Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File:                     PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier:          NNOFXf0GtUGSgB7goLyaJAjmfJNPG90Jgv04igE0PWc=
Subject key identifier:   C7:A6:4D:C2:B4:DB:07:4A:05:E8:BC:D9:1C:DE:30:67:63:B3:37:EB
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer:       /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial:       01988FFDF8250F32774F38E165CC9FFBF8D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number:          1626
Signing time:             Sat 09 Aug 2025 18:00:42 +0000
Manifest this update:     Sat 09 Aug 2025 18:00:42 +0000
Manifest next update:     Sun 10 Aug 2025 18:00:42 +0000
Files and hashes:         1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=)
                          2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: 5JsyMKcR8tHHrl/PzUbAEKWdag9w2VBmAM8T6174whk=)
                          3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=)
                          4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fd:f8:25:0f:32:77:4f:38:e1:65:cc:9f:fb:f8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
        Validity
            Not Before: Aug  9 18:00:42 2025 GMT
            Not After : Aug 10 18:00:42 2025 GMT
        Subject: CN=c7a64dc2b4db074a05e8bcd91cde306763b337eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b0:5d:08:27:32:6c:b4:c7:36:ae:fc:0a:e4:
                    0d:0b:0c:ff:8c:9a:75:c2:28:ce:f6:76:31:c2:2c:
                    5a:17:7f:a9:8a:48:04:08:f1:a1:0c:a3:70:72:d6:
                    db:4a:ba:6c:ba:01:c8:3b:a6:21:14:fa:92:ce:80:
                    40:32:80:56:da:9d:e2:f6:2a:7f:f8:15:36:69:00:
                    b4:45:64:52:02:a8:2c:00:3d:81:4a:11:f6:28:3f:
                    67:db:fe:21:15:3e:e4:54:a3:a5:c0:b0:03:15:20:
                    cf:73:06:22:e9:83:c8:0d:78:64:e0:90:45:d0:08:
                    45:06:c7:20:51:d8:d9:53:ff:3a:d8:5d:3c:13:02:
                    b0:bb:db:ad:0e:ad:ee:5a:8f:d5:44:93:12:80:79:
                    f3:51:11:b9:f6:56:a1:59:97:d7:09:f5:b7:cd:56:
                    99:c0:06:87:7d:8d:cd:08:39:ce:4f:e1:c6:1b:b1:
                    bf:b8:ef:f3:f7:c2:4e:93:11:6f:0b:d7:0a:0b:85:
                    35:27:b2:dd:60:cc:15:6f:75:8b:a8:28:88:ac:43:
                    cb:84:fa:b6:26:14:08:54:3e:2a:9b:5d:ba:34:55:
                    5a:93:a6:2c:8f:55:cf:af:36:25:3b:2d:f2:bb:0c:
                    06:19:ff:1b:b9:08:8d:1f:8f:b0:1e:af:e7:72:1c:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A6:4D:C2:B4:DB:07:4A:05:E8:BC:D9:1C:DE:30:67:63:B3:37:EB
            X509v3 Authority Key Identifier:
                keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:47:39:05:85:9d:5e:79:e3:6d:b3:13:02:6d:76:34:3f:4b:
         da:03:e6:e6:9c:68:af:ad:3e:a3:e2:a1:f9:9e:37:d6:ed:64:
         da:27:15:f3:5a:00:f3:bf:ec:6a:27:3e:2f:dd:64:89:a0:cf:
         46:a1:67:b1:c1:f6:8c:f5:b9:4d:6a:2b:75:2b:55:46:c4:7d:
         f3:b7:ac:be:dd:38:47:e4:01:20:be:5b:61:b6:99:f2:71:29:
         e5:12:c1:f6:a5:74:18:51:55:ee:70:fb:d8:8d:9f:07:dd:1d:
         79:1f:a0:fa:ab:20:f1:01:b4:f0:2c:21:ca:a5:bd:0b:ed:74:
         24:ac:7e:7d:8c:ed:3d:65:f7:22:41:22:59:bd:79:57:fb:3f:
         2d:d7:9f:d9:66:14:ba:dd:96:dd:8d:bd:86:1c:e1:4e:28:50:
         c1:82:5d:a5:fd:32:80:12:0d:46:b5:6c:bf:15:f9:d2:d7:d6:
         af:88:bd:77:f4:83:f6:bc:1b:05:f7:22:e0:b4:0d:1f:b4:65:
         0c:59:fb:ad:85:b2:9e:82:93:e3:5a:82:34:40:b8:b3:04:75:
         16:31:4b:f1:ec:22:d6:da:a0:f2:b0:61:06:21:e3:7b:54:52:
         78:38:71:fe:87:51:51:63:fd:b0:02:83:08:69:09:4d:06:d6:
         64:51:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:25 2025 by rpki-client