Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
File:                     PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json)
Hash identifier:          L6dpxOekgtlQd1n6XwR0ULxipdRvvtGbG/yhZOIhvus=
Subject key identifier:   19:9B:F5:00:66:01:23:B3:F4:51:4F:54:79:03:26:F9:92:08:39:03
Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
Certificate issuer:       /CN=3d555102998184fda7c3012e861900948fcf2773
Certificate serial:       019D9C9A6B0B2045D8509AB3C3EECE460055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
Manifest number:          0214
Signing time:             Fri 17 Apr 2026 18:00:58 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:58 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:58 +0000
Files and hashes:         1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: XkvNYMPdpLJ53i+0cdhmF9NDNfNhQwXaR0Fg9VLz66s=)
                          2: kbd8DyKehIsGg90OqET0nvTdof4.roa (hash: CToqIuzEVpITovVF+3kk6xRGdjwlN1OnxUyoxb4vvQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:6b:0b:20:45:d8:50:9a:b3:c3:ee:ce:46:00:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d555102998184fda7c3012e861900948fcf2773
        Validity
            Not Before: Apr 17 18:00:58 2026 GMT
            Not After : Apr 18 18:00:58 2026 GMT
        Subject: CN=199bf500660123b3f4514f54790326f992083903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:29:e3:2b:41:92:bd:df:a2:14:a2:ed:e6:b6:
                    00:46:7d:e5:0f:3c:92:e1:e4:26:8e:7e:4e:17:15:
                    cf:1e:91:f9:1f:3b:33:98:df:9d:55:ef:31:1f:ac:
                    3e:73:05:63:54:59:33:bb:af:16:43:c4:e0:41:ae:
                    86:a9:d9:4f:a0:11:42:40:b7:f7:7b:80:77:c0:80:
                    c6:6f:62:15:cc:c3:8f:12:87:96:03:66:70:28:25:
                    81:56:4d:90:79:a4:40:08:ad:45:17:35:9d:95:ef:
                    1e:88:45:1a:c5:1b:14:53:43:f6:58:99:03:ae:e2:
                    4b:01:77:1d:e6:fb:9f:0f:f5:ef:1a:74:4d:7b:0c:
                    c4:d2:23:db:af:d2:35:71:73:5c:27:cd:35:62:4e:
                    02:18:08:84:30:ae:79:b0:84:5c:f3:d4:e5:61:fc:
                    38:1e:33:12:07:c0:8b:31:87:ad:7d:73:8b:20:2e:
                    40:f8:50:90:3f:b4:90:9a:ce:df:c1:1b:a4:27:7c:
                    99:c2:95:e3:12:43:7f:10:12:40:8f:c6:6a:46:b3:
                    07:6c:a3:2c:60:82:4a:1b:04:a0:40:d7:cf:49:9e:
                    20:e1:b7:1b:43:04:b6:df:de:c8:dd:01:62:3e:a1:
                    59:8a:36:33:1b:39:43:02:ab:62:bb:7a:ba:9a:b1:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9B:F5:00:66:01:23:B3:F4:51:4F:54:79:03:26:F9:92:08:39:03
            X509v3 Authority Key Identifier:
                keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:85:58:6c:bc:27:bb:3d:ce:ca:5f:f9:57:c9:51:ff:c5:db:
         29:7b:74:2b:af:2f:4c:01:3c:59:ce:c3:87:a6:06:8a:ba:64:
         2f:b4:82:0a:00:89:6c:9c:fb:b5:81:87:be:8d:df:ea:fd:b1:
         a7:01:4f:57:03:ec:62:21:56:82:31:4a:77:28:a6:58:dc:33:
         18:ca:28:4d:5a:34:14:ba:61:3a:06:0b:3a:7b:28:cd:7c:4f:
         1b:41:34:48:a8:6d:63:82:f4:0f:59:ff:04:4d:64:e3:2a:5c:
         45:ab:fa:59:09:fa:da:29:ec:ad:ab:e0:42:7e:b4:15:31:6a:
         56:90:46:7b:eb:8b:49:26:77:23:7e:61:a5:29:76:a4:7f:ba:
         fc:39:dc:4d:e3:29:e3:e2:cf:04:ad:02:28:6c:ef:ec:9f:81:
         0e:4f:80:08:b4:15:94:0d:8a:17:87:ed:b5:2b:8d:c2:21:6d:
         68:4b:5c:1c:0e:6e:5a:73:13:fe:2a:0e:29:02:c2:2d:2f:03:
         90:24:81:bf:58:6e:8a:74:25:de:6a:fa:d4:15:a0:ca:d1:0b:
         47:4d:35:84:7a:77:61:aa:a8:8e:34:09:3b:b9:99:45:1c:f5:
         d6:19:52:0e:8e:5d:77:ab:43:92:7d:85:b6:23:09:dd:53:19:
         e7:f1:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:23:21 2026 by rpki-client