Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File:                     PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier:          Po0P4eTe49zQeXQRNuEUWjAxeEhUux9i4xXktWd0sJk=
Subject key identifier:   53:27:21:78:57:8B:FB:37:B1:F1:F4:9D:69:ED:B9:A9:04:99:9D:B7
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer:       /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial:       01A17CCEA52B6440859270067B432D1B3BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number:          07C0
Signing time:             Tue 27 Oct 2026 10:01:19 +0000
Manifest this update:     Tue 27 Oct 2026 10:01:19 +0000
Manifest next update:     Wed 28 Oct 2026 10:01:19 +0000
Files and hashes:         1: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: 4qhvkwoQcRHCQmikiWCQqacaVcawzCZTxUDb/3T6weQ=)
                          2: S5wr06vdwGVhTbB1fKMUUZD_8Ss.roa (hash: V2LpwKemEc10nxy8sjedxqwpf+S2CjsCA39qgPx1G+s=)
                          3: SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa (hash: wnSrmmgjgNFni6XtfvP0Umwv0uy50/wQqCglKf7Kmd0=)
                          4: sR1RaWXS_5l1a2IX6LHUiU-d2pA.roa (hash: S4pTQrYhG8r3f9SFHV88NAichr1el296Kbb8q2csBdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:ce:a5:2b:64:40:85:92:70:06:7b:43:2d:1b:3b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
        Validity
            Not Before: Oct 27 10:01:19 2026 GMT
            Not After : Oct 28 10:01:19 2026 GMT
        Subject: CN=53272178578bfb37b1f1f49d69edb9a904999db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:99:ba:61:d6:b9:57:72:a2:13:4b:7f:6c:
                    2d:15:6c:7e:65:c9:a7:25:a9:01:13:62:f2:31:ad:
                    cc:36:12:5e:98:75:f4:d4:2d:44:75:f4:b8:2e:4d:
                    c8:e1:50:d0:a6:39:d6:fe:80:8a:2e:9f:9c:86:cb:
                    c0:d1:31:2a:2f:03:8f:8b:09:24:c2:cd:e0:c5:74:
                    42:1f:00:7f:de:b9:38:b2:df:52:9c:c7:f4:5b:89:
                    ba:69:6f:4d:96:65:88:62:93:3c:d5:c4:aa:d7:c6:
                    a1:7f:16:3e:bd:80:9e:00:f3:ac:96:28:77:45:89:
                    42:e3:1a:c2:32:05:f1:f3:33:d3:7e:8c:98:4c:8a:
                    69:e1:93:d9:16:96:0e:54:89:60:00:ae:3b:48:ca:
                    3c:b6:6d:32:ad:5e:55:44:ff:b7:c3:5b:23:de:a3:
                    ce:72:01:9c:4f:f4:e0:18:9a:93:ed:42:d6:db:3f:
                    18:9b:b8:8f:56:3e:60:1a:66:3a:70:4f:b9:a9:55:
                    32:f5:0f:33:49:02:47:27:ac:c7:f1:54:90:d3:b4:
                    10:e1:6e:19:10:36:b5:24:2b:0e:da:62:7e:95:96:
                    0d:a6:fa:41:e1:3b:2c:8a:d3:45:5e:db:17:48:ee:
                    1f:6b:32:9c:7c:b7:4d:d0:90:9f:ad:79:8c:14:08:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:27:21:78:57:8B:FB:37:B1:F1:F4:9D:69:ED:B9:A9:04:99:9D:B7
            X509v3 Authority Key Identifier:
                keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:62:83:79:1c:9b:e8:e3:7c:20:6c:14:49:57:d7:17:b8:f0:
         ae:15:17:6e:18:12:8b:68:6a:7d:f8:9b:13:30:54:eb:82:1a:
         0c:e1:94:95:f4:ef:cf:74:75:e9:e9:61:05:29:27:f2:18:84:
         bb:33:0f:6c:a9:18:90:2f:20:27:7a:0f:e6:21:c2:24:b8:e3:
         e6:6c:98:c2:4b:3f:6f:67:29:24:22:ac:72:a3:a3:12:8e:14:
         ff:32:59:60:ee:00:8c:f7:88:14:bf:e4:84:db:51:40:f4:fb:
         e5:44:3e:8d:60:2d:db:ec:80:58:26:cd:15:fb:78:06:4d:cf:
         57:f9:1c:ac:d1:eb:aa:f2:d7:8b:1e:b1:09:03:75:a1:9f:df:
         a9:68:00:53:03:b1:d5:2f:76:44:ab:9f:fd:f6:4d:df:c6:f6:
         50:ef:e6:34:6d:3f:61:54:49:57:49:c6:00:84:02:aa:ff:01:
         74:6b:77:63:94:db:08:8a:d5:72:85:9c:38:75:3a:10:a3:47:
         7e:e7:e6:19:c9:40:e3:7f:ff:72:ac:f2:5b:52:b1:6f:30:74:
         7e:ac:51:d6:b4:12:ca:ec:bc:35:1d:5d:aa:43:a1:50:c7:1f:
         96:9c:25:51:b3:67:8b:55:83:a6:a4:de:a2:1b:c3:d2:e1:66:
         09:1d:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:01:39 2026 by rpki-client