Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
File:                     PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json)
Hash identifier:          +w6TomcWLs+uEEuLKvHk2ziYl0Xwj1ShLWxOLMU1xzc=
Subject key identifier:   78:74:5E:CE:E5:48:41:6B:17:E5:0A:98:0A:45:DF:F6:B2:4C:C2:E1
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Certificate issuer:       /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial:       01A107A615E6860FA853094B97406D305B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
Manifest number:          19E8
Signing time:             Sun 04 Oct 2026 16:01:27 +0000
Manifest this update:     Sun 04 Oct 2026 16:01:27 +0000
Manifest next update:     Mon 05 Oct 2026 16:01:27 +0000
Files and hashes:         1: 30JCy0OML-aej9HWtOYjdVh3Y58.roa (hash: hP6Mk/u93EteMPnPTXhr0EjSwhq+2k3+uAkB+TauqHk=)
                          2: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: lstXdU1x7JDbscP3hpPsVvY+RA0d51E6ipAUxbnk4uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:a6:15:e6:86:0f:a8:53:09:4b:97:40:6d:30:5b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
        Validity
            Not Before: Oct  4 16:01:27 2026 GMT
            Not After : Oct  5 16:01:27 2026 GMT
        Subject: CN=78745ecee548416b17e50a980a45dff6b24cc2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:1d:a9:c5:d3:10:79:85:6a:08:67:29:f6:
                    77:c0:1e:9e:ac:a8:78:02:32:ad:50:9f:97:4e:7f:
                    c7:67:13:3b:e8:0b:e7:8b:26:e4:4d:d3:95:e4:80:
                    84:0c:d0:f5:4e:8b:57:98:b9:8e:f3:73:20:44:81:
                    2e:35:d2:13:09:af:65:83:59:69:01:db:3a:da:29:
                    69:67:94:b5:d5:6c:6d:dd:6b:67:42:90:05:4a:4c:
                    e1:d0:5d:bf:58:ef:d0:9a:1b:55:df:a9:b3:fc:9d:
                    f4:20:b8:bf:af:47:6a:14:74:06:19:03:4c:a8:12:
                    e6:95:7f:ec:33:d1:66:7d:0c:90:a9:58:e8:22:87:
                    ad:a8:2b:f0:83:58:99:a8:69:64:30:a4:a3:ef:d6:
                    ea:2e:a6:88:44:a0:41:67:b9:d9:17:3b:08:62:e6:
                    a3:09:d6:22:a6:7b:a9:91:ba:c0:cc:90:fe:ab:eb:
                    39:31:39:bd:9a:50:f9:d2:32:9b:20:f4:a8:fc:85:
                    d3:bf:67:97:2d:6b:6a:81:ee:95:b3:3d:90:42:c4:
                    df:d4:92:87:e9:2f:dd:88:bf:9a:c5:41:9d:43:98:
                    18:89:cd:b9:3d:5a:a0:09:89:3d:89:1e:56:f8:b9:
                    78:a9:76:f3:80:18:f0:3e:28:dd:de:89:2c:87:65:
                    5d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:5E:CE:E5:48:41:6B:17:E5:0A:98:0A:45:DF:F6:B2:4C:C2:E1
            X509v3 Authority Key Identifier:
                keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:4d:57:76:4c:3f:56:63:0a:01:87:be:c0:f2:fb:61:d2:
         bf:45:25:fa:27:42:8c:e0:0b:77:bf:39:c1:36:eb:46:0d:98:
         f8:50:26:ec:76:8f:ad:de:a1:9d:05:aa:12:a3:df:09:c4:e4:
         5a:33:13:3c:fb:33:0e:6d:56:a6:43:0c:46:b5:05:f8:06:ef:
         af:60:d3:11:40:6f:93:ce:a8:bf:d9:74:3e:a8:24:19:35:54:
         e5:30:73:fb:60:a7:05:3a:6a:a6:7f:98:54:17:7b:c7:67:43:
         4e:8f:51:94:0d:ad:a9:7b:f1:93:66:b6:b6:b4:31:00:9b:34:
         41:95:40:f2:37:50:e2:ae:6a:32:c3:2d:cd:65:c0:28:3d:e2:
         8a:84:18:e0:82:1f:f4:d3:d9:de:29:39:ab:6b:c5:73:24:1c:
         a4:b9:a1:8d:da:51:46:e4:3d:3e:99:c9:db:aa:b8:b2:a1:c1:
         39:04:7b:35:9c:a9:40:44:6c:c1:dc:94:44:a8:f6:c0:13:19:
         c2:a3:ad:21:e5:23:1f:65:0a:17:d8:fe:b4:bd:84:87:d2:29:
         31:d5:00:01:e6:57:78:5f:50:fe:40:80:71:cf:fa:8e:e2:f8:
         c7:65:83:d1:93:80:89:22:12:16:9c:aa:0f:79:c0:c9:d9:75:
         07:e3:3b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:54:22 2026 by rpki-client