Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File:                     PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier:          uHHIhV8C2AY9Eb9nMBPrqGoOUloj5gMQcnuDS8DmP0s=
Subject key identifier:   30:1E:94:3E:E6:E0:C8:3A:1E:99:EA:1A:A0:9B:8B:8E:F3:FD:01:92
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer:       /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial:       01A0E7AED073D8B81B1130F66FD123000226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number:          0834
Signing time:             Mon 28 Sep 2026 11:03:08 +0000
Manifest this update:     Mon 28 Sep 2026 11:03:08 +0000
Manifest next update:     Tue 29 Sep 2026 11:03:08 +0000
Files and hashes:         1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: NDLZ5jlRuwK98HQdI+c7e9Yn3ILUId6SN+ArP30jOE4=)
                          2: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (hash: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 11:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:ae:d0:73:d8:b8:1b:11:30:f6:6f:d1:23:00:02:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
        Validity
            Not Before: Sep 28 11:03:08 2026 GMT
            Not After : Sep 29 11:03:08 2026 GMT
        Subject: CN=301e943ee6e0c83a1e99ea1aa09b8b8ef3fd0192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:00:d4:6a:a0:e1:c2:42:f1:c8:d0:fc:07:
                    67:4a:8b:fd:8e:24:17:07:d6:eb:12:e7:97:18:67:
                    49:39:d5:73:8b:6d:52:45:e5:1a:c8:6a:1e:0b:34:
                    b8:b4:f1:2f:5d:e4:a5:6f:38:74:40:3a:8b:b5:97:
                    24:9f:79:d6:9d:d2:f1:29:b4:7c:70:66:26:e8:88:
                    f9:19:cd:a5:fd:bb:e1:50:d3:0f:70:a6:0e:af:06:
                    fb:b7:e9:f6:b3:58:cf:6b:38:9a:a9:b2:84:38:01:
                    39:d4:a4:90:98:8d:2f:af:9b:35:36:e3:7e:2c:80:
                    19:dd:99:27:d5:8e:e4:6e:71:57:79:b8:27:27:d9:
                    7c:3b:fd:d7:61:15:11:38:a1:60:7d:dd:25:b3:15:
                    56:cf:d1:f3:8b:60:3a:1c:eb:a1:52:39:87:00:89:
                    de:80:d0:e7:6c:3c:d5:b9:b9:39:e6:4d:58:46:35:
                    7a:83:3b:95:06:5c:99:51:fe:3c:a2:09:90:fe:a8:
                    de:53:53:71:4c:f1:07:c4:e5:91:63:be:8a:3c:96:
                    7d:79:0b:9f:8b:52:4e:17:63:b4:dd:4f:af:8f:c6:
                    1b:90:43:47:9f:09:76:3a:b1:14:e0:04:07:22:cf:
                    b9:a4:e0:fb:25:c8:f5:5c:86:e0:0c:15:bb:4f:8b:
                    c8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1E:94:3E:E6:E0:C8:3A:1E:99:EA:1A:A0:9B:8B:8E:F3:FD:01:92
            X509v3 Authority Key Identifier:
                keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:f0:eb:f7:76:d6:00:17:33:b0:7d:2f:b0:1f:b7:ab:be:
         41:26:4b:f7:8c:29:e0:fa:55:2c:44:c0:e9:00:63:e7:f7:15:
         fa:de:e6:da:15:7b:e2:b2:7c:bc:21:af:9a:32:d7:df:d9:af:
         68:74:05:60:9d:a4:6c:65:76:98:67:da:45:74:e8:04:89:08:
         28:88:02:bb:34:d0:a2:12:7b:46:1b:4c:82:b6:60:b3:cb:48:
         62:b0:fc:18:99:60:21:fc:8b:24:71:39:85:b8:51:d1:bc:b7:
         7f:3a:43:b9:cc:8a:b6:61:8c:e8:6c:c1:c0:8d:ad:3d:0b:a8:
         24:44:d3:eb:8d:2d:d0:08:80:33:23:71:f4:83:5c:0f:c4:a7:
         93:5e:b6:34:d7:c1:98:bd:9a:91:21:69:77:05:0d:6b:79:04:
         ec:8d:2a:85:27:43:bf:4f:ce:5c:91:97:dd:11:d4:69:33:1e:
         68:0b:a1:76:de:12:62:63:c0:77:d6:39:0b:51:ad:e2:ca:dc:
         55:2d:f2:ad:ef:27:36:57:1b:0e:63:d4:88:24:1e:ba:76:f9:
         b7:90:7c:cd:a9:c6:7d:b8:cb:92:6e:3e:8b:27:11:06:c7:47:
         80:5a:99:e5:a7:d2:6f:0a:58:14:a0:51:75:d1:76:0f:7e:41:
         c4:0b:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:23:22 2026 by rpki-client