Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
File:                     PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json)
Hash identifier:          rMSaG9R0MNnSz7udax2fm8OIwZkhEi26LndIP3pdu5U=
Subject key identifier:   4B:51:3F:EE:23:B3:93:71:F4:44:B8:A5:A1:92:9A:6D:70:09:2A:24
Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
Certificate issuer:       /CN=3d555102998184fda7c3012e861900948fcf2773
Certificate serial:       01A089E75E1599DF8498F63CD9A37C11FC6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
Manifest number:          0398
Signing time:             Thu 10 Sep 2026 06:00:36 +0000
Manifest this update:     Thu 10 Sep 2026 06:00:36 +0000
Manifest next update:     Fri 11 Sep 2026 06:00:36 +0000
Files and hashes:         1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: xN66GAY7FdWRRxlO+2UDXXowG/Eh0Sv5VSpUjyTsCg4=)
                          2: kbd8DyKehIsGg90OqET0nvTdof4.roa (hash: CToqIuzEVpITovVF+3kk6xRGdjwlN1OnxUyoxb4vvQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:5e:15:99:df:84:98:f6:3c:d9:a3:7c:11:fc:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d555102998184fda7c3012e861900948fcf2773
        Validity
            Not Before: Sep 10 06:00:36 2026 GMT
            Not After : Sep 11 06:00:36 2026 GMT
        Subject: CN=4b513fee23b39371f444b8a5a1929a6d70092a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:d4:77:ea:91:e1:cd:64:48:a1:4e:dc:68:
                    90:b2:94:44:ab:6e:9c:88:70:a8:1b:ed:5a:f5:54:
                    58:41:35:2f:af:92:8d:98:6d:e3:b1:99:89:7f:da:
                    7a:e1:a4:c0:03:ff:fa:56:29:c1:8f:89:17:45:94:
                    f5:cf:fe:f5:01:cd:45:b4:bc:a5:9c:7c:dd:4c:8e:
                    24:19:30:51:ba:23:07:e1:db:f2:ed:e6:88:82:f5:
                    e9:2b:a8:46:fb:3e:9a:80:c9:87:ec:e4:43:f9:7d:
                    2e:bc:24:2b:51:72:ea:20:ed:57:87:3a:d7:0d:59:
                    bf:e2:94:13:f1:f2:db:3a:4a:ae:81:08:fd:4a:35:
                    7c:2e:bd:f4:04:9e:00:92:fb:44:c7:76:9c:d8:b9:
                    36:ff:44:7f:8c:a9:d6:d4:e6:a1:de:cb:95:8a:6b:
                    9d:a0:84:89:23:91:6c:50:55:88:b6:87:45:4e:46:
                    52:66:03:cf:6f:a6:b6:a8:d6:c3:7c:cc:31:2a:7d:
                    8c:b3:88:d0:8f:74:c6:26:43:72:7d:a9:3c:cf:4d:
                    9b:36:3d:a7:f2:d8:d4:cd:bb:a7:cb:d0:8d:6d:52:
                    55:1f:99:b7:26:ba:b6:00:4d:77:b1:1a:a5:40:79:
                    72:ec:61:36:08:fc:fe:1f:02:33:04:d2:ac:fb:50:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:51:3F:EE:23:B3:93:71:F4:44:B8:A5:A1:92:9A:6D:70:09:2A:24
            X509v3 Authority Key Identifier:
                keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3b:74:e2:ba:05:8f:b9:66:35:6f:59:d9:b3:57:39:4d:9b:
         61:d0:ef:3f:cc:89:f3:29:5c:e5:56:8a:96:e5:b3:08:01:8a:
         7c:4f:5d:4c:93:07:6d:ee:60:f2:fa:b4:ec:ad:23:3b:16:d3:
         f7:85:48:97:34:87:60:c1:f8:06:71:b9:ec:71:45:25:e8:51:
         a3:fd:de:d0:f8:3f:00:23:2f:20:9a:af:6d:f0:bd:ab:1b:08:
         62:58:95:da:00:eb:af:0d:af:32:ad:c8:62:06:ff:4a:9a:cf:
         10:29:03:a7:bc:7b:ad:c8:bb:99:c2:2b:aa:9e:24:44:e3:16:
         2f:b8:51:49:3b:69:47:ab:b1:6e:62:c9:6b:18:82:79:c0:20:
         8f:2e:47:29:df:49:fd:94:f0:72:17:75:01:7d:4b:a8:2c:b7:
         6e:4b:58:0d:94:25:bd:89:94:82:c3:9a:d9:d7:fa:32:c9:fe:
         d6:27:9e:16:50:bd:b7:c5:88:84:34:44:61:64:bf:a1:71:3a:
         e1:8c:27:77:9d:f5:30:01:7c:7c:ad:19:ec:db:47:b0:a1:b9:
         ce:c8:20:d5:e8:1d:69:83:61:b4:38:a8:ae:15:be:7f:bb:4c:
         26:6e:8c:4f:62:0a:64:86:68:73:4e:77:0d:ff:e0:c4:d2:ef:
         f9:48:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:58:26 2026 by rpki-client