Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
File:                     Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json)
Hash identifier:          WODrvFHQWqrdL/SHS2ICwxNMkBUcaUo5/uBaMg01UGQ=
Subject key identifier:   3E:83:EF:84:9A:E9:77:27:58:00:C3:0D:FA:38:E0:B5:85:13:C5:EB
Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Certificate issuer:       /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Certificate serial:       01A1212E45DE1E87CF5BA8AAF7BD7C7D66A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
Manifest number:          03C1
Signing time:             Fri 09 Oct 2026 15:00:42 +0000
Manifest this update:     Fri 09 Oct 2026 15:00:42 +0000
Manifest next update:     Sat 10 Oct 2026 15:00:42 +0000
Files and hashes:         1: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: MClPYFmvkVT2SinN2r2Sp4Q9xwEoWDJWUNCzfRTOX7M=)
                          2: WQ_j-qqDR5HktP06sg7xONRh0BE.roa (hash: IEt/v53hTQ/BgADum+kvHIi5QkAMcCA3KyS/Nvrh4FM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:2e:45:de:1e:87:cf:5b:a8:aa:f7:bd:7c:7d:66:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
        Validity
            Not Before: Oct  9 15:00:42 2026 GMT
            Not After : Oct 10 15:00:42 2026 GMT
        Subject: CN=3e83ef849ae977275800c30dfa38e0b58513c5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b9:18:d7:fc:b6:b5:f6:51:ef:53:db:7e:6b:
                    67:83:7e:e2:b0:71:f8:01:43:b9:9c:96:a5:aa:4f:
                    2f:46:c7:d5:f9:18:ee:8f:d3:f5:d8:3a:92:b4:4a:
                    26:80:b4:41:74:cb:eb:0a:01:50:a1:46:87:b4:69:
                    9e:dc:f6:39:95:67:4b:5a:36:38:74:d9:5e:bb:85:
                    f3:c4:0c:a7:be:fc:94:e3:db:d3:da:9e:20:34:ea:
                    24:56:27:61:f3:79:2c:98:3c:1f:57:cd:88:ee:af:
                    6d:52:e7:59:e7:49:bc:a0:9b:30:0d:14:55:db:3d:
                    73:13:6c:2f:f3:87:48:9a:05:7d:b4:70:e8:84:04:
                    6d:ef:29:b6:4d:cd:a9:f9:af:6d:48:6b:0b:90:53:
                    89:5a:0f:52:48:ae:3c:a2:91:ff:86:8c:39:9f:db:
                    4c:1c:8f:b3:e3:4b:ec:3d:2a:2e:85:27:e9:13:d9:
                    4b:37:83:07:27:bb:af:d9:01:a4:02:86:5f:98:b1:
                    08:01:b2:5d:c8:63:2d:d8:f2:61:fd:c6:95:1e:e2:
                    ec:74:e9:2b:ca:bb:b8:05:1a:1b:13:5d:f1:cd:9f:
                    b0:37:43:7f:d0:c5:9e:e0:e4:4d:a4:21:47:5e:2c:
                    81:3e:42:70:35:3b:0f:b1:7e:80:a6:fe:61:54:a0:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:83:EF:84:9A:E9:77:27:58:00:C3:0D:FA:38:E0:B5:85:13:C5:EB
            X509v3 Authority Key Identifier:
                keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d0:b8:0a:9b:96:8c:76:a0:3c:b5:61:8a:e7:e4:6c:e6:4b:
         29:bc:e3:f2:0c:58:47:af:d0:d1:fe:b7:ff:01:74:ed:3c:cd:
         21:11:29:9e:9c:23:e6:27:01:02:35:e4:a6:2f:21:7d:25:f1:
         69:78:e7:5e:83:b2:e6:fe:21:1d:77:f9:76:5d:54:62:48:5a:
         e3:4d:66:e7:f2:87:a3:52:2a:80:f9:11:05:b8:94:1c:b6:5f:
         70:dd:4a:d7:eb:0b:5b:09:42:dd:b0:c7:0f:0c:b1:77:c9:f6:
         e3:55:ad:b2:5e:ee:c7:a0:99:e9:8a:55:89:d8:ca:55:1c:7c:
         c0:2e:dc:87:23:ce:dd:fa:ff:6b:79:9c:77:50:87:f2:a6:31:
         1b:89:6c:f6:28:85:c2:b6:76:d3:37:42:f1:d8:88:55:70:c2:
         1f:29:a0:c4:01:f8:89:c7:e8:dd:64:2a:35:ac:10:90:b1:ce:
         39:50:a2:a3:d0:22:06:ac:85:2f:21:cb:9b:9f:e0:b1:84:45:
         fe:0a:a5:93:7d:7d:c7:6e:42:00:2f:6b:c9:b6:ff:26:d7:29:
         9e:92:c0:06:31:f3:20:09:93:31:1b:ec:c3:fd:c0:75:6f:23:
         35:9f:8d:ef:75:90:59:f8:44:a1:be:30:13:b7:5a:c5:37:5d:
         8e:6f:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:49:15 2026 by rpki-client