Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File:                     PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier:          rEpJW5Jhk5Ab2XIzfVs7/JR6ZDqLEH9Q7gaz8EwfW1I=
Subject key identifier:   02:D2:A3:39:ED:03:41:99:B1:50:1C:B7:38:1E:D7:A6:EB:5C:98:C2
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer:       /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial:       019E5CA5F527D8059B29B3AB66BBE7F25C5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number:          061E
Signing time:             Mon 25 May 2026 01:00:40 +0000
Manifest this update:     Mon 25 May 2026 01:00:40 +0000
Manifest next update:     Tue 26 May 2026 01:00:40 +0000
Files and hashes:         1: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: 8WiVo9+Dj9m++8b+/qYbt0Au4WhfuLp2UnKVkJpyMv4=)
                          2: SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa (hash: wnSrmmgjgNFni6XtfvP0Umwv0uy50/wQqCglKf7Kmd0=)
                          3: ao20WTlIdybEK7OORASxFGQHj5g.roa (hash: Bp9zWQUGEQfw9+EW5ojP9Kn3oyy71raM8WkHF/muXnE=)
                          4: sR1RaWXS_5l1a2IX6LHUiU-d2pA.roa (hash: S4pTQrYhG8r3f9SFHV88NAichr1el296Kbb8q2csBdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 May 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:5c:a5:f5:27:d8:05:9b:29:b3:ab:66:bb:e7:f2:5c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
        Validity
            Not Before: May 25 01:00:40 2026 GMT
            Not After : May 26 01:00:40 2026 GMT
        Subject: CN=02d2a339ed034199b1501cb7381ed7a6eb5c98c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:42:69:31:e7:78:cd:b8:bd:31:45:55:0e:09:
                    43:34:01:ad:55:40:cd:e9:58:23:c7:07:c2:2d:1d:
                    5c:07:44:0e:5c:6e:37:f8:14:25:d4:09:c2:0f:75:
                    d6:68:69:2f:d8:35:cc:43:e2:79:05:5a:f7:c4:40:
                    9a:ce:29:02:cc:e8:31:cb:97:4d:47:4e:32:9c:f7:
                    d2:ed:62:cb:03:21:a7:7c:bd:3f:ce:14:ca:ca:48:
                    e2:f2:b9:e1:ce:37:c7:9e:65:93:04:6a:f4:ef:31:
                    f1:ec:b5:d1:d4:e4:43:e6:9d:24:e7:ba:70:3a:7c:
                    e0:84:e0:db:ad:30:f0:ce:90:a6:ac:02:60:82:fb:
                    2e:98:9e:5f:3b:22:59:06:ab:b9:24:38:dd:87:70:
                    39:ee:01:83:12:8d:87:fa:96:8b:f2:00:0f:96:7c:
                    a0:7b:45:33:64:93:0e:5e:f0:b1:c5:34:95:5c:7a:
                    e3:ef:7e:4c:99:e5:52:63:5d:25:95:6c:54:9e:8d:
                    68:22:86:af:e4:f0:77:55:c3:dc:e4:1f:04:c1:c0:
                    31:01:dc:e9:06:e4:f1:75:9b:d5:28:a9:47:63:af:
                    60:fc:2d:98:42:cf:34:0a:1f:da:91:b6:1e:e2:5a:
                    54:b2:39:22:47:4a:b2:79:1e:0e:af:30:0f:60:ad:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D2:A3:39:ED:03:41:99:B1:50:1C:B7:38:1E:D7:A6:EB:5C:98:C2
            X509v3 Authority Key Identifier:
                keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:03:56:19:ee:84:d1:a7:06:da:4a:e0:f5:49:21:70:6e:aa:
         27:81:92:90:9f:1b:cc:67:03:c1:16:0f:c5:80:02:23:5c:f9:
         76:f0:6e:99:44:de:d7:3c:58:89:ce:a1:1b:25:27:30:61:71:
         f5:da:8d:55:59:55:4b:d7:f8:3d:23:fc:1d:2c:03:1a:d9:b4:
         68:dc:36:fa:25:b7:dc:43:b2:59:f5:07:f4:64:bb:1b:5d:83:
         87:2f:9d:d2:e0:31:72:d4:e3:8c:83:34:29:a4:77:4f:15:0c:
         e6:d5:f7:8c:05:d7:e8:4e:10:36:a4:a5:07:da:80:be:90:07:
         68:20:9a:c2:81:0b:23:a0:0f:18:42:ca:0c:1a:57:f1:8b:e0:
         86:b1:0b:db:85:b8:da:a3:ba:b9:cb:0a:e5:f1:6a:f3:41:f2:
         21:cc:77:13:96:94:68:02:39:75:50:1a:97:3e:0f:24:9f:6c:
         d4:d7:8d:51:b6:b4:ac:47:d2:ea:5b:98:2f:b5:1f:7e:45:ac:
         57:04:5c:d5:bd:ee:34:9a:03:86:a1:8d:6a:2b:3f:3e:ea:70:
         16:49:05:c2:91:2d:50:65:56:2f:33:94:ec:6d:02:a7:04:6d:
         78:71:9b:b1:f5:06:b6:60:b6:d2:d1:8a:85:7e:bf:7c:21:2d:
         06:43:38:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 10:40:00 2026 by rpki-client