Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
File:                     PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json)
Hash identifier:          9wtDxmxDTGpz33BGKJm/TTTA8dkoMimiNq99h+tV+QE=
Subject key identifier:   56:AF:00:AB:B7:FF:21:1C:F6:FF:4B:FF:4A:26:16:97:DF:66:1C:66
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Certificate issuer:       /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial:       019D26CD61C4FDA4B8B361D634317FFA0C96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
Manifest number:          0886
Signing time:             Wed 25 Mar 2026 21:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:27 +0000
Files and hashes:         1: 0scV3UlCupRHGS6g1h-BrwrwEKU.roa (hash: pa6E5GUAG5mBRmb6nVG4qfg+RLPtEAD+EZ54AovucyE=)
                          2: 1jUxjKBP0ewbKykrBmXN2Uv7y2U.roa (hash: xE6sRa3DTTD5nNX1zDSktxn7FqcwqAPXm9HRxByDF/c=)
                          3: 71Ewp1n9Qo6F0iW_UrrQ0oIN3DU.roa (hash: R2PacJbb/HyRYwcfVm4XOQFUlae+hBB/iU+Z6f163zA=)
                          4: OKfVJiOZcBF7lwrejSVbnp-mJlM.roa (hash: Xi8UZye71hwHlDGIb4Ds6g7ARS6UAoAe2f0dvg0x25c=)
                          5: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: zqjdgy2cXoYmc5Mq3UMNalxvOIdULJktqVQPpnNEFgY=)
                          6: rvrvO7khvGz4rJ3nZaxA_U0aIbY.roa (hash: kQhxnU+CRwoQ25mo4Up88vGMY8Gm4YSKOXHtcexGtww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:61:c4:fd:a4:b8:b3:61:d6:34:31:7f:fa:0c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
        Validity
            Not Before: Mar 25 21:01:27 2026 GMT
            Not After : Mar 26 21:01:27 2026 GMT
        Subject: CN=56af00abb7ff211cf6ff4bff4a261697df661c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:4e:88:48:7f:82:86:0e:d7:23:67:80:7b:
                    9c:d4:23:f6:32:15:f2:d0:99:9b:c6:31:e7:b4:f8:
                    2d:57:46:78:1e:5c:0b:8e:4b:bd:a3:79:ca:08:9d:
                    01:90:9f:5a:df:74:a5:4f:5f:f0:a6:22:9e:36:91:
                    d0:10:ff:81:49:91:94:1d:9c:ca:17:0e:ee:a2:8a:
                    9e:0a:f5:c9:92:71:4a:f4:1b:73:cd:24:3b:77:52:
                    13:6e:2f:ce:e6:2b:49:fd:d8:5b:f7:7e:3e:7a:54:
                    8c:89:96:90:17:46:29:3a:91:56:ad:49:90:d3:70:
                    42:af:e6:d8:22:d1:ed:58:ad:a7:0d:84:d7:32:88:
                    64:5b:aa:a6:01:57:86:81:9a:49:9a:c1:db:9e:01:
                    18:ff:71:33:9e:f8:88:83:98:94:e9:a8:58:da:de:
                    9f:48:c4:82:49:f4:a6:91:8a:46:db:4b:2e:be:e5:
                    4a:be:04:a7:28:e3:01:db:2b:ef:16:9c:14:c1:d1:
                    6c:f4:01:67:d4:1b:3c:90:cf:79:8f:09:56:df:5d:
                    a3:51:67:b2:78:20:a4:2f:49:96:01:9c:72:ce:5a:
                    1a:8d:83:c6:32:6b:f7:a3:04:69:4d:a6:4c:9f:3c:
                    b8:64:34:e1:1c:0e:4f:87:59:d7:a4:c8:b4:fe:fb:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AF:00:AB:B7:FF:21:1C:F6:FF:4B:FF:4A:26:16:97:DF:66:1C:66
            X509v3 Authority Key Identifier:
                keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0a:59:09:77:fb:41:7f:8f:7c:41:69:66:da:31:13:23:5e:
         b1:77:0d:f6:8e:93:1f:f6:59:35:c8:23:eb:06:f5:5e:f6:85:
         22:8d:d7:e9:a4:a6:ba:44:bd:11:e5:ac:8a:c0:7e:1a:4f:49:
         fb:2f:7d:eb:2b:92:69:73:d7:51:2a:0a:78:cd:59:5d:1e:a3:
         7f:75:a7:0c:92:e6:c1:52:33:eb:e6:dc:7e:f0:aa:2d:e3:8f:
         ab:44:c7:6d:ad:5a:f8:81:dc:23:65:86:62:06:62:13:e3:e2:
         aa:72:c1:49:9b:21:75:0b:e2:c5:9a:c1:32:60:4a:da:1e:4b:
         6b:46:bb:43:3e:a6:66:a8:c0:25:2e:cc:c5:6a:55:6d:86:14:
         00:c8:da:05:89:2c:ae:6e:15:dd:9b:ff:ca:f0:9e:d6:c1:1c:
         27:78:94:eb:24:c5:97:3f:ee:97:72:d2:f1:f2:9d:ba:37:ac:
         64:58:53:67:f2:96:6b:ba:16:49:50:9e:d2:72:49:16:c6:74:
         bd:66:24:ab:85:a3:47:5a:ec:a3:a2:c2:75:02:5e:f9:c5:9d:
         f0:c4:8d:c3:fe:1c:c3:61:bd:af:8a:1d:4b:ea:74:a2:40:67:
         19:3b:ad:d3:d3:a2:a5:4e:00:8a:d1:cf:0c:c5:ba:03:ed:17:
         4b:4d:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:16 2026 by rpki-client