Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
File:                     Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json)
Hash identifier:          FxTUBpogrGYQdigu54wPBjiuWBtbsIBMFAXAptw3Xxk=
Subject key identifier:   E8:6E:81:80:12:41:A2:A1:D4:43:A8:20:18:29:9C:F3:67:64:5D:77
Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
Certificate issuer:       /CN=3e782de1b5d5292edd136d5278258c67b05be22a
Certificate serial:       0198745095ABBB3C07C7BCF9FE2DB4430140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
Manifest number:          035B
Signing time:             Mon 04 Aug 2025 09:01:34 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:34 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:34 +0000
Files and hashes:         1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=)
                          2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: 8BArozn3l8i6bUPoqSxfuHUHvh1dgZArJ6bSOsnmdpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:95:ab:bb:3c:07:c7:bc:f9:fe:2d:b4:43:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a
        Validity
            Not Before: Aug  4 09:01:34 2025 GMT
            Not After : Aug  5 09:01:34 2025 GMT
        Subject: CN=e86e81801241a2a1d443a82018299cf367645d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:52:69:45:a3:3f:9f:be:f3:82:bb:1e:d4:
                    2c:28:8e:34:54:0b:d9:d2:4b:0c:e0:6f:e4:5a:58:
                    ce:92:30:18:d5:65:70:a0:0a:38:64:89:b5:a4:77:
                    38:40:48:bf:f4:e6:31:05:83:bf:ad:56:2e:d8:7e:
                    1e:1b:71:b8:9c:6d:92:79:96:9b:37:ba:80:27:fc:
                    13:4d:9e:07:64:e2:f2:4e:a1:c6:44:43:3a:d2:59:
                    a3:77:71:1a:e1:52:ae:37:11:71:80:cf:69:c8:28:
                    fd:9d:15:43:e0:d7:69:0a:7f:95:78:36:69:91:43:
                    61:9e:80:b0:35:e0:d4:a9:62:40:a1:33:89:62:f8:
                    82:f0:4b:d3:6e:fe:9e:cf:55:64:9b:64:da:dd:aa:
                    fa:c9:51:5d:1d:67:45:18:10:a0:f4:96:13:da:8c:
                    8f:52:d7:c8:e3:fe:9e:30:39:7f:a7:13:c2:a4:d2:
                    a4:f3:77:62:da:e6:cf:2d:48:5d:ea:18:ea:0a:4a:
                    98:4d:5a:8d:5e:82:54:53:a1:93:31:63:9b:f9:1b:
                    16:94:84:ab:23:fe:bb:82:f1:b9:33:d3:77:d9:2d:
                    f5:14:dc:71:54:28:30:bd:dc:97:7d:70:bb:f6:85:
                    43:a2:3d:58:fd:4c:83:82:3b:fb:8d:6f:7c:e9:72:
                    c4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6E:81:80:12:41:A2:A1:D4:43:A8:20:18:29:9C:F3:67:64:5D:77
            X509v3 Authority Key Identifier:
                keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:c8:9f:13:93:66:67:e9:ed:ad:53:ba:91:d3:61:dc:d2:
         54:f9:42:23:6c:72:23:fe:95:5a:e6:2c:fb:23:83:13:fb:5e:
         5d:0d:09:d9:54:20:75:7b:19:62:ad:2a:56:19:18:72:71:4f:
         6f:27:79:e9:3e:5e:23:24:30:64:e1:bb:5d:3d:00:ff:92:7d:
         78:15:bc:37:3d:ec:56:82:d5:e7:6c:eb:88:c2:e5:a2:68:c2:
         89:47:c1:33:bb:a4:46:f9:26:2b:cc:8b:55:18:d7:57:64:af:
         43:ef:43:ab:c5:27:54:74:32:0e:33:de:7d:99:a6:38:40:58:
         3b:6e:c7:c7:65:68:4d:2c:f6:d0:1a:32:26:bc:13:4a:4a:22:
         08:97:aa:f7:66:f4:86:ed:d2:97:ef:66:55:0b:de:2b:64:6b:
         24:5b:a6:5c:a3:24:ab:3a:15:5f:3d:6a:3f:56:61:99:37:96:
         24:63:94:e9:dc:f2:99:c5:91:c6:c5:91:07:ae:b8:ca:00:7e:
         99:49:86:08:ad:d4:24:23:1f:2e:93:9c:cf:6f:e1:88:33:f6:
         46:79:f2:0b:99:99:ae:8c:a3:67:47:23:24:26:a0:d0:08:95:
         dd:c7:7d:df:1b:b0:dc:8c:fa:b0:1d:4b:59:3b:cd:87:8d:ed:
         cc:c9:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:43 2025 by rpki-client