Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File:                     pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier:          bSByG8FFfqQPOd8ToCpjGu4+TA6qpHub9kG3Y1VEKjc=
Subject key identifier:   6C:26:8F:5C:26:3D:26:83:A0:14:FF:6B:3E:20:1A:76:DB:3F:05:9C
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer:       /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial:       019F8EA2D3E8BAE3CACC288D3D6DF1D1952B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number:          0692
Signing time:             Thu 23 Jul 2026 11:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:03 +0000
Files and hashes:         1: etwq045QwrYSI43CEOYjoWhjPf0.asa (hash: mHkOUoBleSqHfxS4Acb4TfhU8G2G9TKcdYd1R4Gd4OM=)
                          2: l2imbiusoMKFDayNbJoOchhQjKo.roa (hash: YYelOZGI0tep3ojBK7JJq7+uS3WslSPQkey1gLDWKRs=)
                          3: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: 9KgrThnIw/3ZM07v15J8EdW9e7E3LLSxy+sUC+5yhio=)
                          4: sqjDR9C3yuWgeDEW-u7FZq2GXwI.roa (hash: /0Ln3Zg2sTICpShIMihehk8+YHZcL9xlacfJl1AeuPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:d3:e8:ba:e3:ca:cc:28:8d:3d:6d:f1:d1:95:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
        Validity
            Not Before: Jul 23 11:01:03 2026 GMT
            Not After : Jul 24 11:01:03 2026 GMT
        Subject: CN=6c268f5c263d2683a014ff6b3e201a76db3f059c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:e7:fb:a3:3c:85:e2:a3:90:32:6f:ce:44:
                    4e:35:ab:fb:c8:a0:ab:b0:28:c2:20:9a:2a:7b:3c:
                    97:6d:34:75:5d:0d:8c:14:0f:72:42:b9:95:61:bc:
                    89:02:0a:aa:36:e8:8d:83:7b:6c:67:1e:30:4d:ff:
                    dd:b2:23:91:48:99:cd:ae:d7:33:5c:7f:d9:6c:84:
                    9a:e0:e6:5e:af:35:70:18:1f:76:46:44:96:3c:09:
                    57:54:c9:ba:f7:8c:15:60:f8:16:6f:39:0d:96:95:
                    38:86:ed:81:0e:d0:ed:b7:ca:f3:70:8b:13:66:2a:
                    ec:0e:6f:72:ac:0b:8e:b1:22:49:be:c2:60:7f:75:
                    51:ab:0e:ec:33:b4:a2:76:22:fd:35:0d:ec:73:10:
                    23:2b:28:af:7a:38:f2:b1:50:4d:57:25:bb:11:14:
                    b1:37:bf:0f:be:d5:07:11:e9:b4:a6:e1:f8:f6:7a:
                    0c:82:aa:75:80:0c:fa:53:7a:60:86:4d:0d:22:cb:
                    e7:d2:7f:c5:4b:8f:33:2e:fb:77:84:31:64:94:3d:
                    1a:5c:19:b2:62:87:49:e8:20:8b:76:34:13:a6:33:
                    ef:91:76:2b:1b:2e:f6:a7:bb:98:c7:bf:2c:9f:5a:
                    04:61:ee:59:c8:21:dc:78:c9:0e:c0:bc:53:d3:0d:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:26:8F:5C:26:3D:26:83:A0:14:FF:6B:3E:20:1A:76:DB:3F:05:9C
            X509v3 Authority Key Identifier:
                keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:e5:3c:59:a5:eb:25:3a:77:22:29:e9:4f:c2:c8:8a:31:
         4b:bc:48:a2:9b:ac:a3:e7:d5:02:87:ae:30:3b:82:f1:a4:e4:
         47:49:30:05:7b:f1:18:bd:41:19:b7:7c:e5:a2:e5:5d:10:49:
         3e:f2:8d:de:03:21:9a:19:c2:6c:05:bd:8f:7a:70:a9:60:d5:
         76:8d:de:32:5d:68:dc:bf:3d:d6:8b:53:ba:54:82:7d:29:49:
         77:22:50:91:81:d7:fc:9e:d6:4f:6b:08:99:73:78:49:88:17:
         a8:b2:f6:4b:83:23:44:c9:8b:bb:0c:f9:0f:4e:ad:ff:b0:18:
         21:ec:5b:09:15:3f:f8:3b:0a:a1:96:4c:97:e3:a8:53:3a:ae:
         18:6e:2c:da:69:36:7a:9f:5f:fb:f5:35:c4:90:b7:d2:ba:71:
         c2:e5:07:13:84:58:98:66:c4:5c:87:4b:af:5e:24:46:87:56:
         3d:68:8c:2b:21:1f:c0:98:65:e9:f6:4d:fc:91:f5:ec:08:f3:
         e9:43:17:c2:5a:52:94:cb:68:89:54:fa:ba:a8:dc:a6:03:5d:
         9e:f7:2a:d5:36:e4:e0:e0:62:62:48:dd:69:67:84:25:3b:ed:
         5f:ad:b6:5a:e7:0e:a5:ab:fb:1d:33:3a:fa:c1:87:28:1d:25:
         67:6b:dc:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OotPouuPKzCiNPW3x0ZUrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZjZhNzFhMTgwZGNmOGIyMzBjNDE0ZjA5ZjdiNzFiYWVh
OTc4MWMwHhcNMjYwNzIzMTEwMTAzWhcNMjYwNzI0MTEwMTAzWjAzMTEwLwYDVQQD
Eyg2YzI2OGY1YzI2M2QyNjgzYTAxNGZmNmIzZTIwMWE3NmRiM2YwNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTXn+6M8heKjkDJvzkRONav7yKCr
sCjCIJoqezyXbTR1XQ2MFA9yQrmVYbyJAgqqNuiNg3tsZx4wTf/dsiORSJnNrtcz
XH/ZbISa4OZerzVwGB92RkSWPAlXVMm694wVYPgWbzkNlpU4hu2BDtDtt8rzcIsT
ZirsDm9yrAuOsSJJvsJgf3VRqw7sM7SidiL9NQ3scxAjKyivejjysVBNVyW7ERSx
N78PvtUHEem0puH49noMgqp1gAz6U3pghk0NIsvn0n/FS48zLvt3hDFklD0aXBmy
YodJ6CCLdjQTpjPvkXYrGy72p7uYx78sn1oEYe5ZyCHceMkOwLxT0w0kvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwmj1wmPSaDoBT/az4gGnbbPwWcMB8GA1UdIwQY
MBaAFKX2pxoYDc+LIwxBTwn3txuuqXgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2Mt
NjY2MDIzOGIwM2NlLzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2MtNjY2MDIzOGIwM2Nl
LzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5LlPFml
6yU6dyIp6U/CyIoxS7xIopuso+fVAoeuMDuC8aTkR0kwBXvxGL1BGbd85aLlXRBJ
PvKN3gMhmhnCbAW9j3pwqWDVdo3eMl1o3L891otTulSCfSlJdyJQkYHX/J7WT2sI
mXN4SYgXqLL2S4MjRMmLuwz5D06t/7AYIexbCRU/+DsKoZZMl+OoUzquGG4s2mk2
ep9f+/U1xJC30rpxwuUHE4RYmGbEXIdLr14kRodWPWiMKyEfwJhl6fZN/JH17Ajz
6UMXwlpSlMtoiVT6uqjcpgNdnvcq1Tbk4OBiYkjdaWeEJTvtX622WucOpav7HTM6
+sGHKB0lZ2vcgg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:27 2026 by rpki-client