Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
File:                     PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft (raw, json)
Hash identifier:          vBGgflIq2hOIDaEnB5GRURTQMyjNfnY6pm9eHcLYPTY=
Subject key identifier:   75:50:E7:61:66:EF:58:CC:AB:B1:42:E5:40:0B:53:D0:F0:B9:43:53
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Certificate issuer:       /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial:       01A16FEE805F063BC07BC489A95B0B6CCBF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
Manifest number:          1AC0
Signing time:             Sat 24 Oct 2026 22:01:03 +0000
Manifest this update:     Sat 24 Oct 2026 22:01:03 +0000
Manifest next update:     Sun 25 Oct 2026 22:01:03 +0000
Files and hashes:         1: PAgTss81EypznIUSXUrAempw_so.roa (hash: hVAKVYVtH7pfRFO9nXZRlBkZwPvwRW2v9xDHqxcNeV0=)
                          2: PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl (hash: w1R/QodeOLgKRWZwbxmcGDmGzjcVvluXUGnFaOIr/JE=)
                          3: g873udppqiGZfDfxEVPwS0fN2iE.roa (hash: vGYcXaCIiPom9FCy5Ogp8Jq2cO/kNZJXFstzgmVZSYM=)
                          4: o8OHfV95jFDGQMcKlS4Elzm403c.roa (hash: wX1Olvy8rFtI4rUY+LS6paVP5fazc6rWqyHgWeMMLFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:ee:80:5f:06:3b:c0:7b:c4:89:a9:5b:0b:6c:cb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
        Validity
            Not Before: Oct 24 22:01:03 2026 GMT
            Not After : Oct 25 22:01:03 2026 GMT
        Subject: CN=7550e76166ef58ccabb142e5400b53d0f0b94353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a6:33:1f:12:41:0f:55:5f:d7:7d:ad:36:6c:
                    b2:06:99:48:0d:af:08:5c:ab:7f:18:88:80:0d:9a:
                    d6:b9:dd:e0:98:98:18:9d:d9:74:9c:c5:e0:66:14:
                    55:ef:8a:f3:e3:db:94:ed:8e:16:a6:0e:11:66:6c:
                    93:21:d7:0c:4a:c9:a9:f0:06:6a:ca:01:bd:53:f8:
                    c4:95:3f:98:2b:31:0c:cb:7a:91:11:e1:54:b1:c8:
                    00:1f:53:74:49:72:06:6f:c5:68:4f:f5:a4:0d:cc:
                    a5:d4:20:f4:76:6b:f5:0e:a9:1d:3d:eb:59:5c:38:
                    48:68:ec:5b:6f:e9:71:1a:58:f5:5f:19:16:fe:c6:
                    46:aa:19:96:d0:ed:45:d0:95:1e:b2:98:bf:1b:11:
                    07:14:92:29:af:fc:d5:a5:95:0e:52:ec:47:66:d6:
                    a4:a8:b7:39:a4:ed:8f:41:fd:dc:e7:e5:93:f0:e9:
                    cd:96:54:3b:41:5f:b7:5d:e6:23:e5:af:c2:1b:11:
                    65:3b:79:36:a5:e4:fb:ce:14:82:93:42:b8:78:4c:
                    38:34:8f:22:c5:87:53:ac:0b:66:69:9a:bd:f4:a1:
                    64:0f:07:54:6d:b1:e3:ce:cb:70:85:e2:38:6d:4b:
                    a2:fa:c0:77:39:1f:26:62:fa:dd:ca:2e:dd:e3:bd:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:50:E7:61:66:EF:58:CC:AB:B1:42:E5:40:0B:53:D0:F0:B9:43:53
            X509v3 Authority Key Identifier:
                keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f2:f1:ab:4a:6f:40:b5:10:8f:43:71:06:f6:7d:8d:3d:ec:
         8e:03:ff:6e:0e:c5:13:5e:60:25:6c:e6:f6:62:d5:96:ef:ca:
         00:07:06:25:7f:2e:b3:e1:ac:3e:92:6a:c0:4c:47:18:1b:82:
         b9:af:b7:dc:b1:50:18:e4:c3:ab:e8:a4:7b:dc:d6:0a:ee:da:
         f6:c6:82:af:b1:27:43:d9:2e:05:8e:f4:91:6f:29:8f:09:af:
         22:6f:d8:af:5b:6d:4d:e0:56:19:2f:47:95:6e:48:5d:a3:a6:
         61:36:91:93:3d:51:b9:63:34:bf:8d:b0:d9:0c:cf:f7:6b:90:
         1c:b4:29:1e:ba:96:3a:02:75:a9:3d:cd:b1:be:96:33:84:4e:
         c2:7d:e6:10:27:da:2d:26:b2:ba:5b:39:f6:f8:d5:ca:48:d3:
         95:94:ad:87:99:18:01:96:86:df:3c:e2:f4:c2:10:8b:34:29:
         2e:ce:03:bf:a3:ce:10:db:1d:96:e4:b2:cb:ba:3c:e0:0a:6d:
         33:47:f6:6a:af:fd:ee:a5:ce:51:13:7c:74:89:74:b3:32:9c:
         19:6b:87:d6:c9:23:20:8e:64:3d:6f:07:24:e7:b4:7f:ed:b6:
         15:e9:fd:b3:ca:36:50:1d:7f:04:d6:28:ec:3f:a7:83:f4:90:
         da:52:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:05:43 2026 by rpki-client