Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File:                     PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier:          HqBYWBDhm9xRDys6QrgRD48T06dB5DFMvBlwqR/Ehjs=
Subject key identifier:   38:D3:3E:F2:1A:70:16:8F:6C:C8:BE:00:5F:DA:40:19:55:1C:9F:64
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer:       /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial:       019F9023363B9CA5D7A89D4187F0A32A72F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number:          0D75
Signing time:             Thu 23 Jul 2026 18:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:54 +0000
Files and hashes:         1: NIh5X-X78HnV8OD004txMFNbvjM.roa (hash: 94RoT+RPhL7upzRI0H0wJCdguwdTer9SXhjbnB7fpSY=)
                          2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: MtlSbLvwClvpqrWg69MA92o5DgUfc79jqm6iIMH/wjs=)
                          3: Tj-tszmPMOIdicR6OTt8f45Zya4.roa (hash: 38F17CYyilIBIc43xJOnaUQedazOErXtC4iNosY91dA=)
                          4: lFg7etq0z0bKQ1hcHnNof59N474.roa (hash: ur6JqNagspmUw5cjbkW9rFW1qoAf9GaSzlWdaC/M+ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:36:3b:9c:a5:d7:a8:9d:41:87:f0:a3:2a:72:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
        Validity
            Not Before: Jul 23 18:00:54 2026 GMT
            Not After : Jul 24 18:00:54 2026 GMT
        Subject: CN=38d33ef21a70168f6cc8be005fda4019551c9f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a0:b5:48:c1:45:2d:38:7b:1f:50:9d:49:e7:
                    0d:83:0b:0d:9d:f8:16:92:44:c1:d7:34:4d:89:2e:
                    55:fd:ed:cb:a1:5b:a3:6a:6a:77:d3:f1:ab:01:ef:
                    9f:ed:28:75:82:2e:b1:4f:f4:b7:75:f3:ac:9d:8a:
                    36:ea:72:cb:bb:e9:5b:43:1e:2c:bd:d0:86:d0:76:
                    1d:f1:2c:de:96:2e:69:2a:df:50:65:fe:89:52:ec:
                    2b:ad:84:78:dd:3f:1e:d1:d2:c4:62:59:80:ee:9a:
                    dd:15:95:af:62:69:61:47:b4:03:34:62:13:60:34:
                    4b:f2:22:35:8e:e3:bb:db:74:a4:c2:be:99:80:bb:
                    70:41:ce:1f:25:da:fe:5b:a9:41:96:80:80:8d:09:
                    44:60:d7:fa:e7:df:89:c9:70:50:06:53:09:19:3e:
                    c2:31:2d:07:b6:e0:cd:c0:2e:73:8e:8f:60:e1:4e:
                    fc:0d:c8:06:38:30:07:34:27:c7:85:0c:46:4e:c3:
                    b2:21:24:50:a8:58:ea:09:db:4f:04:31:d3:05:87:
                    e2:b3:57:e9:67:8c:3b:e4:e0:9b:69:9b:aa:27:42:
                    40:fb:1c:a7:8a:fc:44:59:d9:3b:79:e7:8e:86:a9:
                    3f:88:46:5f:53:ff:a3:1f:5b:a6:9b:8e:5b:dc:e7:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D3:3E:F2:1A:70:16:8F:6C:C8:BE:00:5F:DA:40:19:55:1C:9F:64
            X509v3 Authority Key Identifier:
                keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e7:8a:92:74:cf:05:d2:26:c7:97:6b:55:e9:4d:13:71:68:
         62:2f:61:ce:23:17:76:96:a2:29:0f:7e:3d:4b:aa:9a:23:46:
         ab:2a:df:81:6a:80:33:3a:84:60:31:65:9d:ff:75:9b:70:a2:
         3d:9f:1b:d9:a2:83:a8:d5:86:c3:9f:68:96:01:40:a1:66:b3:
         7a:67:9c:06:ba:53:ad:16:fb:ae:2a:d8:86:4f:95:ec:61:10:
         02:50:ec:78:99:67:fe:6d:82:33:f7:5d:e2:93:99:04:28:2b:
         2b:23:2d:b0:d0:ea:fe:a8:d2:e1:8a:16:e6:67:e1:52:73:02:
         c8:7d:b2:b1:15:cf:36:23:58:b1:6b:38:51:49:b8:65:21:e9:
         bd:5b:df:40:f1:c7:f3:af:f8:7f:74:37:38:a6:2c:2a:78:71:
         d2:b0:27:3f:ff:32:0f:24:39:f5:57:96:86:64:75:c7:64:bf:
         47:3f:62:5c:46:37:d8:a1:ec:0c:ea:d6:ce:23:c8:f2:78:35:
         3f:b3:7b:23:d4:22:12:a6:23:70:cb:1c:d1:36:50:f3:8d:a7:
         6d:3a:49:47:a7:cf:53:64:de:17:c8:df:4e:1e:c4:e9:d5:80:
         26:c6:6d:5d:e9:05:e3:2f:00:1d:91:7a:8f:3e:55:91:9c:4e:
         6c:24:4b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:56 2026 by rpki-client