Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
File:                     PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json)
Hash identifier:          L6V5CGJ95y3/ZLegZ0QcsD/WpS2P8UtrbjuqXxdZ9cg=
Subject key identifier:   65:24:E5:E3:2A:39:B8:01:D7:61:F7:1D:CA:38:84:5E:E9:19:5F:AF
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Certificate issuer:       /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial:       019D2A04A30D6071A64BACB6B79B355C5297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
Manifest number:          031D
Signing time:             Thu 26 Mar 2026 12:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 12:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 12:00:40 +0000
Files and hashes:         1: 74xdlthipiPwmQdVtWpcn9yMpH0.roa (hash: p90jbIWz3kNDEWy5wNiYtEyIp2vg1/zc3mIlW5yWFFQ=)
                          2: B1ztFUqJj0TJYJvOExVRSQmIl5A.roa (hash: v/mWzHGtLLbQQyMt4t++cIwVty9wjpt9ae5rJyBn1gU=)
                          3: DsSKa3jlsMcS8PZEA_lBBDaVuS0.roa (hash: sCNeXSE7wm7FbJmQ9E5zHLdMIcgEdKSApg1Y+J8Rl58=)
                          4: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: XgpUqdAVInDI+BPGKdbx5Ps1OM4sU5CTzzic0qnv7eE=)
                          5: cCVfq15MkQwWtM1jPJjocJnH1Wc.roa (hash: r85fd8Uvcz/76R6OT32K3Lqo+sirunePwgftHCYO6ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:04:a3:0d:60:71:a6:4b:ac:b6:b7:9b:35:5c:52:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
        Validity
            Not Before: Mar 26 12:00:40 2026 GMT
            Not After : Mar 27 12:00:40 2026 GMT
        Subject: CN=6524e5e32a39b801d761f71dca38845ee9195faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:1a:9b:9f:5e:d9:e7:0f:48:8d:58:b5:10:
                    b7:ae:62:54:f8:d5:c6:ad:66:01:d5:24:3e:2a:c7:
                    af:2d:05:9c:30:4d:ef:a4:3d:4d:47:2d:54:32:da:
                    ca:5b:8d:15:58:5f:3c:9c:49:94:7a:a2:97:54:be:
                    cb:ba:0f:1a:ff:f8:54:6c:95:7a:44:72:84:eb:67:
                    09:bb:25:c2:3e:4b:4b:e8:ac:ff:a3:8d:9b:0e:41:
                    46:95:8d:26:82:73:f5:49:e1:25:4d:59:e8:4a:a4:
                    89:50:76:73:06:ed:eb:38:e2:ef:92:8a:d8:ff:56:
                    72:52:f4:6d:18:58:db:09:26:dc:18:ca:24:3d:7e:
                    45:94:cb:b3:82:6e:64:31:93:65:ae:54:87:5a:c2:
                    72:0f:5c:61:f2:80:31:a7:c5:95:7e:11:76:5f:ee:
                    c4:b3:27:fe:26:9d:ca:f8:92:5e:ba:82:ba:c8:3f:
                    dc:24:ba:20:a5:a9:96:ca:8d:c5:74:a1:b7:3e:2b:
                    03:06:35:08:4b:c2:13:0b:21:4b:1d:8d:73:72:43:
                    2e:78:d0:d6:b7:dd:a0:34:e6:99:c7:8d:04:29:b4:
                    91:06:86:42:e6:93:3f:51:77:22:b2:47:35:06:17:
                    7d:c1:e5:b8:bd:68:26:64:f5:00:38:1f:34:3d:82:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:24:E5:E3:2A:39:B8:01:D7:61:F7:1D:CA:38:84:5E:E9:19:5F:AF
            X509v3 Authority Key Identifier:
                keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:df:d3:67:47:30:db:d8:93:cc:18:72:b1:6f:76:37:f8:
         8e:8b:71:b8:8f:08:93:a1:83:e6:4c:1a:62:e4:d8:ae:8d:ab:
         d1:ec:8a:33:83:69:05:02:66:b5:17:14:cd:fa:96:21:d7:85:
         5b:d7:4d:77:1a:db:81:b3:45:03:07:33:81:7a:f1:c9:3d:a0:
         01:36:1d:2c:47:d3:e3:8d:a9:bc:10:ad:70:df:7c:00:b2:74:
         59:61:7e:75:a9:13:7a:a2:8d:f2:ed:96:98:57:d9:c6:3b:54:
         9c:9d:bd:9d:b4:0f:a3:d0:2b:b4:22:af:d1:4c:91:73:ce:2f:
         7a:b2:ce:8a:39:44:e4:f5:73:e7:86:c3:31:de:9d:53:cc:85:
         b1:a9:1f:a2:e6:c3:d1:1b:d1:67:a4:1f:a8:3b:c5:07:f3:37:
         08:6d:b5:8d:c5:6e:f2:db:b5:c8:df:d1:e3:a4:48:31:45:d3:
         b6:af:5e:43:f2:6e:f1:a6:49:a9:a9:cd:59:ec:c5:cf:12:e4:
         87:96:bc:13:a1:43:bb:c6:de:7f:50:67:dd:ae:5c:f6:bc:3d:
         79:7e:4b:43:9a:22:8b:25:87:37:5c:50:85:7e:ec:51:f7:dc:
         11:b7:9b:30:87:42:6a:96:9c:50:a8:ca:4b:7d:23:aa:d4:11:
         d1:76:fb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:25:54 2026 by rpki-client