Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File:                     _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier:          IsIehwe/7xduNwFFNpgIXC24KLkJdrqMRtJMWfOMUBE=
Subject key identifier:   D4:F0:32:52:91:FF:D2:20:09:FF:CE:7F:53:89:21:F5:1F:CB:28:EF
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer:       /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial:       019873E25DE188151EFA328FEB4B45657E2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 07:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:11 +0000
Files and hashes:         1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=)
                          2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: 9TEKWbRavFwrV5A4AQ3jq2FhSNv40z32V5b51sMbVwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:5d:e1:88:15:1e:fa:32:8f:eb:4b:45:65:7e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
        Validity
            Not Before: Aug  4 07:01:11 2025 GMT
            Not After : Aug  5 07:01:11 2025 GMT
        Subject: CN=d4f0325291ffd22009ffce7f538921f51fcb28ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:5d:40:12:3f:b1:56:42:da:05:2f:57:cf:
                    f6:c2:b9:65:ad:c0:38:19:11:5e:3f:7b:de:00:ae:
                    0c:31:b8:20:bc:90:89:82:58:e4:59:ca:c8:37:73:
                    92:0f:2e:0a:9d:9f:b4:8c:a2:0b:09:77:ae:8f:9a:
                    70:3a:be:b8:3c:34:c6:ba:0d:7a:5d:ae:ec:87:3d:
                    83:5a:07:95:da:b5:55:ec:27:dc:f5:41:e0:d2:33:
                    cb:ba:b8:ba:3d:de:6a:69:7c:86:57:83:c1:03:e1:
                    18:ba:11:e3:ca:a5:61:57:8e:ff:8e:c1:ad:75:47:
                    a1:62:18:45:51:6f:57:31:d3:49:3d:8e:2f:2d:d6:
                    82:76:5f:4d:14:c3:6e:2a:97:24:c1:13:12:6b:94:
                    b6:27:6b:24:78:82:08:57:e7:bc:c4:98:ac:ed:31:
                    e9:be:18:8d:dc:72:cd:f9:00:55:2f:8c:cb:e7:70:
                    62:d7:16:7c:c4:6a:3e:08:db:ef:f3:77:7b:9b:64:
                    74:ce:f6:68:6f:52:48:18:04:43:3d:a7:30:4a:92:
                    c2:96:86:ae:26:b4:e0:17:a5:5b:43:ee:fb:f4:bc:
                    e3:2d:37:77:6c:69:54:ab:04:56:49:92:2e:a1:1d:
                    7a:01:86:7f:80:44:30:61:c0:60:d5:f9:e3:ca:40:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F0:32:52:91:FF:D2:20:09:FF:CE:7F:53:89:21:F5:1F:CB:28:EF
            X509v3 Authority Key Identifier:
                keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:18:1e:c7:db:67:11:e1:6f:61:95:b8:63:b0:78:1a:a5:3e:
         31:9b:72:f4:d8:00:ce:e3:55:ac:9f:3e:10:9f:0a:be:be:a4:
         0c:07:25:d8:63:2c:e6:66:f9:25:fd:09:32:11:f3:ce:6e:a4:
         16:e5:50:03:ad:c5:29:9f:c6:a4:5d:8c:84:c7:07:42:05:3f:
         e1:84:7f:52:77:1e:46:0f:58:7f:66:6b:de:d7:9f:5b:d8:ce:
         ca:ee:30:22:e5:47:2c:5f:e6:72:0d:76:bc:6a:4b:60:ba:30:
         66:d1:3c:4a:cf:cd:2c:1f:54:f2:c8:6d:20:26:81:54:ff:1d:
         40:cd:af:b5:f3:3f:99:d5:ad:51:e0:c8:66:fa:7a:71:43:5b:
         34:50:17:d3:ae:84:99:05:38:68:4f:1a:e0:ee:b2:b2:ca:ed:
         f1:87:5d:87:2e:71:ca:f5:8b:62:95:ca:8a:76:f4:47:1a:07:
         30:72:a7:fc:a1:f1:ea:5e:6a:15:d7:39:d6:15:d7:9e:3c:44:
         8f:f1:c6:43:2a:d0:e2:32:6b:f7:02:72:bb:df:63:aa:f5:22:
         46:bb:66:23:cb:9d:80:67:f1:ff:33:e6:6b:1f:e7:98:aa:e7:
         8d:a4:8d:50:d5:02:0d:ba:fc:42:cb:31:0c:b6:a2:40:7b:fb:
         9c:bb:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:23 2025 by rpki-client