Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File:                     PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier:          2lYwfECbrH+YspxKNbqOyr+ksASsrUYTF24oSQUhoFY=
Subject key identifier:   12:05:7E:BF:58:FD:F7:25:0E:C3:C0:55:4B:39:4A:57:42:FA:39:9E
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer:       /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial:       019E1FECB00AACF89542C8372644095F87FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number:          0D0F
Signing time:             Wed 13 May 2026 06:01:05 +0000
Manifest this update:     Wed 13 May 2026 06:01:05 +0000
Manifest next update:     Thu 14 May 2026 06:01:05 +0000
Files and hashes:         1: Ewp2Al5ax1LZmRmmNwpqPtsvCR8.roa (hash: PsSncA5sbwhm+qYpwUvXOsucHxELXyU7nMC4Byz/38I=)
                          2: NiXEkFa2OyOUnxfMEcQON6yPoNg.roa (hash: dVvuF0RyYBJRRTECbqhrE8YUyCue+Lh92GIKr6FebqU=)
                          3: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: jLHu24fZXgnWyxHE8gRs1ayz/xJPS2tNgsn3xmfAUBk=)
                          4: gQD3MU7TBpEiOjF9SqTJkR2Y3Hk.roa (hash: yBwTOvwiLlTbqshsC+5AZzg1Ya/CKAPiEghYIW9dRIk=)
                          5: q_r4ijQpjXZ8n9KPTw-0C5wgwwQ.roa (hash: zq7FtPgWzADBU+GCudKPhOXhQRXlPBFiAI7EZtoOa+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:b0:0a:ac:f8:95:42:c8:37:26:44:09:5f:87:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
        Validity
            Not Before: May 13 06:01:05 2026 GMT
            Not After : May 14 06:01:05 2026 GMT
        Subject: CN=12057ebf58fdf7250ec3c0554b394a5742fa399e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fb:42:33:f7:bc:30:82:c7:9f:90:c0:32:e9:
                    47:68:76:e0:f2:2d:2c:35:2f:b0:73:8b:79:34:33:
                    71:6d:4d:23:30:06:ce:dc:de:bf:4f:d8:36:8a:c3:
                    7d:ba:44:67:5f:1f:4f:bb:e2:e0:51:96:7a:51:74:
                    f1:72:c7:aa:0b:93:1c:36:c5:ea:2c:cf:e4:a1:01:
                    2b:06:ed:32:3e:f4:92:29:6c:0e:e6:d0:27:2c:af:
                    6d:b8:d0:b8:de:d0:b7:49:5c:60:28:33:d9:d3:e8:
                    a8:84:51:d4:85:49:28:f7:64:76:cd:1a:24:b3:a4:
                    b0:26:5c:1c:8c:71:c4:c7:ed:01:c8:76:29:4e:c8:
                    60:b9:e4:a3:c4:c0:06:7a:6e:61:01:36:6d:e4:14:
                    ac:d9:fa:4a:36:74:f6:81:64:a7:0b:7b:f3:14:90:
                    25:62:54:af:31:cb:75:26:f2:08:98:5b:b3:c4:84:
                    48:32:c8:69:d7:6d:84:79:da:cc:55:2e:e0:05:82:
                    69:88:90:ae:4a:78:72:01:41:d2:01:5d:f3:71:8f:
                    19:ca:f9:2c:cc:1c:be:a7:ab:50:65:c2:83:f6:6c:
                    a9:52:34:95:78:0f:28:ab:2c:0e:2f:83:97:72:9a:
                    db:e2:76:77:18:12:47:af:99:81:0c:30:e8:c0:fc:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:05:7E:BF:58:FD:F7:25:0E:C3:C0:55:4B:39:4A:57:42:FA:39:9E
            X509v3 Authority Key Identifier:
                keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:1e:53:e5:a5:2a:19:d9:d9:8c:ea:1f:fb:98:22:20:7e:
         3b:99:cc:15:16:d3:e0:42:68:04:57:12:53:c1:46:8b:49:32:
         e1:d4:e0:f0:92:f0:e7:97:80:f0:c4:d9:1d:ca:02:52:21:2d:
         28:e8:e6:98:d1:12:64:fe:ef:f2:1d:7f:e2:8d:bb:5d:f5:e7:
         83:01:89:91:41:c0:36:ee:9c:f8:35:c7:4b:c3:68:74:42:8f:
         d0:c9:54:24:21:ba:83:d4:81:d4:cf:fb:86:4e:d4:79:fd:06:
         53:40:69:44:15:49:e5:52:ac:2c:86:5c:64:ce:6c:eb:43:f4:
         34:a8:72:15:14:3a:e2:5f:b8:b7:65:dc:85:c8:94:4d:e7:2c:
         db:d9:93:d8:8c:2f:44:6b:8d:bd:5d:42:a1:a2:cc:bb:5f:36:
         86:d9:02:52:40:43:e7:46:da:ef:3d:fc:68:7b:13:cc:b4:18:
         56:24:5d:b0:05:04:1e:fe:71:7f:7e:75:cb:53:0a:32:b2:34:
         75:a4:3a:cc:19:e9:2b:c7:3d:41:5d:d3:30:17:78:71:f4:92:
         af:4d:3e:79:09:44:61:ea:f1:e9:26:52:ae:cd:7b:74:b4:16:
         b3:e1:3d:fb:e7:59:ac:1e:70:87:71:6f:d1:1c:9c:76:ce:c5:
         4f:7e:c6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:46 2026 by rpki-client