Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
File:                     PvRdcGusxYrv9q5H8jLZKzwvsBg.mft (raw, json)
Hash identifier:          1rVKTRb5HpAm/1U1NsNw5B45BJbnq7EeJrH6Z5jOj8k=
Subject key identifier:   2B:A2:6C:34:0F:33:A5:DE:45:D7:EB:53:90:BD:60:17:42:22:52:5C
Authority key identifier: 3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
Certificate issuer:       /CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Certificate serial:       01A0D5DEEA92EC87843F56791433ECB7DD47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
Manifest number:          0101
Signing time:             Fri 25 Sep 2026 00:02:31 +0000
Manifest this update:     Fri 25 Sep 2026 00:02:31 +0000
Manifest next update:     Sat 26 Sep 2026 00:02:31 +0000
Files and hashes:         1: NL1w9Xj9eNNvZHja4bYi8u1uP0g.roa (hash: bGa7KQ5aQ4eZWg9YSqL9Pvq1iyjpLbcYhC9x7Z0XWS8=)
                          2: PvRdcGusxYrv9q5H8jLZKzwvsBg.crl (hash: ywIesh9KcI5coZEGPknOjixKsVeR/ByAyPyGeW2nASY=)
                          3: UGXYFC9jlohYNhw6f4qzRWdUTE8.asa (hash: EAHRau/OfR99p6HOKLABIO+IowH54Ml4zKfLXfBoos4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:ea:92:ec:87:84:3f:56:79:14:33:ec:b7:dd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
        Validity
            Not Before: Sep 25 00:02:31 2026 GMT
            Not After : Sep 26 00:02:31 2026 GMT
        Subject: CN=2ba26c340f33a5de45d7eb5390bd60174222525c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:ea:01:8e:60:9e:7e:61:ba:27:aa:f9:96:
                    16:15:3c:ae:df:d2:7b:f1:fa:3f:7f:d5:7f:47:45:
                    d0:dc:43:1f:0e:7d:41:94:a7:5a:5f:3e:ac:b3:a4:
                    fb:dd:c9:3b:f9:40:3d:d6:04:0c:b8:d6:e1:7f:1d:
                    5c:8d:ab:dd:04:d1:36:72:53:8e:6b:1f:0a:cd:0a:
                    c4:1b:1c:60:92:b7:67:e9:51:74:77:9c:0d:a2:3b:
                    39:bc:93:d0:00:34:d6:d5:6b:66:80:6f:d6:35:ed:
                    7d:52:0b:ef:8b:6a:0d:1e:50:eb:15:b2:c7:70:e0:
                    46:7d:c5:a3:0b:e5:50:25:46:86:27:38:f9:ca:51:
                    7b:3a:d9:09:03:62:6c:c4:e1:d1:d4:bc:52:5f:ce:
                    c1:3d:ac:4d:e9:22:9c:a8:f6:21:5f:b4:7c:f0:21:
                    7f:00:b9:f4:56:13:21:d2:a6:8c:e1:98:fc:8f:90:
                    21:f3:2c:7a:14:c1:04:fe:91:e3:5b:74:d5:20:11:
                    f9:bf:e9:0f:b6:eb:b6:e9:13:f0:87:41:37:75:14:
                    9f:e6:46:8e:60:50:e7:39:b7:3e:2e:8e:aa:ad:49:
                    42:d8:27:60:3d:6c:a9:80:6e:5d:2b:83:a9:9e:12:
                    18:b3:eb:fe:96:bc:03:a8:ae:91:51:27:a6:22:b1:
                    dd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A2:6C:34:0F:33:A5:DE:45:D7:EB:53:90:BD:60:17:42:22:52:5C
            X509v3 Authority Key Identifier:
                keyid:3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:20:b9:6c:b1:68:f8:db:e2:ad:51:87:61:9c:07:e7:99:8b:
         26:7f:38:da:f6:82:c4:71:6b:78:54:79:18:ba:d1:d5:6d:9c:
         f0:2a:15:51:4b:86:89:f5:f5:62:b1:35:60:ec:56:38:46:d6:
         35:0a:c7:d6:67:3a:a6:56:e8:49:20:95:e8:e0:6a:88:2f:67:
         5d:db:fa:9d:d7:0e:53:94:62:86:61:26:70:ff:21:99:4b:76:
         91:35:b3:fc:da:e0:61:56:de:49:32:1b:2f:81:0c:06:65:d7:
         fe:e6:fe:4a:b5:22:c0:25:12:bf:42:a8:2c:24:fc:7e:65:c5:
         dc:c8:cc:90:7c:bd:81:99:29:a9:43:b3:fe:95:28:f9:d3:ac:
         cd:b1:9a:89:e8:dd:a2:19:50:ca:96:36:35:0b:8c:fa:9a:62:
         ff:d1:38:13:70:ce:8f:21:65:f6:ab:52:9e:ea:7d:08:5f:63:
         7f:86:43:c6:fa:ec:7a:21:94:98:bb:a0:4f:dc:64:13:e6:28:
         bc:e9:78:96:80:cb:b0:ab:d2:2d:09:e6:92:12:e7:d0:8b:c0:
         71:4a:2b:fe:90:ea:a8:d6:7d:e6:a8:79:63:8f:a7:d8:41:16:
         96:7f:db:43:47:24:31:73:19:97:45:f0:6c:ad:87:dc:3d:6c:
         62:ef:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:44:54 2026 by rpki-client