7a:92:f4:02:ae:de:27:3e:ca:f4:80:95:6c:
                    1f:87:5f:7a:a8:79:eb:71:24:62:bb:0a:af:86:e7:
                    b9:b9:17:97:41:0a:19:7f:53:1f:73:ff:86:c2:3e:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:05:01:A3:89:A1:76:DA:90:47:03:2C:65:D0:FD:83:B4:36:ED:27
            X509v3 Authority Key Identifier:
                keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:1c:79:c7:01:9b:9c:9d:66:bf:4e:e2:40:6f:25:be:6c:
         3c:08:2f:de:0e:e1:45:b2:8e:e1:df:17:3c:1a:0b:b6:5b:a2:
         40:c7:3e:1d:09:39:81:86:37:90:65:73:79:eb:ba:12:3b:13:
         a7:16:60:46:69:9c:25:91:fe:5d:c8:0a:8f:19:5e:d5:e8:56:
         60:98:26:df:78:25:e8:ca:ac:b9:66:dc:c8:dd:9a:2c:17:7b:
         48:e6:c4:fa:8c:d6:71:9a:77:a3:a7:40:fd:ba:c8:da:39:ee:
         5a:ec:9a:fb:71:fc:aa:7e:3f:67:59:e6:3e:41:b1:be:3a:c8:
         ca:be:bd:88:66:4b:98:11:c4:e4:a1:89:61:8a:be:45:f8:28:
         34:84:da:a7:1c:b4:ee:ee:74:71:68:f2:cc:a4:57:8a:26:83:
         01:74:38:76:6b:a0:39:84:22:56:b1:99:25:29:b6:79:ad:be:
         80:a5:98:da:d2:27:f7:57:40:3a:2a:60:bb:79:95:ef:87:e2:
         f0:ea:34:4b:55:99:83:8c:9c:cc:58:6b:62:22:d6:4f:d8:0f:
         78:d7:6b:4e:33:bd:cd:9b:7e:60:fb:11:db:94:82:1a:3f:5f:
         a9:67:88:9f:7f:8c:10:33:c4:d5:9b:b7:14:9d:86:db:99:4d:
         d1:7d:80:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:43 2026 by rpki-client