Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
File:                     PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft (raw, json)
Hash identifier:          6oxfdEXlEXa77Do0Ax2FmYv+zEVcPMNPY9PuphHJE3Y=
Subject key identifier:   4A:A8:7A:F1:DA:55:81:47:FC:91:05:F3:12:9B:F0:3D:07:52:C6:21
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Certificate issuer:       /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial:       01A06D276275E85899FFF9C35508021A7408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
Manifest number:          1A3A
Signing time:             Fri 04 Sep 2026 16:01:32 +0000
Manifest this update:     Fri 04 Sep 2026 16:01:32 +0000
Manifest next update:     Sat 05 Sep 2026 16:01:32 +0000
Files and hashes:         1: PAgTss81EypznIUSXUrAempw_so.roa (hash: hVAKVYVtH7pfRFO9nXZRlBkZwPvwRW2v9xDHqxcNeV0=)
                          2: PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl (hash: R7wZBB4ln7i3lz5HQ8baShxVpBnKCaAhC0w2lBpbj6I=)
                          3: g873udppqiGZfDfxEVPwS0fN2iE.roa (hash: vGYcXaCIiPom9FCy5Ogp8Jq2cO/kNZJXFstzgmVZSYM=)
                          4: o8OHfV95jFDGQMcKlS4Elzm403c.roa (hash: wX1Olvy8rFtI4rUY+LS6paVP5fazc6rWqyHgWeMMLFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:27:62:75:e8:58:99:ff:f9:c3:55:08:02:1a:74:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
        Validity
            Not Before: Sep  4 16:01:32 2026 GMT
            Not After : Sep  5 16:01:32 2026 GMT
        Subject: CN=4aa87af1da558147fc9105f3129bf03d0752c621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:f4:fa:7f:e8:bc:5e:38:3c:7a:de:c9:80:
                    99:38:1b:99:83:b5:f9:54:f1:f2:48:46:81:2c:34:
                    d8:10:c4:d4:27:f5:5a:34:44:e7:3e:4d:eb:b2:38:
                    52:4b:c3:eb:f9:ae:c2:98:f4:7b:da:af:31:83:f2:
                    15:21:50:6f:2f:7d:66:70:c7:04:f4:a8:f1:8a:70:
                    c9:35:47:bd:c5:02:20:bf:b0:5b:2a:e9:b1:da:51:
                    a4:86:0a:7a:6d:f6:68:d8:ed:23:96:85:69:18:b5:
                    13:b3:10:55:9f:b1:d4:3f:c6:8f:a4:52:51:2c:23:
                    91:90:b1:1d:a6:fe:19:ba:d4:9b:8a:65:50:06:43:
                    62:8a:4b:e1:01:c7:8c:68:e4:68:47:5f:b7:e0:e8:
                    e9:9d:0d:7b:ee:fd:37:b4:5b:71:37:da:f4:b7:61:
                    22:24:e0:87:00:70:87:20:b6:d7:06:cb:36:68:2d:
                    86:ca:58:21:20:b8:6e:f1:a7:30:62:01:5b:f1:42:
                    f3:95:a9:50:71:be:61:4e:7d:b8:d1:90:0b:51:14:
                    2a:7c:f8:9a:e1:c7:33:a3:ab:d7:71:48:54:05:07:
                    1f:5c:f8:8b:3c:55:95:4a:1d:1b:fc:f1:bb:8e:c7:
                    d0:01:a9:d6:8c:f3:21:d8:79:3e:f4:6f:ba:be:29:
                    e1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A8:7A:F1:DA:55:81:47:FC:91:05:F3:12:9B:F0:3D:07:52:C6:21
            X509v3 Authority Key Identifier:
                keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:72:c6:c0:a0:d2:e9:bd:01:b3:c6:f0:6a:c2:a1:40:71:68:
         5e:2a:4f:73:cd:52:4e:ac:29:70:a4:f6:50:70:05:37:b8:63:
         6f:5d:b4:93:32:6a:ed:e6:10:d1:b5:c8:d0:19:36:a5:6f:c6:
         28:f9:04:e8:90:75:ea:21:91:97:be:13:e5:1b:11:9b:15:f8:
         3a:d5:20:b3:1b:ef:89:c8:01:d1:0b:ce:b3:a0:ab:41:f2:34:
         92:7f:72:33:68:04:26:e5:61:c7:b1:0c:a4:40:e5:50:71:cc:
         48:e6:8d:99:ab:f5:97:40:19:1f:87:32:db:37:1b:5b:6d:05:
         f2:76:d7:32:a7:55:ea:dd:86:98:85:42:69:9c:32:18:14:52:
         da:eb:75:1d:3b:4d:8f:cc:73:fc:df:03:c7:ab:75:43:bf:ac:
         1b:5f:7b:6a:6a:a8:f3:75:d4:50:e1:f8:b4:6b:66:fc:ec:c5:
         83:cc:2d:98:b6:74:30:35:f8:bb:2c:51:04:43:ee:07:69:be:
         3e:4a:c4:3c:dc:fa:56:6d:09:73:8c:79:b5:80:40:07:3d:a5:
         77:26:99:39:ec:5b:07:33:33:b7:5b:56:f1:36:d8:52:94:0f:
         4e:92:6e:ae:f7:d3:8a:8a:5e:3e:c1:c1:60:6a:79:58:39:2b:
         92:76:de:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtJ2J16FiZ//nDVQgCGnQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjQ2MTE2YTExZjExZjUxZmM5YTFkMjI1YTBiZmNlZmRi
ZWQ3ODYwHhcNMjYwOTA0MTYwMTMyWhcNMjYwOTA1MTYwMTMyWjAzMTEwLwYDVQQD
Eyg0YWE4N2FmMWRhNTU4MTQ3ZmM5MTA1ZjMxMjliZjAzZDA3NTJjNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwD0+n/ovF44PHreyYCZOBuZg7X5
VPHySEaBLDTYEMTUJ/VaNETnPk3rsjhSS8Pr+a7CmPR72q8xg/IVIVBvL31mcMcE
9KjxinDJNUe9xQIgv7BbKumx2lGkhgp6bfZo2O0jloVpGLUTsxBVn7HUP8aPpFJR
LCORkLEdpv4ZutSbimVQBkNiikvhAceMaORoR1+34OjpnQ177v03tFtxN9r0t2Ei
JOCHAHCHILbXBss2aC2GylghILhu8acwYgFb8ULzlalQcb5hTn240ZALURQqfPia
4cczo6vXcUhUBQcfXPiLPFWVSh0b/PG7jsfQAanWjPMh2Hk+9G+6vinhbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqoevHaVYFH/JEF8xKb8D0HUsYhMB8GA1UdIwQY
MBaAFD70YRahHxH1H8mh0iWgv879vteGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMt
NjdiYTdhMjE1NjMwLzEvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMtNjdiYTdhMjE1NjMw
LzEvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3LGwKDS
6b0Bs8bwasKhQHFoXipPc81STqwpcKT2UHAFN7hjb120kzJq7eYQ0bXI0Bk2pW/G
KPkE6JB16iGRl74T5RsRmxX4OtUgsxvvicgB0QvOs6CrQfI0kn9yM2gEJuVhx7EM
pEDlUHHMSOaNmav1l0AZH4cy2zcbW20F8nbXMqdV6t2GmIVCaZwyGBRS2ut1HTtN
j8xz/N8Dx6t1Q7+sG197amqo83XUUOH4tGtm/OzFg8wtmLZ0MDX4uyxRBEPuB2m+
PkrEPNz6Vm0Jc4x5tYBABz2ldyaZOexbBzMzt1tW8TbYUpQPTpJurvfTiopePsHB
YGp5WDkrknbedg==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:13:50 2026 by rpki-client