Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
File:                     PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json)
Hash identifier:          vcIU6LPXLUPnvniCvI7RYMbN3KM6RMTE9VJmfeMqvgk=
Subject key identifier:   53:96:5B:65:8B:02:92:77:BC:DE:06:5A:FA:1B:7A:87:DC:55:2B:2D
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Certificate issuer:       /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial:       019A5074DBB7B8D25CBACF33EC3472DB16B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
Manifest number:          0BC5
Signing time:             Tue 04 Nov 2025 20:00:26 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:26 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:26 +0000
Files and hashes:         1: 3bt8Km81z8fgEHaLeSOeYgfebxU.roa (hash: pKoz7jrxy/U6s9br1hGRmLBPhCh8rgMf271vqsN5GJk=)
                          2: 4Mdmn6MaRoFLUycUXlZaFSGboEs.roa (hash: C9ut+tYKUryPFgIx2+ThOOLJz+YjKuj147RuRXfxtis=)
                          3: H7RDadMRjVcvma8PhFugcKUdoT0.roa (hash: 6sD2c8/NrghCekThtfpslB8AAW0einNgCY8Rjyouu9I=)
                          4: Oioxvop9FV5K4rtOSvh02jeAj-g.roa (hash: 1Oax9rdfDuKch357rIzJmOSBUOYvQbkuoDRF8in9c8A=)
                          5: P0-q-BdDXYrwKYDCUC5gegtCTZE.roa (hash: oO/hx6p/KCHt0e0eW15T8NOjsXnklfDaMDxz69ADiuE=)
                          6: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: sfTTvgRICGIeurm/Ecd1cNLiqj+p8IavcElCJD8uRNM=)
                          7: ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa (hash: 01KlZ4a2kJZ4Ly4Y7K5EQ5UlAiINB2ZUF09ye0hG3lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:74:db:b7:b8:d2:5c:ba:cf:33:ec:34:72:db:16:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
        Validity
            Not Before: Nov  4 20:00:26 2025 GMT
            Not After : Nov  5 20:00:26 2025 GMT
        Subject: CN=53965b658b029277bcde065afa1b7a87dc552b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:aa:2e:88:c8:9c:3a:33:65:41:27:5f:1b:
                    73:3c:a2:66:e5:d8:aa:97:2a:07:2b:d7:4b:a2:c5:
                    82:e7:dc:d5:de:3d:a5:af:7d:ad:9d:ab:38:c1:7e:
                    a4:04:39:5f:3f:0a:b0:01:95:4f:a1:a2:be:df:73:
                    9f:67:8d:00:f1:c1:d7:ff:9e:5d:2d:f2:d6:d8:7c:
                    a5:fe:70:71:9f:da:23:db:79:ec:ef:3b:6d:01:47:
                    d0:0b:2f:21:f7:56:f8:29:f5:f8:f2:c9:96:fe:f2:
                    53:44:30:28:8e:ec:cf:a3:aa:c0:24:20:99:66:6a:
                    89:08:bd:48:2e:f9:67:a1:25:b0:67:40:de:18:2a:
                    60:c5:9a:78:bd:7b:c5:fc:72:f0:2a:97:c9:f1:5e:
                    bb:33:66:2a:66:1c:5d:06:df:2f:2b:f3:f2:6f:e8:
                    6e:bd:f6:6f:fe:11:3a:bc:de:eb:f3:56:46:0c:ed:
                    1f:c4:98:ad:9f:d0:44:e2:02:bc:55:ee:cd:45:54:
                    2e:de:7d:37:fd:bd:30:7a:27:3a:5f:9f:19:23:1d:
                    f1:e7:6a:05:da:28:37:75:67:93:18:b8:4f:8c:0e:
                    cd:ed:b5:5c:f6:27:aa:bf:1c:0e:3f:c6:30:da:40:
                    77:6d:00:bb:08:80:f7:8b:63:c6:f4:87:40:a5:c9:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:96:5B:65:8B:02:92:77:BC:DE:06:5A:FA:1B:7A:87:DC:55:2B:2D
            X509v3 Authority Key Identifier:
                keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:50:34:65:e3:a4:a5:93:a7:fe:6a:d1:ee:d2:84:8e:2a:
         65:8b:e5:32:83:b7:7e:e1:3b:47:84:85:28:57:de:f3:e4:0b:
         c3:29:44:ac:3d:ec:ea:2a:18:ee:12:01:f9:65:b5:97:1a:4e:
         c2:21:fe:38:c5:65:ca:4b:91:f3:9a:5a:4f:98:34:bc:6c:50:
         45:7a:ad:f9:5a:aa:84:d6:b3:26:96:a7:eb:ca:08:aa:14:16:
         4e:c5:b1:e7:44:5d:91:32:62:8a:20:18:23:75:40:83:70:94:
         e2:fc:70:19:2d:d2:0c:e8:13:ed:1f:00:ef:2c:0b:f0:fd:0a:
         26:65:89:2c:48:25:83:7e:29:36:8d:f8:85:9d:63:ed:9b:d2:
         69:2e:12:9b:be:69:71:4a:8f:82:e6:dd:63:ad:b3:6f:58:f2:
         ed:eb:e3:0b:98:79:8f:40:6b:42:b3:99:b7:c4:b8:8e:c6:48:
         34:34:31:30:9f:b7:e4:3c:f3:04:9d:34:61:f5:01:02:81:2e:
         79:aa:e1:46:bc:44:43:3d:e6:21:9f:75:27:19:de:33:4b:43:
         b4:4a:b3:7c:8c:e3:ec:1f:32:d7:58:7a:ec:0b:0a:63:56:5b:
         25:6c:87:24:e2:75:1d:11:01:59:af:a2:d8:a4:f8:8e:0b:1f:
         f3:03:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:58 2025 by rpki-client