Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
File:                     Ph_ROPEC19yxWDtElBAvD-WH5F0.mft (raw, json)
Hash identifier:          mR1AlOzCIIPTJKvF0pyyDj7wdxaSsWLq+nLLSKNS0m4=
Subject key identifier:   D4:4B:84:70:91:74:AA:61:54:28:80:D1:63:1D:C9:C5:E3:82:11:9F
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Certificate issuer:       /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial:       01A0EE8B4DB1FE8D32F8054961956FA437EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
Manifest number:          1A7E
Signing time:             Tue 29 Sep 2026 19:01:41 +0000
Manifest this update:     Tue 29 Sep 2026 19:01:41 +0000
Manifest next update:     Wed 30 Sep 2026 19:01:41 +0000
Files and hashes:         1: 5WlkBW9jzB02ilWwcESnZBhBZcw.roa (hash: BeHCp8no7SRXOueP/j4ph7p2OgVkylIBkA/kOhEkKPk=)
                          2: Ph_ROPEC19yxWDtElBAvD-WH5F0.crl (hash: czoyw2yw+C8YcA19NHzALnqFfmEFUVLkebEqakLHk40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:8b:4d:b1:fe:8d:32:f8:05:49:61:95:6f:a4:37:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
        Validity
            Not Before: Sep 29 19:01:41 2026 GMT
            Not After : Sep 30 19:01:41 2026 GMT
        Subject: CN=d44b84709174aa61542880d1631dc9c5e382119f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:b5:f9:06:d0:1e:29:0c:dd:36:80:10:f1:
                    ec:d4:99:f1:6f:4b:5a:7e:f9:29:39:a3:c6:bc:3e:
                    1d:28:27:1c:4c:d3:b1:3d:87:ea:61:02:68:2c:8e:
                    5e:37:83:a3:5c:e5:10:db:1f:14:d9:0a:db:9d:18:
                    cb:53:b3:a9:d3:01:ea:cc:03:01:3b:af:10:d1:f8:
                    3f:8f:b9:91:f9:53:79:f3:09:46:9e:9f:07:ef:20:
                    81:45:50:f1:7d:00:bb:f7:e2:bb:e9:63:a3:e9:6a:
                    ab:e4:24:83:86:ef:43:d6:64:c1:18:af:e5:56:75:
                    56:ff:06:8d:a9:61:1b:2e:a9:36:cc:de:f0:61:95:
                    b1:14:84:77:ac:5e:15:04:59:0a:dd:06:39:d8:76:
                    45:d3:03:23:f1:40:16:28:7e:86:70:cb:af:a8:c5:
                    1c:74:38:24:03:90:89:a8:5e:30:c4:c1:f1:c0:fe:
                    af:79:04:b8:52:96:8a:e0:05:b6:71:63:af:4b:51:
                    c6:d5:52:97:70:98:be:30:13:5a:b3:27:47:5c:00:
                    1f:6c:2e:9b:8d:86:24:c1:1d:eb:f9:5c:18:4f:d7:
                    56:ba:bb:23:99:0a:b2:16:3c:db:87:22:bb:69:c2:
                    48:04:cd:f3:7d:17:89:96:ef:41:cf:cf:ca:ae:82:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:84:70:91:74:AA:61:54:28:80:D1:63:1D:C9:C5:E3:82:11:9F
            X509v3 Authority Key Identifier:
                keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b3:88:0c:c9:27:1b:4c:dd:ee:c7:85:fa:20:25:f6:f0:57:
         f8:ec:c2:cc:68:00:b4:da:06:f5:8e:ab:74:7c:9b:14:88:ed:
         76:75:e2:5c:80:3b:31:b5:84:f5:27:5d:77:ec:6f:40:4e:28:
         4d:ef:cf:66:0c:62:dc:87:d6:64:e6:57:dc:e0:2c:e2:cc:fd:
         6e:48:64:4b:1c:73:43:ef:a6:62:53:fa:b6:bb:23:bd:b1:a2:
         bc:c5:50:4e:60:f1:f7:9a:78:ce:eb:be:4c:15:39:fb:03:77:
         ef:87:5a:48:92:fd:8e:80:22:42:75:8c:0c:35:18:aa:be:6c:
         a4:36:d6:41:eb:92:7a:95:fe:0d:44:89:bf:1f:c3:24:6e:fe:
         72:2d:78:28:d0:e7:4e:db:8d:14:37:0f:1b:9b:cd:eb:65:89:
         27:ac:d6:d8:65:67:ea:35:bc:d1:aa:95:8b:0d:0b:ed:69:db:
         4b:fd:f1:26:81:b1:d1:5f:d3:7d:bb:eb:ad:63:83:82:7d:0b:
         d3:db:06:15:f3:a8:68:74:0e:66:c8:e8:d1:ab:2a:c0:53:3d:
         5e:a0:37:e8:a7:9a:c4:ff:67:aa:f4:9c:68:8d:94:03:fb:96:
         47:29:7b:77:f6:30:4a:6f:f9:98:ae:dd:51:2d:5f:71:a6:20:
         2a:bf:8e:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDui02x/o0y+AVJYZVvpDfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWZkMTM4ZjEwMmQ3ZGNiMTU4M2I0NDk0MTAyZjBmZTU4
N2U0NWQwHhcNMjYwOTI5MTkwMTQxWhcNMjYwOTMwMTkwMTQxWjAzMTEwLwYDVQQD
EyhkNDRiODQ3MDkxNzRhYTYxNTQyODgwZDE2MzFkYzljNWUzODIxMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQS1+QbQHikM3TaAEPHs1Jnxb0ta
fvkpOaPGvD4dKCccTNOxPYfqYQJoLI5eN4OjXOUQ2x8U2QrbnRjLU7Op0wHqzAMB
O68Q0fg/j7mR+VN58wlGnp8H7yCBRVDxfQC79+K76WOj6Wqr5CSDhu9D1mTBGK/l
VnVW/waNqWEbLqk2zN7wYZWxFIR3rF4VBFkK3QY52HZF0wMj8UAWKH6GcMuvqMUc
dDgkA5CJqF4wxMHxwP6veQS4UpaK4AW2cWOvS1HG1VKXcJi+MBNasydHXAAfbC6b
jYYkwR3r+VwYT9dWursjmQqyFjzbhyK7acJIBM3zfReJlu9Bz8/KroKcZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRLhHCRdKphVCiA0WMdycXjghGfMB8GA1UdIwQY
MBaAFD4f0TjxAtfcsVg7RJQQLw/lh+RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kMGMzZTUtOTljNS00ZjEyLTlkYTIt
YzU5ZTk0YmZmNzQzLzEvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kMGMzZTUtOTljNS00ZjEyLTlkYTItYzU5ZTk0YmZmNzQz
LzEvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7OIDMkn
G0zd7seF+iAl9vBX+OzCzGgAtNoG9Y6rdHybFIjtdnXiXIA7MbWE9Sddd+xvQE4o
Te/PZgxi3IfWZOZX3OAs4sz9bkhkSxxzQ++mYlP6trsjvbGivMVQTmDx95p4zuu+
TBU5+wN374daSJL9joAiQnWMDDUYqr5spDbWQeuSepX+DUSJvx/DJG7+ci14KNDn
TtuNFDcPG5vN62WJJ6zW2GVn6jW80aqViw0L7WnbS/3xJoGx0V/TfbvrrWODgn0L
09sGFfOoaHQOZsjo0asqwFM9XqA36KeaxP9nqvScaI2UA/uWRyl7d/YwSm/5mK7d
US1fcaYgKr+OCw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 04:00:30 2026 by rpki-client