Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
File:                     Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft (raw, json)
Hash identifier:          c5u4KG5X9FUZIykwDCrv+fwnyepws+0Mdo7zrBtDsIQ=
Subject key identifier:   C3:A1:B1:06:6D:AE:7B:30:3D:64:5A:50:D3:14:F8:B4:C3:05:60:0B
Authority key identifier: 3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
Certificate issuer:       /CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Certificate serial:       019A4EF49117ADB2BE330E54514388FA8023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
Manifest number:          11B0
Signing time:             Tue 04 Nov 2025 13:00:41 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:41 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:41 +0000
Files and hashes:         1: Mkotcv7SVmhVByeOdk7RYd0Gupw.roa (hash: kugv35F9Yygi1KlvVSFAeTblpUz5gnszp5yric0gM3k=)
                          2: Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl (hash: tzxJKS4jhspGlrRWxjVu2gDLN7d9SA7rS/h+EZNGF/o=)
                          3: cwlcUqjMTfEdbvTuuvejw-lUBd4.roa (hash: ZDYHX14do9hr1lUFKNqTx5RIBWwnueYI0rEZQZpyW1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:91:17:ad:b2:be:33:0e:54:51:43:88:fa:80:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
        Validity
            Not Before: Nov  4 13:00:41 2025 GMT
            Not After : Nov  5 13:00:41 2025 GMT
        Subject: CN=c3a1b1066dae7b303d645a50d314f8b4c305600b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:07:49:e2:b8:52:b0:12:6c:bb:72:e9:46:
                    d9:61:f0:89:46:78:d8:ea:01:9b:2a:21:df:e4:d5:
                    1e:1a:38:32:94:ec:78:5a:86:bc:e4:2a:67:66:05:
                    74:9d:81:63:65:72:51:f7:a6:65:e9:91:08:43:f3:
                    4f:98:04:38:f9:45:1b:2e:82:a5:b4:46:07:d4:20:
                    24:fc:98:4c:d7:47:c9:3d:a0:bc:2a:e5:17:f3:31:
                    6f:99:0c:35:db:63:6b:86:31:ae:44:eb:dd:e8:53:
                    09:76:5b:78:f1:e8:47:af:f3:84:3c:e7:13:9e:4a:
                    f3:d7:39:91:39:22:00:4b:0f:b5:74:8b:8b:c7:92:
                    85:fe:ac:a8:c4:83:68:ea:a9:e0:63:ee:ee:bb:e2:
                    ed:fd:0f:1f:72:e5:5b:a9:6e:56:83:99:3e:c0:63:
                    22:37:e4:33:44:21:ae:2a:58:44:53:b2:91:4c:a2:
                    e6:2e:b2:2c:0a:04:a3:80:92:86:bf:05:88:a8:fd:
                    8b:cd:3a:5f:94:35:78:72:75:ce:05:c4:81:ca:4e:
                    fa:3f:c0:29:ec:75:ed:2c:f2:e3:d1:d7:56:5c:d7:
                    71:90:72:06:c9:8c:79:eb:18:10:0c:cc:48:d1:24:
                    16:5f:09:c0:81:7c:59:ae:7f:bd:cf:d8:d7:e5:5b:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A1:B1:06:6D:AE:7B:30:3D:64:5A:50:D3:14:F8:B4:C3:05:60:0B
            X509v3 Authority Key Identifier:
                keyid:3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:60:f9:28:0f:9e:a9:42:eb:7f:16:3c:e7:bb:0c:f3:62:aa:
         d5:51:45:74:6c:66:4b:74:26:0f:91:6d:3e:38:cf:f4:1c:ad:
         a0:8c:12:b4:ba:cc:c0:e7:83:98:5f:e6:d9:1c:a3:b3:8a:0b:
         0a:bd:e8:ea:3d:80:93:ad:90:c7:a1:b8:83:a8:04:e3:97:e9:
         43:12:08:4e:20:44:22:a3:b9:cb:96:82:9b:a8:54:95:92:b6:
         cb:1c:b6:6f:78:49:89:d7:0f:4e:0a:f6:e8:63:0b:88:eb:d4:
         ac:a9:9b:75:40:15:8f:5e:84:e8:9d:1d:ed:75:1e:92:8f:bc:
         64:90:98:b4:f0:46:fa:e1:04:c7:25:2d:aa:72:e7:3e:2c:26:
         5e:5a:95:8e:8a:97:1c:ec:71:b8:53:95:b0:ed:3b:fc:89:aa:
         07:40:22:3e:e2:9b:a8:82:94:81:bc:06:cb:b4:4b:38:71:c9:
         0f:72:fe:89:df:15:00:57:0f:76:15:7a:ed:91:23:62:de:b5:
         da:ce:c8:72:e9:50:19:a0:4c:29:56:05:20:f5:d2:22:87:5c:
         62:a0:5c:1f:4e:81:c8:f0:eb:d1:b0:fe:b7:67:c2:3b:c7:ae:
         07:9c:2c:c9:fd:a5:b4:61:76:36:f8:d9:59:23:bf:ec:fa:11:
         6b:8f:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:31 2025 by rpki-client