Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
File:                     PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json)
Hash identifier:          W8XDfUv5MZVArsDyQNZfyjy3s4gJH0adalXxdOqJ0po=
Subject key identifier:   9F:4F:EA:5B:C5:0D:FF:36:8B:96:E4:61:D4:EA:EE:B0:47:8E:1E:D0
Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
Certificate issuer:       /CN=3d555102998184fda7c3012e861900948fcf2773
Certificate serial:       019F94A463EE970AB136FFF82AB96E7B1363
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
Manifest number:          0319
Signing time:             Fri 24 Jul 2026 15:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:29 +0000
Files and hashes:         1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: jy+eM6cqXSywwGz9IyTVhCwPe/nqCg/oYT0zNYDwxNg=)
                          2: kbd8DyKehIsGg90OqET0nvTdof4.roa (hash: CToqIuzEVpITovVF+3kk6xRGdjwlN1OnxUyoxb4vvQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:63:ee:97:0a:b1:36:ff:f8:2a:b9:6e:7b:13:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d555102998184fda7c3012e861900948fcf2773
        Validity
            Not Before: Jul 24 15:00:29 2026 GMT
            Not After : Jul 25 15:00:29 2026 GMT
        Subject: CN=9f4fea5bc50dff368b96e461d4eaeeb0478e1ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:d6:9a:e5:3f:7d:3a:a8:21:5f:9a:68:3e:
                    47:97:7c:91:61:6b:05:15:a4:be:2e:42:2c:33:c9:
                    1a:33:76:67:a1:a9:f5:d4:80:ed:d5:57:ea:ea:8a:
                    5b:65:c2:40:39:34:ec:8d:87:f4:d6:92:b5:48:50:
                    49:09:60:bb:74:da:51:6c:03:95:b7:93:1c:f7:d5:
                    16:6b:85:49:0e:e2:98:37:3a:6c:3d:67:e7:4d:4e:
                    54:b5:7f:44:e0:0c:50:3b:40:ab:e2:01:b4:0d:0e:
                    63:42:e1:90:3d:f8:8c:91:37:3c:89:82:bc:36:e6:
                    ad:c0:46:9c:45:f1:e0:8d:c3:c5:c5:77:72:34:7e:
                    e5:79:ad:f5:02:87:f4:5f:08:4a:49:8a:97:e5:4d:
                    f9:25:df:d0:e9:07:31:c5:4c:54:6b:b0:11:89:e0:
                    a1:95:d0:e6:5b:b1:be:00:d0:41:cc:69:89:94:b7:
                    7b:94:04:54:d2:5d:fa:b7:c3:10:0d:70:dd:2e:29:
                    83:18:93:d7:3c:84:91:55:5a:80:cc:b5:bc:29:e1:
                    96:7c:ec:fe:07:07:c1:a3:b9:06:23:31:2d:ef:04:
                    01:e4:89:d7:61:ff:4e:00:e8:f2:d2:1d:03:22:ef:
                    02:64:86:68:ef:ca:37:e1:a5:e5:59:b0:0e:ee:21:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4F:EA:5B:C5:0D:FF:36:8B:96:E4:61:D4:EA:EE:B0:47:8E:1E:D0
            X509v3 Authority Key Identifier:
                keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9f:dc:32:14:a8:d9:1e:f0:51:10:07:0d:2e:e2:0a:b4:47:
         f7:b6:6e:b1:81:92:13:e8:df:57:e1:2f:3c:90:70:39:6b:bc:
         de:2e:09:6c:25:91:c2:ac:5c:4c:44:fa:c5:31:84:9f:c7:f0:
         da:79:61:17:cb:7b:07:15:63:6c:10:86:a3:73:35:a5:e8:78:
         2e:e1:d5:d9:a4:f9:4c:6a:68:22:fe:a7:7b:5c:bd:f2:0e:d1:
         17:05:7e:20:30:99:54:57:c4:25:f4:f4:c2:1c:54:dd:9e:4c:
         0a:75:79:6c:fe:6a:1c:68:8c:dc:16:2d:16:2e:60:4f:90:2f:
         ca:a2:c4:1a:d6:0f:27:57:c7:74:ec:ea:f4:a2:48:e3:16:83:
         7c:79:65:c5:6a:73:70:05:5a:c4:ca:32:11:cf:d6:67:b6:25:
         9d:dd:3f:4b:04:3d:a5:9e:4b:a1:1c:5f:0f:c2:da:b9:b8:95:
         6f:af:91:b7:02:b0:34:95:16:fd:86:db:12:52:23:86:c5:b8:
         52:f9:1d:ea:9e:3f:e4:e1:68:a9:a4:0e:92:f6:29:c5:18:d7:
         0f:24:6c:0c:17:7c:94:9a:61:9b:06:d2:35:97:29:03:79:e5:
         14:f6:46:5c:d3:85:2c:9d:ef:7b:e7:e6:d1:b7:f1:ae:a0:c6:
         16:a5:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:01:47 2026 by rpki-client