Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File:                     PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier:          RumhaT9GML8T8+FimP6xK/17SXEBLPria4EqQpOvs88=
Subject key identifier:   0C:5E:38:81:C8:8F:67:E6:6E:97:12:A3:52:18:5A:6E:08:21:AB:CA
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer:       /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial:       019D2816F770816804BD14898C92AF3E14B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number:          0AA1
Signing time:             Thu 26 Mar 2026 03:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:26 +0000
Files and hashes:         1: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: a16SX9INGFF7THPf0VI8uPxDZb9pHuoLaPSRpFzi6qc=)
                          2: drcBU6isAarNBojJI-RU76PKJ0U.roa (hash: Z5fFRiPhRBfULgaVLuCjir2HvNZniMHEm92yy3rxB68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:f7:70:81:68:04:bd:14:89:8c:92:af:3e:14:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
        Validity
            Not Before: Mar 26 03:01:26 2026 GMT
            Not After : Mar 27 03:01:26 2026 GMT
        Subject: CN=0c5e3881c88f67e66e9712a352185a6e0821abca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:50:24:8e:51:ad:26:d6:4b:47:f6:02:33:
                    5d:d2:0a:24:a6:bb:90:a3:8a:51:a2:2e:8d:a0:76:
                    18:77:1f:19:26:ab:e0:b2:89:46:c5:68:5c:e4:b6:
                    c9:11:1f:c9:9e:8e:59:ae:c2:e1:84:21:d1:d9:89:
                    c8:b9:b6:98:96:72:71:2b:d1:31:25:18:15:3b:e0:
                    d9:e1:c9:06:78:31:b1:5c:21:92:15:b4:bb:ff:fb:
                    ec:c1:36:e6:16:ae:7d:18:26:9a:27:95:f5:ac:82:
                    d7:19:8d:d7:9f:49:d0:d3:af:10:54:67:51:fe:dc:
                    ac:28:65:66:41:70:4a:1d:08:87:a8:ef:b3:6f:b8:
                    26:44:17:90:50:4d:5f:61:bf:a7:97:85:63:fd:98:
                    a1:93:4f:84:70:f0:c3:93:f9:e4:24:80:fd:31:5c:
                    41:fb:aa:de:24:83:cc:e0:6c:ff:05:df:ca:72:96:
                    6b:8a:4d:be:91:2c:80:fa:2f:e8:64:e7:a3:56:36:
                    0d:dc:08:bd:a9:4b:31:d6:28:e9:59:8b:41:5b:03:
                    d1:83:f9:2f:40:c1:68:d2:7b:9a:dc:1b:f5:65:84:
                    f6:c9:77:a5:ff:c5:bd:aa:1f:21:bd:ff:05:b4:9a:
                    1a:fd:7b:e3:e5:79:74:05:97:e2:d3:67:20:c6:18:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5E:38:81:C8:8F:67:E6:6E:97:12:A3:52:18:5A:6E:08:21:AB:CA
            X509v3 Authority Key Identifier:
                keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0f:a9:ff:19:cd:f3:40:67:a5:4f:96:87:6c:2c:34:23:36:
         9f:1c:1a:34:81:c2:b3:73:1a:8b:10:6c:24:56:b2:f6:b3:56:
         af:04:ab:94:94:46:14:84:a0:c0:ee:22:e4:14:ab:45:ef:85:
         9e:f1:e8:28:d0:29:b9:8f:e8:54:5f:40:c9:01:4f:40:b5:8b:
         7f:0d:78:2b:34:3c:eb:c4:ae:b2:73:6c:14:48:4f:65:27:65:
         d2:82:0b:a9:fa:f3:6a:c2:cb:20:55:7b:53:d3:8a:9a:e2:1a:
         0d:4e:92:4e:9b:8d:96:e8:58:31:69:b7:c5:e5:99:d3:c2:17:
         8f:9b:3b:b2:2f:ed:dd:6c:a0:71:cd:e4:b0:9f:0f:d1:d0:8f:
         2a:ab:69:d4:2f:ee:1c:38:31:5e:11:16:67:02:72:30:57:4d:
         2d:3e:89:5f:9b:95:21:d9:dd:78:63:a0:8c:a7:73:a1:95:16:
         19:75:5a:ea:cc:94:e0:9c:d2:c1:d4:b3:39:86:15:19:d6:b1:
         7e:91:2b:e8:17:96:1b:7a:88:a0:2f:89:65:52:32:ab:b0:bd:
         2e:ed:16:19:88:b4:59:7f:74:51:25:cd:b9:ae:c1:f5:0d:72:
         dd:9b:c9:6f:d2:7d:9c:a9:5e:41:2f:2a:3a:56:f8:62:cf:42:
         5b:32:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:38 2026 by rpki-client