Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File:                     PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier:          7BGpTTiOORBy9QfJ/1POhIif23tOq4V6vBBaQ8SZ7rA=
Subject key identifier:   2F:80:B2:79:67:13:F1:77:32:AE:80:95:85:EE:DF:A8:F4:65:5C:CF
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer:       /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial:       019EDDD34384FF8F2F3F0E5164A61598D606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number:          048A
Signing time:             Fri 19 Jun 2026 03:01:10 +0000
Manifest this update:     Fri 19 Jun 2026 03:01:10 +0000
Manifest next update:     Sat 20 Jun 2026 03:01:10 +0000
Files and hashes:         1: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: ge/Af3zPIQAx+im7wkAjy+9+zRJta8BcNecX9hAZ3tY=)
                          2: b06IK2jnqaGT2Aa6wapV_ItJbLk.roa (hash: evhqnMI6fxBMtq2kvZ+VYu5aDa3S4q8vrEyodEWm170=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dd:d3:43:84:ff:8f:2f:3f:0e:51:64:a6:15:98:d6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
        Validity
            Not Before: Jun 19 03:01:10 2026 GMT
            Not After : Jun 20 03:01:10 2026 GMT
        Subject: CN=2f80b2796713f17732ae809585eedfa8f4655ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:ca:8a:8d:2b:3c:fd:29:a9:7b:38:82:b4:
                    50:b3:3d:8e:b3:cc:a8:d1:5b:3d:41:12:ac:5b:3e:
                    c9:30:eb:23:f6:a0:17:c4:3e:d1:3d:85:0f:b0:10:
                    bc:89:dd:12:a0:e7:99:5d:a5:1a:41:a5:21:87:fa:
                    ef:69:3c:5d:9b:88:16:92:1c:3d:3b:a8:a4:a2:e0:
                    f7:12:41:23:4a:c8:50:4c:21:d9:65:0b:00:54:70:
                    0e:00:2b:44:77:4c:6f:d5:89:19:05:23:1e:da:97:
                    49:f2:59:45:e6:92:38:f3:98:cc:b4:a6:10:41:24:
                    70:2f:a5:53:41:b8:ae:f1:76:19:74:d9:49:1d:a8:
                    28:4a:2c:57:a2:69:db:98:f0:2b:2e:df:45:6f:02:
                    77:f1:4f:11:b2:67:df:f0:ba:9b:fb:29:cf:4f:f8:
                    a2:e5:e8:e5:3f:0f:d9:cc:a1:0a:d7:17:f0:14:be:
                    54:cf:e3:c8:79:ce:2c:7f:bd:9c:27:3f:a3:1f:5f:
                    62:2d:e8:56:9b:05:52:91:01:b4:07:78:90:f8:23:
                    59:26:3f:72:04:32:18:c0:bd:a4:39:1c:f9:c3:62:
                    84:d6:ed:59:d4:e7:02:09:38:41:24:d4:93:23:7d:
                    1e:4f:bc:ee:f9:20:28:7f:92:2d:af:a3:df:06:b2:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:80:B2:79:67:13:F1:77:32:AE:80:95:85:EE:DF:A8:F4:65:5C:CF
            X509v3 Authority Key Identifier:
                keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:97:4d:f6:c8:d2:55:9b:d5:ba:62:b6:0f:c0:fb:00:78:2f:
         73:72:74:64:ff:06:9c:9e:1c:a2:4a:c5:31:9b:ac:e7:44:13:
         79:07:53:b5:ee:3b:c0:10:c2:fb:14:40:63:36:f3:a3:0f:5b:
         b9:97:f8:24:2f:c5:f1:c1:ac:3f:d5:ad:5d:1f:c8:52:93:8c:
         2e:63:66:89:ca:53:f1:6e:a2:ae:90:dc:c0:bf:f5:56:5c:af:
         36:a6:45:a4:e4:dd:3e:f8:09:db:b2:e8:44:9f:95:40:98:de:
         6f:17:d8:8e:70:e6:47:aa:87:00:66:56:b1:0c:f2:6a:61:ab:
         61:66:e1:09:bb:6a:77:ae:8a:f2:cf:2a:10:a4:4f:be:e4:7b:
         ab:82:78:52:0f:18:d6:c7:24:f9:85:3f:7a:25:72:ff:45:38:
         d0:af:d6:c2:6b:79:31:16:2d:90:9d:a0:f0:8e:12:f0:88:1a:
         5f:33:06:66:80:ff:f0:ba:a9:69:38:7a:3c:6e:18:88:cb:6a:
         f6:26:e2:8a:49:69:cf:4c:c9:43:fa:ef:e8:93:79:33:07:5a:
         24:a2:96:56:50:41:f4:65:b9:aa:04:73:8e:63:9b:c8:37:30:
         4f:05:0e:dc:01:93:a8:77:85:35:2d:e4:62:49:56:1b:64:45:
         28:91:d0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:17:43 2026 by rpki-client