Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File:                     PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier:          B469r+1jPDbTmEhNh6trzPiWnvajfYRFu4yPv4gTKvM=
Subject key identifier:   DA:1A:FA:47:35:4E:C2:DF:B4:87:A6:3A:B8:F4:2B:82:01:04:B3:B7
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer:       /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial:       01987AF692C741F372A1357167B84E9B9BB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 16:00:36 +0000
Manifest this update:     Tue 05 Aug 2025 16:00:36 +0000
Manifest next update:     Wed 06 Aug 2025 16:00:36 +0000
Files and hashes:         1: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: Yq2dTQRN0Agmivd8/5abtfbLXNSWvmZBTJ60fOyOLEI=)
                          2: pXJDsaj0ZUCw_GiSDcUZAr3Eqys.roa (hash: jxE0YH1Sz5qp4TF2g6NLi4CtXpHMgBECSGalZs0qi4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f6:92:c7:41:f3:72:a1:35:71:67:b8:4e:9b:9b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
        Validity
            Not Before: Aug  5 16:00:36 2025 GMT
            Not After : Aug  6 16:00:36 2025 GMT
        Subject: CN=da1afa47354ec2dfb487a63ab8f42b820104b3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:0a:6d:4c:60:d5:e5:7c:73:ff:89:c6:5a:
                    78:a3:2a:ae:0f:5a:d1:7f:d2:04:f1:30:a8:af:e0:
                    06:2b:b3:5d:36:8d:4c:fd:c2:80:f7:3a:c6:db:52:
                    87:48:73:e5:a5:bf:33:91:eb:a5:1c:3f:60:fa:90:
                    62:c3:fb:21:37:57:ca:a1:23:16:d1:07:9f:00:8f:
                    ec:ca:9e:fa:be:01:4f:70:52:df:df:64:e8:c9:66:
                    68:84:e6:14:f2:38:31:38:1b:44:64:51:dc:47:71:
                    5b:30:86:32:71:dd:34:1f:ce:4d:4f:e0:04:ec:e0:
                    83:9a:90:b9:a2:ab:fc:1f:9f:ea:f7:af:5b:d0:96:
                    f2:1f:88:f2:38:8f:fd:3a:5f:95:58:06:b9:3f:2e:
                    3a:6e:69:8f:37:27:0a:00:ab:42:17:e2:c7:0a:ee:
                    74:dc:15:26:aa:71:71:32:1f:84:ed:d1:dc:e4:5a:
                    b6:24:1b:ad:51:d7:55:84:17:dd:97:82:e6:0c:e4:
                    b9:ab:16:78:fa:ab:00:d0:92:e5:78:fd:2b:8a:93:
                    5a:d2:6f:9b:45:11:6e:51:66:42:f6:36:97:31:40:
                    67:d3:5d:25:1a:b9:03:84:3f:4c:fe:2a:58:f6:43:
                    95:51:fd:be:7e:ab:c9:9a:56:f8:0d:c4:a8:da:80:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1A:FA:47:35:4E:C2:DF:B4:87:A6:3A:B8:F4:2B:82:01:04:B3:B7
            X509v3 Authority Key Identifier:
                keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:93:3c:cf:92:15:cc:cb:76:9a:69:a8:47:59:07:1d:28:e3:
         44:54:c2:08:80:93:f7:a5:54:f0:89:fa:d1:ee:b4:72:d9:f4:
         41:3a:a1:ef:22:90:5c:b3:00:7c:66:22:ed:02:ef:a9:09:29:
         70:c0:ae:53:c8:4e:4f:dc:0c:47:16:a1:9b:2d:3c:c2:19:11:
         8b:1f:15:e4:8c:0d:c4:0a:4f:4e:f1:75:79:32:c5:54:a7:8d:
         e9:bd:84:35:07:c9:5a:a1:a4:b7:25:10:16:66:11:ec:c9:db:
         a9:8e:29:c7:76:f4:c3:c3:e3:10:00:9d:e0:56:c1:dd:ed:e8:
         86:63:e1:cf:a1:5f:12:f7:d6:f1:45:3e:c8:5d:d7:a9:b0:37:
         70:8a:42:17:14:bc:4a:2f:c3:fa:ef:44:23:a2:01:16:4e:fa:
         f8:5f:01:0c:19:e5:a5:f6:d7:0a:47:3a:21:1c:70:c6:4b:ef:
         c5:6e:29:1b:5c:fa:7c:97:d5:63:83:36:f0:39:79:85:aa:32:
         2f:b3:47:90:d2:ce:56:e8:3f:9c:3a:1d:f2:28:93:f4:8c:ba:
         6b:aa:7e:ab:ac:fc:0a:11:a9:27:03:83:ed:36:8f:e5:2a:33:
         5c:db:cd:53:17:ab:49:93:e8:e4:ec:ab:26:b8:f4:ba:8d:10:
         b8:0f:a1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:02:46 2025 by rpki-client