Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
File:                     PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json)
Hash identifier:          pr6/tpYZW25H97F98mczBeYHRjGRenCUOt2Ihq/cou4=
Subject key identifier:   AC:08:04:BF:3B:F1:23:39:AC:8B:A9:4B:DD:98:6D:DB:BC:F3:07:D3
Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
Certificate issuer:       /CN=3d555102998184fda7c3012e861900948fcf2773
Certificate serial:       01A18E9D70101972A9CBC35A15FD6B591225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
Manifest number:          041F
Signing time:             Fri 30 Oct 2026 21:00:44 +0000
Manifest this update:     Fri 30 Oct 2026 21:00:44 +0000
Manifest next update:     Sat 31 Oct 2026 21:00:44 +0000
Files and hashes:         1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: jGZzSoefJsxM6RMWWe4QxEC+8bb8RzEj+DOrqaFMxhI=)
                          2: kbd8DyKehIsGg90OqET0nvTdof4.roa (hash: CToqIuzEVpITovVF+3kk6xRGdjwlN1OnxUyoxb4vvQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8e:9d:70:10:19:72:a9:cb:c3:5a:15:fd:6b:59:12:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d555102998184fda7c3012e861900948fcf2773
        Validity
            Not Before: Oct 30 21:00:44 2026 GMT
            Not After : Oct 31 21:00:44 2026 GMT
        Subject: CN=ac0804bf3bf12339ac8ba94bdd986ddbbcf307d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:47:35:08:d7:97:a7:45:ab:bb:d7:52:33:36:
                    d8:92:51:2e:72:70:5c:bf:91:6b:7c:69:04:8d:7f:
                    48:31:87:69:07:36:a0:b9:8c:0e:17:b5:ef:ca:a6:
                    ff:52:22:1c:40:cc:e5:68:d2:e2:43:6e:da:05:29:
                    a7:d0:9e:95:dc:2c:fd:7e:43:43:d6:ee:7b:26:46:
                    be:18:52:be:79:74:30:87:e6:68:47:70:12:28:93:
                    96:62:c1:8c:1b:18:9a:a6:9d:44:a6:71:8b:73:59:
                    b5:33:18:f9:74:cb:cf:ae:7b:4e:6b:7d:0f:46:19:
                    81:3f:cc:6d:93:49:65:1d:b0:a2:69:f3:3f:c1:95:
                    a4:a9:f0:95:09:89:84:a2:04:ad:62:a6:6f:ef:ca:
                    29:5b:0e:28:f0:65:7d:cd:8e:78:af:6d:4c:1a:68:
                    37:2f:80:9c:aa:9f:43:73:f5:cb:59:82:27:78:61:
                    14:19:9f:4f:d5:a6:ce:04:52:61:f8:ff:3c:af:03:
                    50:0c:28:17:26:59:7e:24:a7:8e:b1:a1:f3:72:c5:
                    41:c0:0e:eb:7c:ae:b9:06:74:ee:5c:8c:c8:63:de:
                    f5:27:8d:b1:37:92:9d:eb:d6:09:c0:74:14:b5:a9:
                    68:32:03:c2:e5:86:a6:9a:4a:2f:37:56:37:45:d9:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:04:BF:3B:F1:23:39:AC:8B:A9:4B:DD:98:6D:DB:BC:F3:07:D3
            X509v3 Authority Key Identifier:
                keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:49:07:99:1b:be:ad:a3:47:14:fd:1e:4c:d0:54:3b:72:49:
         ff:eb:90:1a:94:e5:ef:99:b0:65:6a:86:e8:e1:4f:15:6f:5f:
         70:df:87:65:2a:62:0f:8f:4d:fb:7f:fc:bb:bd:09:9f:01:03:
         69:9b:00:df:e9:b5:ac:36:6d:72:1b:f9:56:02:f8:72:04:d8:
         85:80:d1:f1:4b:79:71:60:39:52:f3:b4:9d:10:9d:a3:b0:bc:
         b5:c3:21:bb:59:ca:6c:4b:91:d8:14:fd:40:51:ca:89:96:d0:
         38:70:94:c8:1e:d2:06:39:3d:d0:7d:1e:66:fb:44:7e:bc:41:
         03:d3:4e:7a:08:55:e1:72:f2:17:9c:e9:88:77:b8:90:28:a9:
         5b:0a:50:20:e9:0a:52:92:83:e9:ce:60:18:33:49:a5:9d:71:
         b9:36:21:42:9d:93:5e:b6:04:f1:81:c9:fb:6e:b4:18:cb:e3:
         09:67:bb:ac:2b:bd:57:dd:ef:9b:5a:eb:8e:4c:aa:6e:7f:ad:
         09:79:c4:f8:0c:7a:74:e4:0e:45:41:1a:34:fb:8f:70:eb:fc:
         ba:ef:46:e3:63:7c:74:6f:52:bf:ef:ee:29:1b:6f:dd:da:44:
         81:a3:af:ca:1c:63:a0:c2:1c:d0:04:58:a9:7d:89:61:f4:6d:
         1a:bf:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:24:32 2026 by rpki-client