Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
File:                     PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft (raw, json)
Hash identifier:          qrDEzmgeQEYHMtgRL3niFjq+zptU4pK7kfCxkK5dHy0=
Subject key identifier:   20:2E:7D:49:C3:B4:32:36:60:FA:D5:8F:FE:6A:21:09:8D:BD:7D:5C
Authority key identifier: 3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
Certificate issuer:       /CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Certificate serial:       019F8FECB5F8BD5E14FFAC4B7DAE72AEBE45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
Manifest number:          0163
Signing time:             Thu 23 Jul 2026 17:01:22 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:22 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:22 +0000
Files and hashes:         1: PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl (hash: Nw+C3RLZRhGNP7j/LTKZSg9Hyz9zu+F2ii5NliaoZmE=)
                          2: jgpzu-ESfiekXnmQsWtfxfFMnls.roa (hash: VKgBSq4j9tQnrdlFEiguu7TMFYsGEpDcXU1dHxHAkww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:b5:f8:bd:5e:14:ff:ac:4b:7d:ae:72:ae:be:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
        Validity
            Not Before: Jul 23 17:01:22 2026 GMT
            Not After : Jul 24 17:01:22 2026 GMT
        Subject: CN=202e7d49c3b4323660fad58ffe6a21098dbd7d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:20:25:7a:79:49:95:12:50:37:0c:d5:de:fe:
                    2e:04:67:ef:52:ba:d4:82:12:b6:02:47:6e:89:03:
                    a7:ca:96:69:9f:4d:44:e5:15:63:8c:b0:b7:10:b8:
                    52:27:b9:19:ff:0e:6e:57:8d:5b:ed:c4:c9:74:64:
                    fe:f6:70:0c:6d:b7:36:a5:43:84:5b:6e:0e:66:5b:
                    b9:06:7e:0a:e2:d6:e6:34:1d:6e:48:76:a9:28:a8:
                    4b:ca:c5:32:59:bb:01:bc:af:fe:8d:a9:01:1f:6c:
                    c5:a3:80:1e:f8:8a:ec:30:22:58:1b:be:8d:c4:b5:
                    a7:79:50:a6:ac:7f:8d:13:7b:47:c4:6a:81:8b:d1:
                    9a:9a:31:70:c3:14:8c:1a:45:e8:0f:22:10:db:cf:
                    5c:06:c0:34:e0:52:3f:c3:c1:4c:71:3c:4c:d1:ec:
                    af:68:59:50:23:a7:f6:00:0b:f3:8e:3d:90:08:f3:
                    b7:77:f2:14:1a:fd:2b:15:8b:fb:c1:14:07:5d:5c:
                    67:82:7f:35:39:03:83:fd:30:05:d9:fa:cd:e7:ba:
                    15:08:a1:14:e9:cd:c0:88:b0:7b:2f:f5:b0:8e:0b:
                    e4:47:0a:60:03:be:fb:e2:a1:f2:6d:47:b1:07:57:
                    fc:b3:36:32:f7:e8:11:f4:5b:c7:76:14:ff:f3:2b:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2E:7D:49:C3:B4:32:36:60:FA:D5:8F:FE:6A:21:09:8D:BD:7D:5C
            X509v3 Authority Key Identifier:
                keyid:3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:71:2d:60:cf:0f:f5:01:72:37:07:f1:69:e0:e8:72:ca:8f:
         00:c8:0b:82:32:17:05:40:99:90:56:30:76:ab:92:cb:3b:dc:
         cf:12:13:1d:c2:13:b9:92:1d:da:f0:fa:06:36:4f:74:da:bd:
         9d:eb:e3:48:c1:33:64:43:e7:d6:dd:92:15:2d:3e:9f:21:fe:
         d4:ba:89:c0:71:2e:58:e8:da:c2:43:72:5c:98:90:a5:82:3f:
         d9:9b:03:6f:af:d9:52:21:dd:bd:d0:44:fc:21:72:19:59:92:
         05:6b:cf:99:81:02:a3:02:73:6f:4d:7e:7d:01:9c:e7:6e:23:
         f1:0c:f9:2a:6a:d8:0e:16:65:db:97:71:26:a5:e3:1c:db:df:
         77:1c:f0:00:ea:72:da:f6:cd:94:81:12:59:88:92:f0:50:88:
         4a:24:b2:7b:b9:02:a8:12:72:84:9f:4b:b4:4e:88:8a:c6:18:
         70:0e:bd:5d:ae:66:85:c0:cd:a7:8e:e8:f4:ec:9a:00:9c:b7:
         e6:9b:3e:84:23:60:54:85:ea:14:07:d5:19:11:b3:75:7e:3e:
         df:bb:11:1d:0b:cd:c7:a7:cc:83:c2:8e:7b:b1:9e:e5:f3:69:
         a4:cc:b1:74:a0:18:a6:6a:f8:08:3b:7e:15:01:07:17:21:fb:
         8b:ca:a1:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7LX4vV4U/6xLfa5yrr5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjg4MjBhNmIxMDIwZWM2ZTIyYmM3NzE2ZmVkOGU1MjBh
ZDI2NjQwHhcNMjYwNzIzMTcwMTIyWhcNMjYwNzI0MTcwMTIyWjAzMTEwLwYDVQQD
EygyMDJlN2Q0OWMzYjQzMjM2NjBmYWQ1OGZmZTZhMjEwOThkYmQ3ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiAlenlJlRJQNwzV3v4uBGfvUrrU
ghK2AkduiQOnypZpn01E5RVjjLC3ELhSJ7kZ/w5uV41b7cTJdGT+9nAMbbc2pUOE
W24OZlu5Bn4K4tbmNB1uSHapKKhLysUyWbsBvK/+jakBH2zFo4Ae+IrsMCJYG76N
xLWneVCmrH+NE3tHxGqBi9GamjFwwxSMGkXoDyIQ289cBsA04FI/w8FMcTxM0eyv
aFlQI6f2AAvzjj2QCPO3d/IUGv0rFYv7wRQHXVxngn81OQOD/TAF2frN57oVCKEU
6c3AiLB7L/WwjgvkRwpgA7774qHybUexB1f8szYy9+gR9FvHdhT/8ytN7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAufUnDtDI2YPrVj/5qIQmNvX1cMB8GA1UdIwQY
MBaAFD24ggprECDsbiK8dxb+2OUgrSZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJpQ0Ntc1FJT3h1SXJ4M0Z2N1k1U0N0Sm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mYzllMWYtNWZmMi00ZTgyLWI4MWMt
Y2Q0NjM5MjdmMGYwLzEvUGJpQ0Ntc1FJT3h1SXJ4M0Z2N1k1U0N0Sm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mYzllMWYtNWZmMi00ZTgyLWI4MWMtY2Q0NjM5MjdmMGYw
LzEvUGJpQ0Ntc1FJT3h1SXJ4M0Z2N1k1U0N0Sm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXEtYM8P
9QFyNwfxaeDocsqPAMgLgjIXBUCZkFYwdquSyzvczxITHcITuZId2vD6BjZPdNq9
nevjSMEzZEPn1t2SFS0+nyH+1LqJwHEuWOjawkNyXJiQpYI/2ZsDb6/ZUiHdvdBE
/CFyGVmSBWvPmYECowJzb01+fQGc524j8Qz5KmrYDhZl25dxJqXjHNvfdxzwAOpy
2vbNlIESWYiS8FCISiSye7kCqBJyhJ9LtE6IisYYcA69Xa5mhcDNp47o9OyaAJy3
5ps+hCNgVIXqFAfVGRGzdX4+37sRHQvNx6fMg8KOe7Ge5fNppMyxdKAYpmr4CDt+
FQEHFyH7i8qhxg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:38 2026 by rpki-client