Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File:                     PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier:          A6Maw5fxzn0JscRTYebAlKU0XTn2ZB09kYzXwoTnb88=
Subject key identifier:   6D:16:26:17:85:C9:CF:AC:C8:B8:70:DD:86:B4:60:10:EB:EE:0A:80
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer:       /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial:       019FA9AC53CF2C20F35D57A5E51F7B24F225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number:          06CB
Signing time:             Tue 28 Jul 2026 17:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:10 +0000
Files and hashes:         1: BgD0W2qWPU_ROp_yzDCvdmHBRdU.roa (hash: VUaQeIbkBSgy2SlkE4r8gn0Ci5DG7icLZnLjN6oDK4w=)
                          2: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: S4yuxN0xAhqElmOPnTDRN6oTu4ajuH73mQ2bekCfp4s=)
                          3: SlhQxm9LCnkQKKSMmd7kdKzcTz4.roa (hash: wnSrmmgjgNFni6XtfvP0Umwv0uy50/wQqCglKf7Kmd0=)
                          4: sR1RaWXS_5l1a2IX6LHUiU-d2pA.roa (hash: S4pTQrYhG8r3f9SFHV88NAichr1el296Kbb8q2csBdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:53:cf:2c:20:f3:5d:57:a5:e5:1f:7b:24:f2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
        Validity
            Not Before: Jul 28 17:01:10 2026 GMT
            Not After : Jul 29 17:01:10 2026 GMT
        Subject: CN=6d16261785c9cfacc8b870dd86b46010ebee0a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:08:7c:ca:1a:4f:e5:16:4a:17:11:dd:f0:2f:
                    c4:67:3b:d4:e7:41:fc:74:40:de:37:49:6e:1d:09:
                    42:5d:35:31:5f:1e:3a:72:12:ce:1a:00:27:4e:aa:
                    83:5d:7f:3c:91:54:3d:aa:29:37:f6:0a:55:b4:48:
                    64:8d:ff:ff:26:c3:82:a7:85:3e:a3:f7:1d:d4:a0:
                    4f:bf:da:ee:94:e8:29:af:43:26:3a:64:05:7a:00:
                    62:fd:58:98:46:e5:c6:51:e6:ed:89:ae:90:fb:6c:
                    a6:74:59:8c:28:74:67:c9:38:6c:b1:ce:fe:0d:49:
                    eb:42:11:dc:92:8f:36:e6:37:86:6c:2b:68:af:42:
                    45:cb:6f:35:d2:c5:b9:ca:c1:1e:74:60:11:f3:d2:
                    99:97:d0:ec:8f:19:02:2a:10:f5:a8:80:35:41:2b:
                    72:1d:4d:a1:36:19:1a:58:64:10:9a:3b:77:c5:a0:
                    c9:40:a3:1b:b4:05:37:6c:1b:19:23:da:98:2e:c3:
                    01:ba:e2:ba:7e:bd:8c:47:0f:6d:c5:92:1f:62:cd:
                    17:9b:15:e3:96:1e:20:fd:d5:92:bc:29:c7:26:17:
                    9f:1c:82:37:cb:c4:97:84:a7:24:1a:03:cc:4c:ef:
                    9e:9e:50:34:8f:32:93:0e:44:88:f7:c8:23:29:ca:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:16:26:17:85:C9:CF:AC:C8:B8:70:DD:86:B4:60:10:EB:EE:0A:80
            X509v3 Authority Key Identifier:
                keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c3:56:b5:4c:6d:63:f8:8e:1f:27:f0:65:2d:1a:c3:79:b7:
         3b:88:c6:48:e9:13:13:4e:37:09:e7:13:3d:1f:51:ca:72:ba:
         4c:b1:6f:93:2e:88:97:fe:45:4b:2c:63:4d:75:96:c3:dc:23:
         86:cd:36:90:2a:0a:de:e4:2e:e8:ef:d2:55:76:0e:1e:6d:6a:
         43:3c:44:f0:53:80:60:d0:4e:02:1d:6f:3e:5e:3e:0f:84:0b:
         65:b4:7b:cf:ab:69:47:57:34:a1:25:74:2d:a2:da:86:98:87:
         7b:fb:80:05:60:d4:ac:70:d0:61:82:db:bf:ad:d6:6a:64:e8:
         e9:11:0b:2a:f1:a0:7a:2e:b7:be:86:fe:f4:ad:a6:dc:92:12:
         5c:c9:eb:00:51:30:bd:01:18:05:0f:0b:92:8c:65:e4:85:65:
         aa:77:56:fc:b5:62:36:c5:e5:71:4a:08:ab:b9:93:4c:8f:fc:
         24:91:57:e6:0c:9a:55:84:89:a2:d8:ba:e6:d5:8b:ac:06:9e:
         14:76:5d:75:df:c7:d9:69:70:03:c6:ee:c3:0a:15:2d:81:4a:
         b9:78:d2:39:9b:b2:d8:d6:3c:27:48:4a:ba:3e:33:6c:7e:fc:
         52:cc:99:2c:c6:f7:24:12:57:e0:5d:a8:59:30:45:52:33:e4:
         ac:ca:08:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prFPPLCDzXVel5R97JPIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzBjMTRiZjI2ZmFmMDE5OGYxZTdiMjQ3MjljZDcxYjMz
NTE4ZGUwHhcNMjYwNzI4MTcwMTEwWhcNMjYwNzI5MTcwMTEwWjAzMTEwLwYDVQQD
Eyg2ZDE2MjYxNzg1YzljZmFjYzhiODcwZGQ4NmI0NjAxMGViZWUwYTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQh8yhpP5RZKFxHd8C/EZzvU50H8
dEDeN0luHQlCXTUxXx46chLOGgAnTqqDXX88kVQ9qik39gpVtEhkjf//JsOCp4U+
o/cd1KBPv9rulOgpr0MmOmQFegBi/ViYRuXGUebtia6Q+2ymdFmMKHRnyThssc7+
DUnrQhHcko825jeGbCtor0JFy2810sW5ysEedGAR89KZl9DsjxkCKhD1qIA1QSty
HU2hNhkaWGQQmjt3xaDJQKMbtAU3bBsZI9qYLsMBuuK6fr2MRw9txZIfYs0XmxXj
lh4g/dWSvCnHJhefHII3y8SXhKckGgPMTO+enlA0jzKTDkSI98gjKcq0NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0WJheFyc+syLhw3Ya0YBDr7gqAMB8GA1UdIwQY
MBaAFD5wwUvyb68BmPHnskcpzXGzNRjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xZDJkZjktOGY4Mi00NzE2LTg1M2Ut
NTM4NTk0OTBkMjZmLzEvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xZDJkZjktOGY4Mi00NzE2LTg1M2UtNTM4NTk0OTBkMjZm
LzEvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8NWtUxt
Y/iOHyfwZS0aw3m3O4jGSOkTE043CecTPR9RynK6TLFvky6Il/5FSyxjTXWWw9wj
hs02kCoK3uQu6O/SVXYOHm1qQzxE8FOAYNBOAh1vPl4+D4QLZbR7z6tpR1c0oSV0
LaLahpiHe/uABWDUrHDQYYLbv63WamTo6RELKvGgei63vob+9K2m3JISXMnrAFEw
vQEYBQ8Lkoxl5IVlqndW/LViNsXlcUoIq7mTTI/8JJFX5gyaVYSJoti65tWLrAae
FHZddd/H2WlwA8buwwoVLYFKuXjSOZuy2NY8J0hKuj4zbH78UsyZLMb3JBJX4F2o
WTBFUjPkrMoIMw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:12 2026 by rpki-client