Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
File:                     PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json)
Hash identifier:          mfMufoHmIbtZELbq8eprp8YfWNZajm99KH0oTFatU8o=
Subject key identifier:   11:7A:06:6B:64:79:AF:61:27:BC:C4:7A:B2:E2:1A:15:38:D1:1E:ED
Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
Certificate issuer:       /CN=3d555102998184fda7c3012e861900948fcf2773
Certificate serial:       019CB0FF934EAF5C57EE38D26990404D8DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
Manifest number:          019A
Signing time:             Tue 03 Mar 2026 00:01:05 +0000
Manifest this update:     Tue 03 Mar 2026 00:01:05 +0000
Manifest next update:     Wed 04 Mar 2026 00:01:05 +0000
Files and hashes:         1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: 0IOiK2FTbP72UU8B5QUNX+HPLrCeJ6re1T5Q41U4FTk=)
                          2: kbd8DyKehIsGg90OqET0nvTdof4.roa (hash: CToqIuzEVpITovVF+3kk6xRGdjwlN1OnxUyoxb4vvQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:ff:93:4e:af:5c:57:ee:38:d2:69:90:40:4d:8d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d555102998184fda7c3012e861900948fcf2773
        Validity
            Not Before: Mar  3 00:01:05 2026 GMT
            Not After : Mar  4 00:01:05 2026 GMT
        Subject: CN=117a066b6479af6127bcc47ab2e21a1538d11eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:5c:98:96:07:50:6c:2b:be:46:e6:89:e1:
                    54:2c:d4:71:74:25:53:0f:4e:23:f8:48:7f:6d:03:
                    b6:65:e7:10:24:bc:4f:a6:85:eb:15:1d:dc:74:e5:
                    2c:9d:f1:b8:7e:1b:9a:ce:89:de:31:f5:40:b1:ed:
                    79:e1:09:a3:e9:e3:da:bc:fc:e6:56:0b:f0:10:c9:
                    68:0f:14:bf:33:2c:ab:71:dd:0e:ed:9c:4c:a8:5f:
                    64:c2:cd:62:d5:dd:71:1e:1f:c0:b1:b2:6e:37:93:
                    4a:09:b5:9e:95:28:8e:5c:f9:a7:fd:15:22:38:c5:
                    72:c4:ed:3c:32:84:b3:51:36:46:c9:2a:a7:99:99:
                    90:f5:93:9f:c0:a9:5b:27:0e:2c:d6:a0:62:c3:3f:
                    6a:89:b2:2f:55:cd:31:b6:d9:60:64:e6:9c:3c:05:
                    60:4c:89:53:16:c2:44:99:5a:50:65:cd:58:37:44:
                    d0:ff:d5:77:0a:5e:6a:8b:21:9d:95:eb:93:1a:74:
                    c0:bc:b7:9b:61:ee:70:97:3e:7a:26:f1:fd:7c:3e:
                    a7:ad:1c:22:bd:66:f2:52:8a:e3:c1:cc:62:2a:ff:
                    70:c9:aa:b8:c5:9f:f2:31:e8:91:56:b9:48:94:6c:
                    01:50:09:af:f1:df:f2:1b:f7:33:75:de:a3:cf:f3:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7A:06:6B:64:79:AF:61:27:BC:C4:7A:B2:E2:1A:15:38:D1:1E:ED
            X509v3 Authority Key Identifier:
                keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a0:18:05:12:28:76:af:f5:84:8e:6a:3e:b0:50:8f:44:23:
         1b:cd:76:d4:e7:59:ed:ba:0f:90:7f:db:f4:d4:71:a6:08:67:
         3e:26:ea:44:63:d1:1b:0f:53:c5:18:1e:a8:8f:47:da:d2:f0:
         fb:1a:ae:6e:48:9c:d1:c3:1f:09:35:24:dd:c2:22:26:dc:b2:
         59:7b:07:6d:56:f8:48:57:74:72:78:d0:5b:aa:f4:eb:00:ef:
         5b:69:7a:61:fa:1e:88:5a:19:6c:08:07:3b:55:cc:e4:c2:2a:
         d2:1f:46:3c:35:2d:e1:77:51:9f:7c:73:6e:7f:83:0a:d6:46:
         c1:20:96:94:b7:ef:ab:e0:55:85:88:b0:be:09:50:a9:84:91:
         0f:7b:c0:7d:ad:58:c8:70:3b:11:b6:fd:8e:75:dd:a3:32:89:
         36:5f:88:94:dd:4f:fe:25:b9:55:41:ba:e4:0b:3b:0a:87:7e:
         e3:86:bc:0f:2e:20:5a:f7:9f:2e:70:20:c5:4a:05:c3:30:9b:
         d7:76:63:9e:74:80:16:c5:83:9d:b8:99:82:c8:25:1f:4f:06:
         77:6f:d6:ee:ee:8b:d7:21:ac:15:4d:cd:d1:3a:f4:f7:8a:42:
         e3:26:7d:09:cb:ec:85:89:5e:56:65:63:d9:f2:8e:02:3a:c1:
         cb:54:b2:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyw/5NOr1xX7jjSaZBATY24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNTU1MTAyOTk4MTg0ZmRhN2MzMDEyZTg2MTkwMDk0OGZj
ZjI3NzMwHhcNMjYwMzAzMDAwMTA1WhcNMjYwMzA0MDAwMTA1WjAzMTEwLwYDVQQD
EygxMTdhMDY2YjY0NzlhZjYxMjdiY2M0N2FiMmUyMWExNTM4ZDExZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygxcmJYHUGwrvkbmieFULNRxdCVT
D04j+Eh/bQO2ZecQJLxPpoXrFR3cdOUsnfG4fhuazoneMfVAse154Qmj6ePavPzm
VgvwEMloDxS/Myyrcd0O7ZxMqF9kws1i1d1xHh/AsbJuN5NKCbWelSiOXPmn/RUi
OMVyxO08MoSzUTZGySqnmZmQ9ZOfwKlbJw4s1qBiwz9qibIvVc0xttlgZOacPAVg
TIlTFsJEmVpQZc1YN0TQ/9V3Cl5qiyGdleuTGnTAvLebYe5wlz56JvH9fD6nrRwi
vWbyUorjwcxiKv9wyaq4xZ/yMeiRVrlIlGwBUAmv8d/yG/czdd6jz/OtYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF6Bmtkea9hJ7zEerLiGhU40R7tMB8GA1UdIwQY
MBaAFD1VUQKZgYT9p8MBLoYZAJSPzydzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yNzMzY2UtZTliOS00YWI5LTk1MGMt
YzI4YmRhMjMwY2I0LzEvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yNzMzY2UtZTliOS00YWI5LTk1MGMtYzI4YmRhMjMwY2I0
LzEvUFZWUkFwbUJoUDJud3dFdWhoa0FsSV9QSjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaAYBRIo
dq/1hI5qPrBQj0QjG8121OdZ7boPkH/b9NRxpghnPibqRGPRGw9TxRgeqI9H2tLw
+xqubkic0cMfCTUk3cIiJtyyWXsHbVb4SFd0cnjQW6r06wDvW2l6YfoeiFoZbAgH
O1XM5MIq0h9GPDUt4XdRn3xzbn+DCtZGwSCWlLfvq+BVhYiwvglQqYSRD3vAfa1Y
yHA7Ebb9jnXdozKJNl+IlN1P/iW5VUG65As7Cod+44a8Dy4gWvefLnAgxUoFwzCb
13ZjnnSAFsWDnbiZgsglH08Gd2/W7u6L1yGsFU3N0Tr094pC4yZ9CcvshYleVmVj
2fKOAjrBy1Sy3w==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:06:57 2026 by rpki-client