Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
File:                     PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json)
Hash identifier:          ONmGckOUjbud7pWyoZ959uAgUN1Wd5SeXokSMBLZNAU=
Subject key identifier:   11:5E:27:1C:25:71:07:60:65:EB:1C:31:DB:57:4A:DF:4B:9F:34:A3
Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
Certificate issuer:       /CN=3d555102998184fda7c3012e861900948fcf2773
Certificate serial:       019E1DFEAB667D67EAECA766A52CA86AEE44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
Manifest number:          0257
Signing time:             Tue 12 May 2026 21:01:29 +0000
Manifest this update:     Tue 12 May 2026 21:01:29 +0000
Manifest next update:     Wed 13 May 2026 21:01:29 +0000
Files and hashes:         1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: KmU8rr6+/UpvesU3uv/dZiIsBqdYpacweGg3+xgZN80=)
                          2: kbd8DyKehIsGg90OqET0nvTdof4.roa (hash: CToqIuzEVpITovVF+3kk6xRGdjwlN1OnxUyoxb4vvQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:ab:66:7d:67:ea:ec:a7:66:a5:2c:a8:6a:ee:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d555102998184fda7c3012e861900948fcf2773
        Validity
            Not Before: May 12 21:01:29 2026 GMT
            Not After : May 13 21:01:29 2026 GMT
        Subject: CN=115e271c2571076065eb1c31db574adf4b9f34a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:ea:73:d3:07:ad:44:cb:3b:f4:49:92:d1:
                    f3:82:c5:33:fc:02:89:e2:65:47:02:83:4d:e6:cf:
                    77:c3:3f:3a:cc:c7:4c:2e:0b:ba:ef:8d:b5:8c:f1:
                    d8:4d:6d:fa:c6:3c:9c:32:64:d4:67:3c:e8:59:4b:
                    24:98:35:c4:f5:8c:42:3c:75:73:26:dd:99:96:58:
                    11:96:31:54:80:03:96:9d:b9:03:47:61:c4:07:6d:
                    b7:18:cd:c6:42:4f:cc:eb:b8:a9:6e:12:3d:85:fa:
                    2e:d4:23:a0:77:60:e3:2c:c7:62:72:fd:7a:d4:f0:
                    fb:f1:3f:15:10:26:7c:00:2a:87:7f:dc:1d:bd:16:
                    be:7b:25:bc:38:f4:78:6c:57:e7:86:14:cd:62:85:
                    18:c2:cc:6b:41:76:b8:ee:4d:6f:4e:1e:04:db:78:
                    7f:9e:3c:7d:7a:74:c5:04:a0:51:3e:d2:fc:cb:a7:
                    a1:c9:02:25:87:df:67:81:16:40:47:13:36:cb:ab:
                    41:d8:19:f9:5e:fe:68:ed:3b:af:f6:22:06:77:2e:
                    9c:97:d3:a8:6f:a3:dc:54:2c:62:9a:aa:3b:92:89:
                    81:0f:e4:ab:8c:7d:b9:5d:f1:25:a7:10:72:d1:22:
                    ca:57:82:c7:8f:41:ec:f7:90:e3:ec:65:a8:d8:a8:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5E:27:1C:25:71:07:60:65:EB:1C:31:DB:57:4A:DF:4B:9F:34:A3
            X509v3 Authority Key Identifier:
                keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e2:21:aa:a9:6e:11:fc:f8:2e:91:c5:31:01:c8:27:71:9c:
         33:42:cf:6b:89:e8:71:f2:d2:e4:92:52:67:38:44:4b:74:92:
         f3:2f:c3:11:59:db:e1:89:ac:6c:8f:a8:05:d5:e5:b0:4d:92:
         93:3b:1d:a5:fd:d5:25:96:6f:fd:9f:c8:e2:26:3a:44:03:19:
         19:e6:d0:1c:7e:7a:91:83:b2:45:60:90:35:44:db:8f:37:03:
         41:20:db:24:95:a8:3d:ed:bd:9f:3d:7d:79:d4:12:23:bb:bb:
         05:6d:08:df:c8:c0:a4:32:8e:ce:59:3a:86:53:aa:0a:14:52:
         d2:cc:10:19:56:b2:54:68:ab:bc:f8:86:42:37:bc:c4:47:0e:
         da:fd:f6:74:1a:f7:33:bc:a4:e4:2a:69:89:3b:87:15:57:e4:
         2b:d1:b5:36:1f:10:54:6a:4c:3e:cb:89:be:a5:47:1b:b1:08:
         d1:9b:1a:71:bf:4e:9f:4b:be:6d:31:be:63:91:92:c6:31:1f:
         2a:83:7b:7b:30:f1:3d:76:b8:ec:42:89:e4:5e:31:7d:de:73:
         70:2f:34:48:43:8a:45:d4:60:5e:22:e0:e3:2f:6d:93:f1:83:
         40:a9:89:38:b0:63:25:e9:21:92:78:d2:af:85:f6:d0:3d:dd:
         ea:b9:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:14 2026 by rpki-client