Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File:                     PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier:          KB6dtGI0CSyQ4udPUJ7Vja46VOZzMk6TwbiUAgErqXA=
Subject key identifier:   1D:DA:B8:2E:F7:C2:A2:7F:F5:46:D1:65:99:76:79:94:93:DC:C4:90
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer:       /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial:       019D999993247688FBE2CF1776904C5F96C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number:          05B9
Signing time:             Fri 17 Apr 2026 04:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:11 +0000
Files and hashes:         1: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: ccI+r8BdizsEVteKTxTmht/RMM0nS6fhUL2cp1ULxfI=)
                          2: SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa (hash: wnSrmmgjgNFni6XtfvP0Umwv0uy50/wQqCglKf7Kmd0=)
                          3: ao20WTlIdybEK7OORASxFGQHj5g.roa (hash: Bp9zWQUGEQfw9+EW5ojP9Kn3oyy71raM8WkHF/muXnE=)
                          4: sR1RaWXS_5l1a2IX6LHUiU-d2pA.roa (hash: S4pTQrYhG8r3f9SFHV88NAichr1el296Kbb8q2csBdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:93:24:76:88:fb:e2:cf:17:76:90:4c:5f:96:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
        Validity
            Not Before: Apr 17 04:01:11 2026 GMT
            Not After : Apr 18 04:01:11 2026 GMT
        Subject: CN=1ddab82ef7c2a27ff546d1659976799493dcc490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:22:06:88:72:81:c0:1e:c3:ab:95:cd:74:
                    bd:84:16:92:ce:63:f7:57:a9:e1:6b:1c:89:d7:14:
                    56:e7:8d:e8:f2:82:b0:c6:22:da:5b:82:b0:11:11:
                    c1:71:76:0d:3d:e5:77:a8:c4:4a:3a:d5:6c:43:4b:
                    67:e9:60:4b:df:99:92:ea:99:0d:cf:9b:00:de:80:
                    a5:07:be:e3:d8:88:0b:6a:d7:9e:a9:68:be:48:85:
                    06:47:18:47:6f:12:8e:7b:b7:76:47:dc:f6:dc:5e:
                    c3:42:d4:a4:39:3a:5d:b9:75:18:89:13:a9:ac:27:
                    b8:34:2b:55:f3:60:fc:e6:d2:1c:61:a3:a7:1a:f9:
                    ca:13:f2:a9:42:b7:77:19:32:84:18:cf:28:98:cb:
                    dd:69:ef:b9:dc:f6:72:54:7e:63:d0:d9:6e:5a:4e:
                    82:e8:18:58:14:93:b5:ca:e7:5f:01:e0:67:12:e5:
                    00:d5:d8:96:51:72:d6:ff:d1:67:c1:16:dc:2a:03:
                    12:00:62:94:34:e1:30:2b:b6:f5:bc:bb:5d:3e:12:
                    8c:90:ad:4a:8b:81:d9:05:26:f6:82:f3:b1:b3:e8:
                    34:32:47:4e:b6:95:76:41:18:1a:2b:a0:bc:36:66:
                    30:cf:41:ed:d0:b5:4e:5e:f8:54:a0:16:eb:1e:b4:
                    97:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DA:B8:2E:F7:C2:A2:7F:F5:46:D1:65:99:76:79:94:93:DC:C4:90
            X509v3 Authority Key Identifier:
                keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ef:b1:46:2e:96:c6:3d:1a:d6:b4:8f:5e:21:7a:99:da:80:
         d1:c7:cc:23:61:12:32:e3:e8:f5:64:b7:13:9f:85:6e:b4:df:
         6c:87:3c:c6:a5:2c:a1:d6:78:62:27:6a:5e:40:77:37:84:2b:
         ae:40:51:d1:9e:26:ea:8a:df:81:f0:4f:e2:72:22:52:29:5c:
         a3:48:4d:2c:d2:55:d0:fe:9c:cf:76:e3:ad:9f:e8:0f:4d:c6:
         07:df:b2:0c:f9:77:cf:b1:2c:26:55:04:79:10:54:96:90:5c:
         d3:52:62:11:d1:f8:2c:72:da:76:a7:51:a1:17:ed:58:ac:cf:
         53:be:13:2a:d4:29:6f:db:36:d9:07:03:ff:73:01:05:e1:39:
         4e:03:47:55:1d:7e:4e:79:c8:de:cb:b1:8b:ca:5c:f3:88:02:
         22:65:b2:94:08:4d:04:ed:1e:55:fc:38:87:3e:46:50:43:e4:
         ec:cc:c4:54:6d:40:b5:f4:35:b7:13:83:d3:23:43:61:83:8c:
         0d:7d:4d:1b:5c:05:18:02:78:3c:df:bc:1b:28:a8:a4:cc:9b:
         3a:1c:eb:00:7c:68:fd:89:06:18:89:fb:82:03:1e:0b:6d:7b:
         05:76:02:e4:9d:f8:bb:72:a8:f0:1e:c3:24:f3:e7:6d:2b:21:
         ca:5b:c3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:04 2026 by rpki-client