Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File:                     PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier:          VqmUBryWk9xu4GSXllC2veRp3j8j+IP0cm4PXi25GVI=
Subject key identifier:   3F:30:29:68:73:3A:74:BF:8F:C4:19:42:07:CE:36:AF:86:17:32:36
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer:       /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial:       019A4E86E2599123FE6984813734EE5DE699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number:          0E1B
Signing time:             Tue 04 Nov 2025 11:00:53 +0000
Manifest this update:     Tue 04 Nov 2025 11:00:53 +0000
Manifest next update:     Wed 05 Nov 2025 11:00:53 +0000
Files and hashes:         1: 1-PRouHcN36iLzwy9uNqLaIiV2X0.roa (hash: 4hehSvfv8sJqIC+vHja2uEOG+73HXBFbIDrIN8bH3vg=)
                          2: 67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa (hash: Iy7s2Aw6gINY7MrIIhsJrkKAANHoHyCQ2Dm8An5q6ps=)
                          3: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: NxzJ3PpP6QEFohqxs+QaFh+YRlEWvjzsL4fIQ6BuZnQ=)
                          4: rTI3MC_cflVKmz4QHcC39TCJNIM.roa (hash: Gn7Y1Iho0e2nKKiZXGFb+cFXQIXgua4De8STjxaheIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:86:e2:59:91:23:fe:69:84:81:37:34:ee:5d:e6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
        Validity
            Not Before: Nov  4 11:00:53 2025 GMT
            Not After : Nov  5 11:00:53 2025 GMT
        Subject: CN=3f302968733a74bf8fc4194207ce36af86173236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:13:05:4e:09:8f:20:d9:b7:47:24:a8:c0:41:
                    8c:31:5a:77:35:34:cf:c3:fd:fb:22:36:57:3e:86:
                    48:68:6e:b4:6e:5d:30:65:d9:59:2e:18:fb:a8:5b:
                    58:57:37:01:8d:a8:36:77:3a:c2:f2:53:0e:b1:30:
                    98:60:17:a4:d2:bb:69:29:4b:5e:4b:84:c7:b8:36:
                    ca:66:a7:0b:76:44:15:82:6b:d5:f3:13:74:f2:75:
                    dd:f8:89:ff:3c:54:00:8c:af:f2:20:a1:5c:ff:45:
                    ae:ca:03:bb:6d:3d:bf:62:ea:19:a3:d8:7b:85:23:
                    1c:e4:ce:60:51:78:00:3a:26:23:e5:20:78:ac:b6:
                    4c:7c:a6:7e:23:5d:1d:51:60:af:b0:9f:90:f6:17:
                    07:d2:62:f0:dd:51:b6:3e:e4:fd:55:e2:e2:2f:90:
                    ad:40:a5:45:93:3d:88:de:e7:6d:13:ba:89:3b:8a:
                    69:90:a9:80:03:d5:bf:ef:bf:8f:9c:2a:98:c8:2c:
                    dc:4e:72:46:f4:c8:6a:b6:a8:13:4e:62:f7:16:92:
                    13:28:93:2a:d3:d9:5e:10:1b:c5:b6:f1:5e:00:e0:
                    00:f1:73:52:76:f7:94:52:a4:14:52:0b:67:1b:7e:
                    c5:e6:44:63:d3:62:14:d4:ca:8b:ab:39:38:e2:24:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:30:29:68:73:3A:74:BF:8F:C4:19:42:07:CE:36:AF:86:17:32:36
            X509v3 Authority Key Identifier:
                keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:44:51:d1:28:0e:db:3b:75:d5:0b:3d:17:d4:f2:a7:29:59:
         4e:31:74:09:f7:18:3d:c4:dc:2a:1b:82:6d:48:72:27:97:aa:
         23:a4:09:ef:98:6e:88:ac:34:a3:a9:75:69:9e:b5:85:5e:3d:
         5d:d8:e4:61:09:f7:e3:b6:ee:46:89:23:25:60:77:a0:28:bd:
         7d:41:60:86:b7:25:bb:e4:9d:7b:f2:b3:7f:20:09:ca:bd:cd:
         9f:ab:9d:0d:93:c2:6d:3b:83:81:60:8a:0b:5e:fb:5f:e0:38:
         e1:2c:1a:8b:de:34:cf:32:13:e5:d1:76:36:f6:8e:87:a2:8e:
         b7:61:f2:cf:04:e0:1d:9d:92:4e:07:23:76:16:5f:60:fb:89:
         94:68:59:67:62:f8:5a:8a:06:5a:aa:d1:3b:f3:2d:dc:ad:11:
         11:b5:2a:9b:fe:11:6a:3b:95:e0:da:87:32:38:53:d9:26:fa:
         13:7f:77:45:38:b4:e6:56:ad:5e:26:7a:81:7f:df:77:80:67:
         e4:4b:1d:d3:a4:9d:0b:d0:16:80:07:43:08:3b:e0:6d:69:e6:
         40:8d:74:fe:46:bc:77:6a:3c:00:06:01:86:a2:b0:c3:8c:b7:
         65:3a:9d:61:2f:a7:8b:8e:ac:56:af:ae:98:e5:46:47:ba:67:
         38:c9:fb:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhuJZkSP+aYSBNzTuXeaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWI4Mzg4ODY5NmZjNDQ0NzhjNjkzZDZlNzgwM2U5NTE2
MjUwZTYwHhcNMjUxMTA0MTEwMDUzWhcNMjUxMTA1MTEwMDUzWjAzMTEwLwYDVQQD
EygzZjMwMjk2ODczM2E3NGJmOGZjNDE5NDIwN2NlMzZhZjg2MTczMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBMFTgmPINm3RySowEGMMVp3NTTP
w/37IjZXPoZIaG60bl0wZdlZLhj7qFtYVzcBjag2dzrC8lMOsTCYYBek0rtpKUte
S4THuDbKZqcLdkQVgmvV8xN08nXd+In/PFQAjK/yIKFc/0WuygO7bT2/YuoZo9h7
hSMc5M5gUXgAOiYj5SB4rLZMfKZ+I10dUWCvsJ+Q9hcH0mLw3VG2PuT9VeLiL5Ct
QKVFkz2I3udtE7qJO4ppkKmAA9W/77+PnCqYyCzcTnJG9MhqtqgTTmL3FpITKJMq
09leEBvFtvFeAOAA8XNSdveUUqQUUgtnG37F5kRj02IU1MqLqzk44iTwMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8wKWhzOnS/j8QZQgfONq+GFzI2MB8GA1UdIwQY
MBaAFDwbg4iGlvxER4xpPW54A+lRYlDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUt
OWU4MmRhNzMxNWNmLzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUtOWU4MmRhNzMxNWNm
LzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0RR0SgO
2zt11Qs9F9TypylZTjF0CfcYPcTcKhuCbUhyJ5eqI6QJ75huiKw0o6l1aZ61hV49
XdjkYQn347buRokjJWB3oCi9fUFghrclu+Sde/KzfyAJyr3Nn6udDZPCbTuDgWCK
C177X+A44Swai940zzIT5dF2NvaOh6KOt2HyzwTgHZ2STgcjdhZfYPuJlGhZZ2L4
WooGWqrRO/Mt3K0REbUqm/4RajuV4NqHMjhT2Sb6E393RTi05latXiZ6gX/fd4Bn
5Esd06SdC9AWgAdDCDvgbWnmQI10/ka8d2o8AAYBhqKww4y3ZTqdYS+ni46sVq+u
mOVGR7pnOMn7Kw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:12 2025 by rpki-client