Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
File:                     PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json)
Hash identifier:          ou/GP/QNkx3ozzqQcTppeashD0AZjugWW+mkxjgZf4k=
Subject key identifier:   67:4F:9A:E9:7F:CD:DB:50:3F:80:90:6F:90:6E:56:6D:50:19:32:BD
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Certificate issuer:       /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial:       019EBEB5B0FF6A85825819D7A0E8496A44ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
Manifest number:          033E
Signing time:             Sat 13 Jun 2026 02:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:38 +0000
Files and hashes:         1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: wXLxKrPJ2O971G7PjvXGRYFk6gNgEL7JzXPhiFQJ5JA=)
                          2: xz923TuXOINB3WLY3XLk0pyQs6s.asa (hash: SGmXF+mIU3rmhMsPtkMgk1YdAxdF0xFT+cRVzGK/gGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:b0:ff:6a:85:82:58:19:d7:a0:e8:49:6a:44:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
        Validity
            Not Before: Jun 13 02:00:38 2026 GMT
            Not After : Jun 14 02:00:38 2026 GMT
        Subject: CN=674f9ae97fcddb503f80906f906e566d501932bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c0:f0:0a:03:d2:7f:9e:ed:46:18:5c:c6:ac:
                    bd:0c:9d:71:79:9d:5f:0e:4c:d6:ba:21:a9:06:f9:
                    33:96:11:7d:88:ee:6b:8c:14:2d:50:ec:76:58:b8:
                    8e:b0:3a:ce:c6:d5:a3:50:e5:60:39:91:b0:fe:e1:
                    4c:60:ad:45:43:b6:a9:ff:22:1d:80:8a:5b:0e:fd:
                    e0:2f:6a:e2:0b:11:62:35:82:69:a6:c2:82:f2:22:
                    b4:c8:50:9a:73:09:29:08:e1:2f:45:3e:21:1d:dc:
                    77:85:4e:d7:f2:65:cb:17:12:3b:d5:91:d6:87:f1:
                    bd:f1:61:84:3b:4e:e9:14:16:82:84:b3:5f:86:d3:
                    b6:c3:e2:08:c4:6f:90:7f:bf:b3:63:eb:a0:87:49:
                    51:20:0b:59:0f:86:12:e8:4a:01:65:4f:81:b4:b4:
                    b9:d4:cc:49:c7:c1:a1:8e:eb:60:ac:d5:54:31:05:
                    a0:45:9a:88:4a:0e:5f:c4:bd:47:9a:51:f4:0e:8c:
                    ae:99:9e:4e:58:ba:ba:de:ff:62:07:e3:c1:4a:81:
                    a1:ce:8e:88:e0:1e:14:e8:ac:8e:cc:0a:8a:2d:a9:
                    a3:57:52:85:d1:f0:86:7f:81:bd:b3:09:9e:46:79:
                    18:e9:88:63:48:c4:6d:73:0b:2d:ed:3c:ad:35:42:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:9A:E9:7F:CD:DB:50:3F:80:90:6F:90:6E:56:6D:50:19:32:BD
            X509v3 Authority Key Identifier:
                keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:12:85:b4:20:06:70:60:d0:bf:92:f2:77:91:dd:8b:e0:c6:
         cb:e8:8e:7e:97:cb:4b:b0:3c:38:21:81:5e:75:29:09:44:1c:
         9b:35:56:46:53:02:09:22:5f:24:93:ff:4e:12:b9:62:5e:cb:
         10:64:1a:70:67:7a:42:e4:00:eb:44:19:c7:f2:7f:81:68:1e:
         36:40:cc:a7:25:84:00:77:8d:37:37:20:10:0d:93:55:11:36:
         aa:23:50:30:88:d8:ef:8d:d9:f4:b8:af:72:a7:e2:1e:12:51:
         53:0d:b0:a7:3e:57:34:d8:25:e6:9f:fd:c9:18:d6:af:b8:0f:
         60:9e:11:b0:69:1c:fe:96:72:9d:ea:a7:7b:f1:d4:7f:c0:fe:
         ca:e2:f2:58:a4:d6:6d:bf:2c:c1:24:6d:ba:88:68:71:18:92:
         ec:0c:ea:35:17:fd:7b:18:10:49:50:bb:61:8a:e6:35:28:7e:
         40:ea:8f:a0:ea:0d:95:4a:79:6d:27:30:b9:6d:d9:88:d5:10:
         bf:04:f4:6b:ae:69:45:90:2c:9f:05:9d:7e:7d:84:b7:8c:19:
         1f:3a:f3:6e:84:a5:01:6a:bc:88:ae:fd:74:a7:f8:e9:e7:26:
         54:f4:3d:26:2a:64:5a:7c:bb:43:a9:14:be:4f:f1:c5:6f:c4:
         53:1d:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:09 2026 by rpki-client