Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File:                     PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier:          Ep32c9Cs7VytDzS0eFKAuRJ4lMmH2DGIXyVDvg/6pTI=
Subject key identifier:   99:2F:2E:85:BC:D1:38:7B:B4:12:D0:1B:D4:E6:D7:DF:D1:8E:BF:33
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer:       /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial:       01A0D0EE23B864A6C90BCFF0A16E273C7B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number:          1A76
Signing time:             Thu 24 Sep 2026 01:01:02 +0000
Manifest this update:     Thu 24 Sep 2026 01:01:02 +0000
Manifest next update:     Fri 25 Sep 2026 01:01:02 +0000
Files and hashes:         1: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (hash: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g=)
                          2: DEt4Y-_VZKpKHUQGndzBwGKa-hI.roa (hash: Pn+dJyctNTmeoTcdBPCYjrOipk+Ikj5vYjRfpzr/AfY=)
                          3: Fd0my4VD8yFhFNY23xVFQ5bNE7o.roa (hash: Xq0TLzzFqkURQ7QOU8lzKIy+PNOHeKXumeKowKwhe0E=)
                          4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: BQFIVHcZ9zOXLHTQs3RspEPewxC4Nw6PPBySI8mEnAA=)
                          5: XfL7J3_lKAhMT6FV_AAy67CADLI.roa (hash: Cja0K8hb1CFlq8SDbTIyn6C1tgY/4LTLk6lQT4K0o4Q=)
                          6: uekau7rSPung7Kbe6f858ZuB0t8.roa (hash: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ee:23:b8:64:a6:c9:0b:cf:f0:a1:6e:27:3c:7b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
        Validity
            Not Before: Sep 24 01:01:02 2026 GMT
            Not After : Sep 25 01:01:02 2026 GMT
        Subject: CN=992f2e85bcd1387bb412d01bd4e6d7dfd18ebf33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:5b:97:f7:7e:9d:b7:6f:3a:3e:89:b5:b0:
                    e3:da:5a:13:7c:1a:98:e8:62:cc:d0:eb:6c:68:0a:
                    04:15:45:e6:1b:27:43:44:2d:f2:35:c3:fa:79:15:
                    f7:bd:40:13:81:b6:50:72:7c:ec:70:5b:2d:d7:30:
                    0b:5e:b2:24:db:0e:af:a2:2f:85:b7:be:79:98:6e:
                    5c:da:88:07:cf:43:fa:a6:c0:42:e6:6c:43:ae:1b:
                    b6:91:48:d0:31:0d:38:1b:60:d9:06:cd:11:16:30:
                    c3:5b:aa:1c:65:cf:3b:8f:15:d4:46:c7:78:a5:cb:
                    a7:41:27:f0:9a:52:55:7d:ed:6a:7d:78:32:5e:33:
                    29:1c:c1:f2:f0:06:a2:8e:12:c4:fa:7d:e1:7e:82:
                    6a:1e:e5:c4:04:4f:a3:ac:49:27:5d:d5:fb:b9:ec:
                    78:c9:76:d3:e6:61:5a:8f:3c:0d:c9:75:4b:14:92:
                    c5:c4:e7:71:54:a4:a7:63:17:c6:07:c0:bb:dc:56:
                    79:c3:35:ab:0a:d1:c2:f1:fa:1e:f2:1e:28:6d:57:
                    da:49:55:cd:d4:a1:3f:8e:db:26:a1:e5:d3:c9:b0:
                    aa:e6:73:42:43:f2:f3:7d:0e:27:b6:87:4e:5d:d0:
                    72:15:0f:cc:6f:cd:88:99:2e:15:91:07:3e:d7:72:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2F:2E:85:BC:D1:38:7B:B4:12:D0:1B:D4:E6:D7:DF:D1:8E:BF:33
            X509v3 Authority Key Identifier:
                keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e1:07:d8:aa:e3:7e:30:e1:c4:13:22:2d:4c:fd:b9:b6:ea:
         4b:4a:ea:83:4f:68:fa:25:a7:5f:ef:5d:f0:84:10:60:ec:82:
         7b:3d:73:6d:8c:8c:4c:67:68:97:64:9b:fc:44:ee:0e:a8:23:
         99:5a:ae:ff:2a:46:c2:91:f4:8e:bd:ce:58:7d:0e:b0:73:6f:
         52:1e:3c:b3:e1:a0:93:c6:93:da:b4:08:f8:01:2e:b6:2b:41:
         b2:9b:0b:ac:2d:b6:7e:cf:8f:7a:8d:11:a1:ad:07:7c:aa:d6:
         35:9d:a1:da:ac:3d:7e:25:e8:dd:69:67:29:7f:62:ad:c8:1f:
         4a:67:77:ab:25:f1:89:6b:f9:e1:7c:01:0f:12:61:ad:e6:b4:
         f4:dd:f0:38:7d:12:b3:92:18:8a:57:5e:db:58:83:1a:7c:cf:
         8e:f4:10:52:9a:4e:7e:1e:1d:a9:aa:ba:0d:31:5a:01:d7:f6:
         5c:d4:0e:5e:31:e7:ec:ac:bf:d3:db:e1:da:1d:40:06:87:e5:
         de:aa:b6:21:3f:e4:1e:4d:e9:24:49:00:fb:1e:ee:7b:53:b3:
         99:ec:a6:e7:ce:11:a2:89:60:9b:a0:ff:51:68:80:fd:9c:5d:
         7f:ac:7b:02:03:cd:73:0e:a7:a8:3c:86:73:f0:c6:f7:a5:e2:
         68:09:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:29:22 2026 by rpki-client