Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
File:                     Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json)
Hash identifier:          eovXAfNOnD0T0ARDY8pqJdFbpHvKc0pIPOoiAPdM4xw=
Subject key identifier:   78:DF:06:AE:7A:DD:AA:4C:FC:FB:47:6E:9F:23:CF:BC:43:E5:C4:02
Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Certificate issuer:       /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Certificate serial:       019E2A39DA9BA78E0ECCB885543427F606E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
Manifest number:          0238
Signing time:             Fri 15 May 2026 06:01:34 +0000
Manifest this update:     Fri 15 May 2026 06:01:34 +0000
Manifest next update:     Sat 16 May 2026 06:01:34 +0000
Files and hashes:         1: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: nIFT8XLSgvD5wh1qVnoIZrGFaXvTR9EFePUS/ZXHDG0=)
                          2: WQ_j-qqDR5HktP06sg7xONRh0BE.roa (hash: IEt/v53hTQ/BgADum+kvHIi5QkAMcCA3KyS/Nvrh4FM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:39:da:9b:a7:8e:0e:cc:b8:85:54:34:27:f6:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
        Validity
            Not Before: May 15 06:01:34 2026 GMT
            Not After : May 16 06:01:34 2026 GMT
        Subject: CN=78df06ae7addaa4cfcfb476e9f23cfbc43e5c402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:67:57:ce:48:31:64:87:87:cd:36:2c:77:
                    5b:2a:c1:93:43:a7:32:34:d4:a1:dd:8b:0b:16:86:
                    53:6a:c0:ff:20:5f:92:cb:dd:74:2b:fc:d6:fe:9c:
                    9a:99:6f:18:eb:80:5f:d7:0a:00:f7:09:5c:7d:4a:
                    d2:e2:95:bb:00:b4:97:fe:6d:4c:2f:f7:20:bd:f8:
                    ac:75:0f:20:f2:a4:4c:54:bc:08:82:d3:67:09:7f:
                    dd:f8:14:09:7d:5b:96:5e:f4:9a:5e:73:6a:72:ed:
                    6a:8b:c6:6e:98:d0:6f:d3:88:12:3b:b0:17:7f:6e:
                    f6:92:b1:d3:92:ad:ab:58:6c:3c:3e:a1:4f:1f:b1:
                    90:ab:d5:40:cd:71:2d:8a:4e:15:1a:e5:03:5a:3f:
                    f3:0b:86:ca:9c:e0:0f:b5:00:b5:51:67:28:a3:66:
                    6a:d7:08:b8:6c:18:6a:70:fe:6c:49:d8:8a:61:37:
                    1c:e7:c9:d1:f4:2d:c7:69:e3:21:06:de:c0:92:1a:
                    6b:bb:02:78:2d:4e:68:dd:69:3a:d5:f4:a8:cd:1a:
                    2a:65:1a:d2:10:41:cd:a6:03:fe:e7:05:53:c5:b7:
                    05:45:fc:df:6b:ce:4e:bd:f8:bb:bd:c8:7c:bc:4f:
                    75:46:82:c8:20:c9:b4:01:91:ca:97:16:76:15:70:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DF:06:AE:7A:DD:AA:4C:FC:FB:47:6E:9F:23:CF:BC:43:E5:C4:02
            X509v3 Authority Key Identifier:
                keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:79:a9:1b:3a:c3:d6:1f:3e:8f:34:ee:c2:40:b0:ef:df:4a:
         9f:d0:b5:cd:87:30:85:da:16:58:39:87:6e:69:f3:f1:f2:2c:
         95:b3:0b:5d:03:ec:cb:08:66:05:18:ec:a3:c8:ad:a9:54:35:
         46:b2:c5:25:a2:86:fd:8e:26:9f:f7:89:5b:56:76:8a:90:f6:
         3d:be:58:06:25:da:61:3a:03:d1:45:ba:df:25:7a:0d:0e:3c:
         95:6a:75:09:aa:2f:7f:8b:44:57:0a:52:53:bd:1d:ed:f6:7e:
         a1:41:44:c2:ee:db:17:7b:0c:de:8c:a8:e8:96:42:36:f9:cd:
         dd:81:ba:19:84:2c:03:3c:d4:6d:85:fa:4b:7f:5f:bd:af:3d:
         0e:f6:65:ea:63:b1:15:44:a2:d4:6c:62:e0:e4:5e:83:15:b8:
         1e:75:60:71:6a:23:87:41:bd:d6:48:54:42:0b:a4:39:00:6b:
         56:1d:7d:a2:7a:80:5b:61:80:95:02:d6:4a:66:57:0d:4e:1c:
         8f:ba:28:97:8e:c4:9d:0c:69:2f:5c:ef:68:ec:63:d2:b7:65:
         ee:cb:fa:67:e5:e9:bf:1c:cc:03:b6:c4:1c:c3:70:ce:60:e0:
         84:20:0b:37:38:78:14:4a:86:3f:2f:42:5c:a7:4e:72:75:69:
         2e:f9:41:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:14:22 2026 by rpki-client