Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File:                     PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier:          yGdUK5nBEyWhwLd9DUoh2kG2rGogrqgSnnIBLohh1Mc=
Subject key identifier:   51:FF:31:05:54:C8:D2:2B:5E:DF:36:F6:7C:A1:3B:89:24:76:DD:04
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer:       /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial:       01A0EF9D65D09B2B2C0CC8E0DB7102A67673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number:          0C34
Signing time:             Wed 30 Sep 2026 00:01:04 +0000
Manifest this update:     Wed 30 Sep 2026 00:01:04 +0000
Manifest next update:     Thu 01 Oct 2026 00:01:04 +0000
Files and hashes:         1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: 6F1IrL+VC0c4Wkud3pm7wTfe37F5OTKtnxbR3op/aNg=)
                          2: fUppB1VDu1vL2ViKYL-vIqtVeA8.roa (hash: I/nIKmlTZJsaPW6FiqmV19GI9Y+ltPvlFVp7DDT67CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:9d:65:d0:9b:2b:2c:0c:c8:e0:db:71:02:a6:76:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
        Validity
            Not Before: Sep 30 00:01:04 2026 GMT
            Not After : Oct  1 00:01:04 2026 GMT
        Subject: CN=51ff310554c8d22b5edf36f67ca13b892476dd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:4b:be:72:35:48:bd:62:ef:f7:95:a2:35:
                    b1:92:be:42:ea:7f:de:4a:86:49:e2:96:d2:c6:87:
                    97:28:08:5c:9b:37:f4:7c:80:89:47:f3:6e:5f:79:
                    e1:d8:cb:8e:3c:d2:34:1e:dd:1e:f0:0d:0f:94:68:
                    15:7c:dd:8d:fd:e4:4d:ca:1d:90:88:8c:81:e3:d6:
                    e8:83:49:fd:09:a9:f0:a5:d9:7a:5e:a3:fb:f6:60:
                    53:90:7f:9d:4e:62:26:2a:a0:d2:28:b0:cd:da:9b:
                    b1:32:ee:63:d7:3a:ca:5f:0b:38:ed:d0:aa:32:f6:
                    d5:c7:74:51:0f:f8:07:5a:65:06:a4:38:f3:b2:95:
                    cc:a1:c5:4d:9f:a2:9e:b3:c0:84:5f:35:e4:5d:e4:
                    2e:cb:d6:68:81:b0:6f:97:2b:b3:1a:74:ae:4c:f6:
                    94:35:92:53:23:03:ae:60:a8:ce:7b:e8:4d:45:d6:
                    87:d6:d8:4b:56:b9:78:c4:df:9d:ad:e0:25:62:bb:
                    07:c5:1b:c1:d0:ee:18:04:71:86:11:e5:ce:37:ac:
                    22:2e:1c:45:42:e0:c6:97:ae:d8:07:e7:4e:5d:b1:
                    dc:c3:a9:6f:ee:9b:28:74:69:db:a3:94:2c:7f:2c:
                    d7:55:e2:10:75:82:87:8e:7f:db:a4:4c:6d:fa:d9:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FF:31:05:54:C8:D2:2B:5E:DF:36:F6:7C:A1:3B:89:24:76:DD:04
            X509v3 Authority Key Identifier:
                keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:a8:10:37:7f:bb:96:cd:08:80:41:9a:65:83:08:64:0f:
         b9:0e:0e:2b:81:7b:73:0c:d0:c1:e9:8f:31:ea:d3:6f:c6:52:
         93:86:20:6e:61:55:7a:b9:33:66:40:58:60:f7:c8:9c:7c:00:
         97:ef:5d:de:f7:21:be:95:91:5f:e6:bb:e2:37:1e:c6:ee:5a:
         bd:55:7c:f0:d6:1d:17:a2:05:1c:4c:43:13:7f:d1:a6:7c:77:
         3d:41:b9:55:99:6e:78:8e:b7:1b:d4:60:c7:6e:2b:3b:2d:d3:
         96:10:62:94:72:82:54:75:a0:79:00:fe:08:e3:6e:62:ae:94:
         4d:a9:8b:a8:3b:ae:bd:b4:2c:d5:11:db:49:38:8c:45:0c:21:
         b1:d6:5c:f1:96:74:7a:18:4e:75:51:79:c5:c7:76:71:ed:f9:
         e4:d5:b7:48:fa:4f:5b:d7:48:ef:07:ef:43:55:3d:ec:27:d2:
         b7:6d:62:f6:06:34:c5:a8:77:db:70:b4:06:13:9e:6e:e5:56:
         a5:67:a2:c9:65:58:01:fa:60:ad:37:48:77:90:6b:7d:cc:df:
         e3:37:1a:e5:58:e0:40:75:af:74:85:39:65:0d:0d:3c:f3:b5:
         31:7f:bf:f1:f7:5f:c3:fc:1d:1e:a5:38:64:ca:67:db:4e:02:
         16:9b:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:25:22 2026 by rpki-client