Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
File:                     PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json)
Hash identifier:          +TAeHbzq0gtFSMZ96mD6R+pMiwao26vWt4yBgGtk1xY=
Subject key identifier:   DE:BE:31:1C:04:87:CC:52:FE:20:63:D1:01:0E:EE:BF:2D:E4:31:56
Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
Certificate issuer:       /CN=3d555102998184fda7c3012e861900948fcf2773
Certificate serial:       01A10580FABD40CE2E480ECC205E4D777840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
Manifest number:          03D8
Signing time:             Sun 04 Oct 2026 06:01:41 +0000
Manifest this update:     Sun 04 Oct 2026 06:01:41 +0000
Manifest next update:     Mon 05 Oct 2026 06:01:41 +0000
Files and hashes:         1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: ulTjPrPUD0NLfJsm4Jz2KJG06DzAjInnli1y1UfnnF0=)
                          2: kbd8DyKehIsGg90OqET0nvTdof4.roa (hash: CToqIuzEVpITovVF+3kk6xRGdjwlN1OnxUyoxb4vvQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:80:fa:bd:40:ce:2e:48:0e:cc:20:5e:4d:77:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d555102998184fda7c3012e861900948fcf2773
        Validity
            Not Before: Oct  4 06:01:41 2026 GMT
            Not After : Oct  5 06:01:41 2026 GMT
        Subject: CN=debe311c0487cc52fe2063d1010eeebf2de43156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:59:fc:70:52:5f:95:48:23:1c:2b:aa:a8:a7:
                    d8:28:4d:0b:8f:9b:f9:df:ee:2d:ce:8c:48:ed:91:
                    65:dc:e4:4b:99:61:fa:85:2b:b2:8c:8e:50:4f:da:
                    ca:6f:b7:2e:b8:d3:f6:e6:f2:08:cd:81:ed:e6:cd:
                    ec:39:cf:fc:f1:09:38:36:a0:01:b3:99:3e:2b:5f:
                    f5:fa:05:f7:95:15:08:71:ff:39:df:0f:5d:8f:f9:
                    5e:13:03:7c:af:77:4f:d5:3f:9d:59:34:0f:06:d7:
                    0d:3b:71:6f:39:47:3e:e5:e5:5c:8f:44:51:c7:9d:
                    5d:b1:9a:c4:0b:ba:b9:1c:0a:86:f3:63:d4:32:b0:
                    6c:2d:db:30:db:39:5d:b5:e8:87:1d:d7:26:50:51:
                    bf:76:bd:52:cf:4b:8d:1e:0a:3c:35:70:54:f3:68:
                    6c:25:9b:f3:ad:44:ed:7e:50:56:e4:7a:f2:39:63:
                    f5:d0:e4:0b:f1:e9:de:96:ba:a6:99:57:2b:66:3f:
                    b8:e7:24:e9:db:f0:b4:ed:9c:90:5b:ae:76:5e:e9:
                    bd:3a:ab:5c:67:8c:b4:53:b6:93:ec:21:8d:d6:66:
                    23:d0:3e:34:58:24:d0:4a:e6:31:2c:d2:d9:5a:27:
                    ed:c5:18:09:50:e4:50:13:1e:9d:44:f2:69:de:67:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:31:1C:04:87:CC:52:FE:20:63:D1:01:0E:EE:BF:2D:E4:31:56
            X509v3 Authority Key Identifier:
                keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:2d:70:d0:ad:b3:af:10:ee:27:c4:c0:dd:27:7e:99:fe:19:
         37:3b:25:d9:9b:89:9f:e0:b6:1d:7a:37:85:59:82:32:49:63:
         a5:b7:57:28:28:49:cf:cc:ce:09:d9:73:2d:50:a9:09:b6:d4:
         8a:86:57:4a:bc:0f:3d:0f:c2:2f:51:db:40:53:f5:b7:0b:6b:
         c5:6d:a3:5d:ef:45:22:fc:ab:c6:a9:33:fe:11:31:ca:fd:1d:
         96:2f:9a:d9:6e:85:cf:95:f8:30:b2:b5:8d:91:79:0e:c6:8f:
         c1:17:15:3b:9f:d4:e6:86:ff:86:e7:16:93:63:81:ea:cb:f0:
         d7:43:d1:0e:65:37:1f:c0:ab:86:25:48:eb:fc:6a:ab:64:45:
         70:e2:ac:d8:24:45:e0:4f:6d:40:c1:ee:0f:70:85:51:62:c9:
         fa:c2:d1:d3:f7:9a:d5:c9:8e:8e:5b:61:41:41:c5:76:fc:51:
         0b:d5:ab:7d:e4:a2:86:8f:cc:98:20:f9:28:ce:2a:d0:df:d3:
         19:43:b3:18:80:dc:5f:ec:aa:d9:93:b1:7b:69:58:7d:cf:76:
         6c:2a:79:21:69:3e:42:59:0f:07:93:f5:30:92:7e:1b:38:cd:
         b4:24:14:a1:8d:7b:a7:c0:c6:c6:56:c3:59:5e:65:49:c4:a8:
         2b:39:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:00:30 2026 by rpki-client