Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
File:                     PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft (raw, json)
Hash identifier:          6bo7lGwKkbmVR9oFlJYgJGGxr1LKbpSAakV6qMu1Gh4=
Subject key identifier:   4E:87:B0:23:20:27:B4:D0:2A:46:71:45:75:80:C2:B5:01:4B:55:01
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Certificate issuer:       /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial:       01A0D57088E8D716DD3E4B26DC55C54DD6ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
Manifest number:          1A70
Signing time:             Thu 24 Sep 2026 22:01:56 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:56 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:56 +0000
Files and hashes:         1: PAgTss81EypznIUSXUrAempw_so.roa (hash: hVAKVYVtH7pfRFO9nXZRlBkZwPvwRW2v9xDHqxcNeV0=)
                          2: PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl (hash: KRYNIp4Ru8FRfRHIiz3yLJAXN9CyCK/+8KV8P2MxqkM=)
                          3: g873udppqiGZfDfxEVPwS0fN2iE.roa (hash: vGYcXaCIiPom9FCy5Ogp8Jq2cO/kNZJXFstzgmVZSYM=)
                          4: o8OHfV95jFDGQMcKlS4Elzm403c.roa (hash: wX1Olvy8rFtI4rUY+LS6paVP5fazc6rWqyHgWeMMLFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:88:e8:d7:16:dd:3e:4b:26:dc:55:c5:4d:d6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
        Validity
            Not Before: Sep 24 22:01:56 2026 GMT
            Not After : Sep 25 22:01:56 2026 GMT
        Subject: CN=4e87b0232027b4d02a4671457580c2b5014b5501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:3d:f1:1e:df:8e:c0:12:4d:90:b8:3f:2b:
                    f7:cb:87:d0:2d:b6:89:57:32:95:bd:5c:91:db:69:
                    d2:5f:4e:84:88:88:91:f2:dd:dc:78:9e:d4:3b:f6:
                    18:0f:29:24:e6:74:0b:94:f9:f1:05:52:f0:f2:68:
                    75:7a:64:aa:d8:a8:86:57:1d:16:d3:1e:ae:67:ba:
                    c8:f2:20:74:48:fe:45:74:51:46:b8:79:8d:43:b7:
                    9d:c9:80:dd:7a:28:31:af:18:55:95:0c:7f:89:94:
                    47:29:4d:ef:27:8c:f1:31:17:78:98:28:b0:3c:f3:
                    58:58:1f:02:05:2a:a7:b7:5c:87:76:c4:9a:49:77:
                    22:20:71:a8:16:e5:5f:05:75:d5:7f:2d:1e:5e:a7:
                    2b:a0:01:73:47:8c:d5:e4:a3:f6:25:40:1a:ca:77:
                    1b:53:0b:0a:58:d8:15:3e:5c:81:97:2d:b1:09:54:
                    1d:ad:3a:d4:cc:9b:86:cd:2d:8c:c7:6f:4d:60:eb:
                    5e:72:b9:1a:8c:ff:1b:a3:55:52:22:27:67:04:f9:
                    cc:2b:c7:ff:57:53:3e:42:51:30:d6:a9:f3:cb:10:
                    22:84:43:29:cf:fe:08:2a:e6:1e:ca:95:0f:2a:5f:
                    fe:97:ce:42:d6:52:09:64:a3:46:a3:e0:a2:80:19:
                    3a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:87:B0:23:20:27:B4:D0:2A:46:71:45:75:80:C2:B5:01:4B:55:01
            X509v3 Authority Key Identifier:
                keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bb:0a:26:c4:21:2a:c4:68:19:62:8c:b4:c0:c8:68:98:47:
         6a:5d:15:b4:31:e7:c2:00:ae:72:41:39:d5:20:a4:dc:a5:f3:
         09:a8:51:45:96:b6:51:00:8b:32:78:ff:9c:e3:30:3e:42:f4:
         f0:fa:ef:4f:72:63:d7:f3:b4:45:bd:55:32:07:37:84:7d:52:
         75:b6:62:59:e0:c2:b2:0c:ce:34:b2:1e:71:6a:06:33:68:8a:
         33:ab:b0:72:75:8f:40:e2:36:87:c6:af:f2:ea:21:1c:0e:2c:
         ee:09:60:60:71:b4:8b:f7:17:ea:8f:d5:ce:dc:44:e7:32:52:
         e2:22:14:fc:69:6b:c4:a9:6a:98:d8:87:dd:e5:58:c6:4c:de:
         5f:c9:0d:b1:d5:1c:5e:ff:02:5f:10:4b:e9:79:c3:98:97:89:
         71:21:cf:71:e7:85:97:1e:52:e6:bc:4d:73:97:35:a0:d6:15:
         06:d8:5e:36:2a:91:7e:92:99:03:a1:5f:4e:f1:3a:59:9a:d4:
         77:1a:51:34:c0:b8:51:26:5c:8d:ee:44:24:ba:99:6f:2e:fb:
         7e:e8:46:d0:b7:39:a0:ca:06:db:a9:0b:dd:b1:e3:fc:65:c4:
         0d:3d:d6:2b:ad:82:35:b9:b1:6c:5d:36:af:eb:8e:a8:73:88:
         6e:06:21:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVcIjo1xbdPksm3FXFTdbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjQ2MTE2YTExZjExZjUxZmM5YTFkMjI1YTBiZmNlZmRi
ZWQ3ODYwHhcNMjYwOTI0MjIwMTU2WhcNMjYwOTI1MjIwMTU2WjAzMTEwLwYDVQQD
Eyg0ZTg3YjAyMzIwMjdiNGQwMmE0NjcxNDU3NTgwYzJiNTAxNGI1NTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli098R7fjsASTZC4Pyv3y4fQLbaJ
VzKVvVyR22nSX06EiIiR8t3ceJ7UO/YYDykk5nQLlPnxBVLw8mh1emSq2KiGVx0W
0x6uZ7rI8iB0SP5FdFFGuHmNQ7edyYDdeigxrxhVlQx/iZRHKU3vJ4zxMRd4mCiw
PPNYWB8CBSqnt1yHdsSaSXciIHGoFuVfBXXVfy0eXqcroAFzR4zV5KP2JUAayncb
UwsKWNgVPlyBly2xCVQdrTrUzJuGzS2Mx29NYOtecrkajP8bo1VSIidnBPnMK8f/
V1M+QlEw1qnzyxAihEMpz/4IKuYeypUPKl/+l85C1lIJZKNGo+CigBk6IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6HsCMgJ7TQKkZxRXWAwrUBS1UBMB8GA1UdIwQY
MBaAFD70YRahHxH1H8mh0iWgv879vteGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMt
NjdiYTdhMjE1NjMwLzEvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMtNjdiYTdhMjE1NjMw
LzEvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7sKJsQh
KsRoGWKMtMDIaJhHal0VtDHnwgCuckE51SCk3KXzCahRRZa2UQCLMnj/nOMwPkL0
8PrvT3Jj1/O0Rb1VMgc3hH1SdbZiWeDCsgzONLIecWoGM2iKM6uwcnWPQOI2h8av
8uohHA4s7glgYHG0i/cX6o/VztxE5zJS4iIU/GlrxKlqmNiH3eVYxkzeX8kNsdUc
Xv8CXxBL6XnDmJeJcSHPceeFlx5S5rxNc5c1oNYVBtheNiqRfpKZA6FfTvE6WZrU
dxpRNMC4USZcje5EJLqZby77fuhG0Lc5oMoG26kL3bHj/GXEDT3WK62CNbmxbF02
r+uOqHOIbgYhVw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:48:14 2026 by rpki-client