Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
File:                     PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json)
Hash identifier:          OKK35mwrsqq9zUE/W1q/EowGj6LV/Er526MVWKh/H8Q=
Subject key identifier:   50:F0:5E:4C:A4:7D:84:DE:A4:D2:09:5C:F0:C9:84:43:7A:EB:CA:A9
Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
Certificate issuer:       /CN=3d555102998184fda7c3012e861900948fcf2773
Certificate serial:       019A2252539750A6853C70B850C8A59410CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
Manifest number:          46
Signing time:             Sun 26 Oct 2025 21:00:11 +0000
Manifest this update:     Sun 26 Oct 2025 21:00:11 +0000
Manifest next update:     Mon 27 Oct 2025 21:00:11 +0000
Files and hashes:         1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: u2LCOx6ZMHvs+a8p8SdegddJ9Q1ad9+3qCnpouO7T6I=)
                          2: yHDz_dgw2HNuVtS7NpKaJLAB8-Y.roa (hash: +cBZOUimuRqIk7jDWcn04PYJ9cM7ifN5PFGvV7TP168=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:52:53:97:50:a6:85:3c:70:b8:50:c8:a5:94:10:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d555102998184fda7c3012e861900948fcf2773
        Validity
            Not Before: Oct 26 21:00:11 2025 GMT
            Not After : Oct 27 21:00:11 2025 GMT
        Subject: CN=50f05e4ca47d84dea4d2095cf0c984437aebcaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:e6:44:c9:a8:06:ab:8d:f4:96:86:77:ff:
                    70:55:64:08:b2:7a:f3:f8:62:98:7b:a9:62:86:bc:
                    77:2f:45:59:8a:f3:90:21:4b:92:cb:1e:88:ef:3f:
                    8b:6b:8e:96:15:0f:7c:93:d6:3d:2a:e0:ad:64:04:
                    86:75:c3:4f:00:98:d3:f0:f8:4c:93:c7:b9:4a:3f:
                    09:6d:c7:d1:59:4c:f1:53:e8:bc:f4:fb:eb:9a:a3:
                    14:ec:dc:03:0a:f2:33:27:b5:13:35:e1:29:71:d3:
                    0f:e3:44:80:2f:dd:04:f0:b3:2a:fd:0f:99:23:43:
                    12:52:47:24:f3:ab:b0:68:72:6e:99:1f:8b:a9:dc:
                    e1:93:6f:f1:63:8c:a2:1a:e3:86:08:03:56:b8:9d:
                    ac:f7:4d:1a:08:38:c2:1f:07:07:9f:1a:7d:31:2f:
                    09:20:fb:9f:bb:d4:1a:c8:d2:d4:d7:16:2e:dc:36:
                    35:0d:3f:d2:a3:66:9c:a5:92:1a:81:89:c5:83:2b:
                    63:f3:83:7a:21:3d:18:1b:ba:c6:16:9f:c8:c3:74:
                    6b:3c:fe:34:c7:59:00:72:80:cd:72:83:0d:d3:b4:
                    2a:f5:4f:96:aa:1f:10:8e:76:10:77:ec:6f:0d:3f:
                    6b:71:42:90:fd:e5:98:43:7b:28:5e:9a:58:f1:e5:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F0:5E:4C:A4:7D:84:DE:A4:D2:09:5C:F0:C9:84:43:7A:EB:CA:A9
            X509v3 Authority Key Identifier:
                keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f0:6a:74:f0:09:41:74:fc:a1:06:8f:a6:37:38:e6:ba:12:
         e4:fd:b3:09:13:8c:60:da:dc:34:86:53:53:ba:21:c4:5a:ee:
         52:3e:67:6f:24:d0:01:08:5e:20:85:07:6f:72:a6:84:46:69:
         ba:75:ce:ef:79:8d:7c:3e:51:4c:db:35:8e:ef:ec:64:1c:c6:
         3e:8c:45:bf:06:4b:d0:17:94:9b:be:44:86:d7:6a:b3:9b:0a:
         34:34:e4:d8:1d:2e:b8:bb:19:5d:d0:04:04:cb:6f:df:da:ae:
         a5:65:e2:45:e9:ad:f9:6d:bb:46:3e:e8:55:a5:e0:53:db:65:
         ca:ad:1d:75:ee:76:a6:d6:4f:00:26:78:28:c2:ab:3d:38:de:
         8c:61:a2:b8:67:69:6b:97:7b:56:86:75:11:5b:9d:6b:4c:35:
         18:6c:07:97:21:93:a8:f4:bd:9a:e9:40:e3:ab:8a:db:e0:40:
         27:2a:7b:69:de:f9:8c:04:9c:aa:d1:46:5e:3f:a7:07:4d:46:
         c5:1c:4f:68:48:04:d5:a7:3c:1e:0d:7a:f0:e3:9a:bc:a5:e1:
         aa:35:7c:8a:4f:41:48:8c:ad:24:44:79:6d:0b:6c:d2:e8:05:
         ee:41:11:04:08:01:6d:1f:27:5f:ab:d0:46:ce:d3:f3:70:d0:
         61:2a:f9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:08:04 2025 by rpki-client