Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
File:                     PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft (raw, json)
Hash identifier:          rezEzDJxdu9DWGFC0uBvYr3ZOa6ZReV8wOoRP9yyaLM=
Subject key identifier:   E3:EB:8B:A1:E5:EC:4C:C1:40:E9:6B:FC:3D:84:2B:FA:FA:C6:18:98
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Certificate issuer:       /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial:       019A522CD257B65148764C27A033CC9D955B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
Manifest number:          11E2
Signing time:             Wed 05 Nov 2025 04:01:00 +0000
Manifest this update:     Wed 05 Nov 2025 04:01:00 +0000
Manifest next update:     Thu 06 Nov 2025 04:01:00 +0000
Files and hashes:         1: PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl (hash: uux6ofr/lpFx/znDbkyUIh0vXgJbEtXpRRZFcmXq4hE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:d2:57:b6:51:48:76:4c:27:a0:33:cc:9d:95:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
        Validity
            Not Before: Nov  5 04:01:00 2025 GMT
            Not After : Nov  6 04:01:00 2025 GMT
        Subject: CN=e3eb8ba1e5ec4cc140e96bfc3d842bfafac61898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e4:18:4b:70:3c:08:1a:d1:0d:7d:21:93:48:
                    d2:a1:31:86:57:cb:38:01:5a:b2:fa:55:95:61:39:
                    43:f6:a4:8f:28:6c:f6:15:0c:ed:09:74:05:a3:a7:
                    48:89:2a:40:15:aa:b9:c7:c2:2c:b2:0b:8f:37:44:
                    df:84:23:00:9c:c2:35:93:5b:11:2e:95:1d:95:f7:
                    0c:1e:b9:7f:be:be:d3:fd:ba:83:b2:08:e1:3c:33:
                    b6:f2:e9:1c:8b:f2:eb:b3:5a:5d:da:ab:95:71:98:
                    a6:80:ce:9d:2c:94:71:86:ae:97:56:3f:96:7e:67:
                    09:70:63:70:d0:24:21:45:21:35:7b:f0:9b:9a:8e:
                    dd:26:b8:8a:da:75:a2:6e:b6:b6:86:4e:c7:7a:69:
                    fe:8e:5c:72:e3:9d:8d:b9:0a:c6:b3:45:29:a5:8b:
                    2b:25:51:9e:70:6d:d2:0e:6b:f4:a3:8e:e2:66:e8:
                    d7:6a:9d:5e:2d:66:b8:c8:10:30:03:2e:58:97:70:
                    79:0b:3b:ca:83:63:4a:72:4a:05:e6:38:1a:c2:8c:
                    c4:1a:a3:66:cc:d1:a1:8c:fe:9c:15:58:94:95:95:
                    fd:9d:16:8e:a3:69:1c:50:49:5c:51:b5:59:67:c3:
                    b2:e0:22:20:68:32:7b:11:b4:6b:fb:86:2a:1c:dd:
                    2e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EB:8B:A1:E5:EC:4C:C1:40:E9:6B:FC:3D:84:2B:FA:FA:C6:18:98
            X509v3 Authority Key Identifier:
                keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:24:11:42:3c:e1:77:b9:71:81:db:79:6b:5d:e9:a0:5a:b3:
         c3:50:c0:13:c1:2d:1a:59:31:3c:01:21:f6:48:d7:d1:e2:33:
         66:a8:a4:6a:b9:53:24:6b:7b:50:ca:b1:7b:cf:57:d7:60:1c:
         b0:39:0a:a1:67:69:81:94:4e:2a:cb:a3:f8:0e:06:76:b2:df:
         e4:c6:dd:a4:48:65:91:10:fd:69:a2:84:49:80:5b:83:16:a5:
         11:74:e5:16:6b:61:a9:f6:c5:22:92:b9:5b:0b:dd:b5:f3:29:
         c9:36:71:44:f7:25:08:a1:dc:ba:10:c4:1f:1b:80:73:93:7a:
         35:e8:2d:43:08:21:5d:35:43:d6:52:d6:55:b6:6d:28:df:cc:
         a9:52:65:73:6e:5d:60:17:cc:0d:dc:0a:8b:65:b9:65:5d:22:
         55:30:41:f4:75:08:da:99:92:2f:cf:d6:23:5e:0b:b3:53:46:
         72:fe:af:a0:22:33:50:52:49:37:0f:cc:e1:d0:62:4a:dc:6e:
         4b:ce:20:24:8c:14:33:7b:94:81:b7:2b:28:ca:cb:26:0e:a3:
         f9:d3:2e:28:2c:64:56:bd:47:e0:99:28:58:67:ab:f0:8f:45:
         d7:05:f7:4b:bf:7c:13:ba:10:08:11:f3:3c:77:6b:9f:a1:c1:
         7c:cd:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:28 2025 by rpki-client