Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File:                     PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier:          zD9QLiXwcLT8drr8yD3IJDJwpCHBYXvutgqhmdQX5gQ=
Subject key identifier:   77:4F:82:3B:DD:02:5C:BB:D0:56:C2:5A:92:92:BB:7C:E7:F3:EA:C4
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer:       /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial:       01A0FD221AF6A4E329892BFE9C5F24A9734C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number:          1A84
Signing time:             Fri 02 Oct 2026 15:01:05 +0000
Manifest this update:     Fri 02 Oct 2026 15:01:05 +0000
Manifest next update:     Sat 03 Oct 2026 15:01:05 +0000
Files and hashes:         1: 5ApvAMni12n_Tl97hQfErFu1d6c.roa (hash: CMR/4LXkDxQdsem1khNHlRD0gmxgV2kLwB9hrxJKQb0=)
                          2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: 64kNC+cJwFgK1xb+SL8weCHnWL4R399LaU2XQTRmINU=)
                          3: XuBRU-qTaIe3iIMhEcyOCN_o1WE.roa (hash: aMfF2+emhhqGrwHfGQBas1ojIcyc28sSmp2XmBjy3No=)
                          4: kq8a46tLEeqaFqiTieRfOg3LWKo.roa (hash: qYlRFmIgG79GEajldFvoiEkS/VYV56G5bugYQU8ZN5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:22:1a:f6:a4:e3:29:89:2b:fe:9c:5f:24:a9:73:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
        Validity
            Not Before: Oct  2 15:01:05 2026 GMT
            Not After : Oct  3 15:01:05 2026 GMT
        Subject: CN=774f823bdd025cbbd056c25a9292bb7ce7f3eac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:14:64:24:1b:52:80:e7:ef:8f:bd:4a:82:
                    69:4c:79:03:49:54:6c:96:fc:c9:39:44:97:bb:7d:
                    12:c2:2c:6c:a6:b1:5d:84:ba:93:0d:72:cb:2d:5f:
                    bd:51:05:33:1f:4f:08:9c:43:16:d5:3c:e3:d9:81:
                    c1:34:9f:de:d0:ff:b5:1d:d1:4a:dd:61:17:a5:ea:
                    9e:23:e7:ed:64:bf:4f:e0:c0:87:7e:54:7a:ce:d0:
                    31:89:d8:7a:70:0f:43:01:14:47:ee:2d:2a:31:77:
                    dc:ca:a3:e7:06:f9:cf:20:4d:b1:4a:1e:07:c9:30:
                    94:21:1f:6e:22:d9:0d:85:44:3d:49:fc:cd:57:d4:
                    d0:b9:64:bd:53:14:c9:d1:08:08:e9:a6:6b:dc:45:
                    6b:8a:a9:8e:8a:50:30:a9:43:1f:84:53:6f:7c:75:
                    82:26:54:21:66:31:a8:be:ec:b9:2a:fd:54:40:3b:
                    11:60:ad:67:df:7f:6e:e2:79:64:c7:1a:1f:a8:1d:
                    ba:a1:a3:49:9b:15:8f:9e:f9:8a:64:61:ba:fa:26:
                    d1:6d:91:8c:7e:86:dd:2f:2f:55:0e:f5:41:2c:a4:
                    dd:79:0f:02:19:10:23:b0:d7:83:8c:f8:fd:c5:2c:
                    46:e5:b7:de:00:ee:5d:1b:b5:f4:a7:ad:85:ae:36:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4F:82:3B:DD:02:5C:BB:D0:56:C2:5A:92:92:BB:7C:E7:F3:EA:C4
            X509v3 Authority Key Identifier:
                keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:9a:60:31:f3:e4:97:7f:63:76:c1:db:1d:a8:62:6f:4c:
         4e:01:df:79:b2:8c:28:38:e9:fc:91:0e:8b:78:73:de:cd:97:
         ba:26:82:3a:0b:b6:b0:1a:e2:68:4c:c6:e5:92:b3:c1:84:58:
         bb:0f:ba:e8:54:8e:c9:ab:38:1d:57:e2:47:77:2d:c8:ba:d1:
         dd:5d:f4:c7:44:7b:39:81:13:0c:c5:94:0c:2a:b6:fe:89:68:
         47:66:5a:ac:ea:e8:67:11:4b:82:3d:46:75:79:e3:0d:da:59:
         c5:f4:d0:a7:67:56:04:29:52:6a:fc:d7:72:7e:88:6b:b4:c1:
         f7:56:ff:68:f9:53:77:8d:49:52:1e:9a:3f:df:d4:e2:11:43:
         61:34:f8:3c:e5:ca:ec:72:87:c9:5c:9d:81:5c:89:2e:a1:f4:
         72:cc:de:f0:95:eb:6a:6c:51:29:c6:26:3c:16:51:a8:0b:53:
         86:b6:a3:f4:ba:45:46:d1:dc:d1:11:16:d0:8b:e0:7a:23:d4:
         68:83:ce:b2:e5:2e:c0:ef:d6:e0:0a:52:d6:ec:03:0d:49:0e:
         cd:c5:5f:09:e0:b8:6a:0c:ca:02:d1:e7:cd:d3:17:71:59:d3:
         45:f7:7a:d8:6b:03:c7:57:a3:5e:86:9f:c7:13:b2:1a:3e:e9:
         7a:93:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:18:19 2026 by rpki-client