Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
File:                     Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json)
Hash identifier:          PkZp17z0wfDkjhdFdDs4UAPZ7KFHLjicvr+Ly5kO14Y=
Subject key identifier:   56:D1:9D:A3:01:09:10:0E:ED:20:0F:7B:32:68:16:C9:04:73:3F:7B
Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Certificate issuer:       /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Certificate serial:       019F935A96DFB7AA32AB12237CFACA35EE56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
Manifest number:          02F3
Signing time:             Fri 24 Jul 2026 09:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:15 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:15 +0000
Files and hashes:         1: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: BAncG3l3xpbg2Zs1FS+Ei2qlRBWO8vSiHFLn4Utx0hI=)
                          2: WQ_j-qqDR5HktP06sg7xONRh0BE.roa (hash: IEt/v53hTQ/BgADum+kvHIi5QkAMcCA3KyS/Nvrh4FM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:96:df:b7:aa:32:ab:12:23:7c:fa:ca:35:ee:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
        Validity
            Not Before: Jul 24 09:00:15 2026 GMT
            Not After : Jul 25 09:00:15 2026 GMT
        Subject: CN=56d19da30109100eed200f7b326816c904733f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:83:54:be:fb:d5:0e:a9:19:0d:ed:95:20:
                    60:76:e1:8a:7b:32:08:24:f0:f0:9b:a5:08:56:2e:
                    d0:f3:1e:bc:01:ec:50:98:b9:1e:f9:eb:df:34:05:
                    54:d7:0d:4c:8f:68:85:67:09:ee:11:99:62:d6:1d:
                    fe:9d:c2:da:f6:82:4d:93:3c:ff:82:bb:72:17:e2:
                    90:72:3b:ad:1e:3e:47:9d:68:fc:8f:e9:c4:01:21:
                    4b:4e:68:6e:58:b6:bf:61:47:7d:0c:1f:24:ed:72:
                    f5:8e:f8:2c:4e:ef:5c:07:40:24:88:d8:d8:57:1d:
                    16:d2:04:8e:5d:d5:f2:40:a0:0d:91:73:5b:65:85:
                    46:0b:71:e1:6f:99:41:6f:fa:c4:d0:c8:21:00:eb:
                    cd:46:05:da:b4:4e:6b:d4:42:0d:9d:1e:5a:6c:24:
                    6c:c6:d0:75:56:31:08:f9:6b:d6:72:9c:ef:53:5f:
                    b5:40:82:d7:1c:74:3e:46:7a:f7:3d:c2:d3:50:5e:
                    af:08:f8:71:a1:12:79:0d:b1:3d:25:53:17:1a:b0:
                    26:de:a7:c5:23:3f:4c:85:88:cd:79:cb:09:16:80:
                    8c:cc:2b:5f:3a:68:6c:f4:7c:2f:a9:69:7a:e8:38:
                    b3:e2:7e:24:91:98:ea:a0:e9:70:51:b7:6b:e9:ee:
                    e5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D1:9D:A3:01:09:10:0E:ED:20:0F:7B:32:68:16:C9:04:73:3F:7B
            X509v3 Authority Key Identifier:
                keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0e:8b:92:55:5e:4b:c8:83:18:77:11:ad:f2:93:32:f0:70:
         cd:4f:86:a9:31:0c:84:5b:70:75:93:75:be:13:32:c8:1d:5f:
         e3:08:73:55:02:6d:2c:a9:7e:b3:69:00:9a:a4:e1:b8:2c:ff:
         48:ca:ff:9d:3f:94:00:ad:cf:94:80:87:24:b5:05:bb:34:24:
         bd:bd:56:f9:76:76:08:09:7f:3a:de:d5:d7:19:16:74:5f:b9:
         6d:ec:4d:fd:c4:63:2f:44:df:bb:02:9b:5e:00:ce:b2:68:2e:
         66:76:9d:bd:e8:8d:57:aa:83:4c:db:26:4b:91:a7:19:c2:20:
         f3:2d:c9:01:9c:ca:5f:93:62:57:e8:c7:3f:49:5d:c2:4e:44:
         a7:7e:ad:8b:7a:98:bc:06:b8:32:98:ac:08:a5:31:d1:f3:a0:
         98:5f:aa:a5:f6:5a:1b:89:d2:e6:55:9c:31:da:54:c4:e8:da:
         4a:2a:e4:9d:94:6f:7b:79:8e:06:96:3b:a0:40:af:cb:c4:0d:
         6c:33:22:84:16:b8:be:4b:7a:4a:76:77:51:c1:03:a2:7f:06:
         70:3a:ec:7f:9a:d1:3b:7d:d7:65:9c:40:0d:dc:15:df:37:5f:
         c6:97:e0:14:b8:df:9b:ad:1c:be:19:27:51:7a:9f:63:c3:ba:
         c4:f3:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:04:35 2026 by rpki-client