Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File:                     PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier:          7qTB8HaS5Yn1Zqs2TNlLYep0E/4fb4ZkZoyAp8IHOcY=
Subject key identifier:   14:52:7A:7B:7A:50:2C:CA:1F:96:2D:FA:45:01:4A:82:DC:29:F2:27
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer:       /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial:       019CAC7E12EF224A0FED550F9C1395AE8E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number:          053E
Signing time:             Mon 02 Mar 2026 03:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:09 +0000
Files and hashes:         1: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: Hb9zWflt/bpputNUBOk9XreTEjHmPqVoGPyknjeN5ys=)
                          2: SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa (hash: wnSrmmgjgNFni6XtfvP0Umwv0uy50/wQqCglKf7Kmd0=)
                          3: ao20WTlIdybEK7OORASxFGQHj5g.roa (hash: Bp9zWQUGEQfw9+EW5ojP9Kn3oyy71raM8WkHF/muXnE=)
                          4: xPUKnE5air9RWIE875_uAzahZ3k.roa (hash: WlB4PuFKngSEx9SC4lG9bAjuKu7PHJdrrtLtNhRjc6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:12:ef:22:4a:0f:ed:55:0f:9c:13:95:ae:8e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
        Validity
            Not Before: Mar  2 03:01:09 2026 GMT
            Not After : Mar  3 03:01:09 2026 GMT
        Subject: CN=14527a7b7a502cca1f962dfa45014a82dc29f227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e5:25:c8:0a:0a:d5:72:92:1f:98:07:24:27:
                    81:7c:b8:6b:1c:62:0f:2f:b4:5a:3e:49:f5:82:6e:
                    c2:91:9d:3b:51:73:3d:3f:6c:a2:55:5f:54:4c:ea:
                    e8:9f:7b:ab:45:c5:15:de:35:46:01:7a:21:d7:a2:
                    90:b6:5e:db:7b:54:61:f3:7c:31:2f:d6:f5:5b:32:
                    a3:4f:6f:e8:30:e9:9f:63:41:c1:6f:5c:74:48:1d:
                    2c:b9:36:17:01:00:51:8f:f6:fe:9c:94:11:6d:20:
                    98:9e:ae:f4:f8:9a:77:35:e1:51:56:5a:17:4e:51:
                    fb:eb:88:5e:46:13:55:c1:83:58:12:9b:e4:51:47:
                    1a:9c:71:04:91:ea:88:4d:4a:19:ae:04:c7:e5:8d:
                    cc:6f:92:39:c8:f0:09:39:4d:40:a3:a3:f6:d6:73:
                    33:5a:99:e0:c8:5d:e0:3d:f6:4b:20:cc:b3:c2:98:
                    07:be:89:43:37:88:46:59:56:70:1a:17:57:6b:c7:
                    0b:ad:fe:06:ce:81:4a:52:a0:58:33:fa:9b:6d:e3:
                    4f:34:fa:69:ae:20:b8:e2:9b:4e:62:2f:d6:08:0c:
                    b5:46:10:8b:34:04:2c:c0:87:fb:45:4e:8f:24:08:
                    c7:32:37:ba:83:8a:1b:fe:40:2d:87:a8:b2:c7:bb:
                    12:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:52:7A:7B:7A:50:2C:CA:1F:96:2D:FA:45:01:4A:82:DC:29:F2:27
            X509v3 Authority Key Identifier:
                keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:13:54:e1:d6:8c:76:df:bc:e5:94:16:a5:2d:19:0e:87:ae:
         5a:3b:92:37:15:ac:f2:64:c8:8d:f7:5f:e9:ff:54:49:1d:b4:
         0c:26:71:05:d8:8c:62:75:f2:83:1a:60:67:8f:c0:9b:a2:15:
         b9:97:ea:74:79:95:1a:3d:ab:e6:57:44:88:eb:f4:af:20:76:
         5c:e2:50:db:eb:75:ef:50:b0:4e:c4:d7:2a:0b:11:b2:43:97:
         57:0f:71:0e:df:c9:f0:a9:19:d5:58:bb:a1:c8:4f:6f:34:f8:
         64:c3:66:ef:90:27:94:ec:c5:db:46:5b:1b:f3:99:12:74:08:
         ca:4e:d5:2f:78:ff:7a:1c:e4:82:4c:e9:1e:4c:63:a8:5f:19:
         ce:5f:c7:04:3e:b3:24:30:a1:12:d3:ea:0e:6b:7e:2f:39:38:
         a6:bb:33:b5:13:a3:f3:af:05:7a:70:3f:89:00:0e:2f:a4:a7:
         01:83:0a:27:d8:cf:be:8e:f0:f1:26:8b:e9:f2:d5:b6:66:1e:
         89:bf:1d:20:8b:e0:72:61:0c:9a:a9:3d:17:9b:c5:a4:b1:89:
         85:96:77:13:ac:9f:01:08:97:83:63:04:53:7b:db:64:9f:7e:
         41:05:18:7e:90:4f:7e:0a:ac:e5:a1:88:4b:87:91:ef:8d:49:
         8c:7f:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:56 2026 by rpki-client