Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
File:                     Ph_ROPEC19yxWDtElBAvD-WH5F0.mft (raw, json)
Hash identifier:          OaderaQmpi31dkPhtH3d+fPmCSiO6QDCUVOzX1PZeVQ=
Subject key identifier:   3C:B6:8B:FA:F7:AD:9B:35:11:8D:12:33:A7:3D:8E:58:96:56:51:E6
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Certificate issuer:       /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial:       019872CFF0F92EC9D5F88E23F066C53530A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 02:01:26 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:26 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:26 +0000
Files and hashes:         1: Ph_ROPEC19yxWDtElBAvD-WH5F0.crl (hash: PlXYOpHy5dRYJFI5szKStwdaSbxpP0GvjaGR0KAdvKA=)
                          2: wBeey_3DAfmS3bVpXKczcJjM4cE.roa (hash: 0BXIC9Ywwqhs3eAEJFqVmWCSiRTOnC7ial/YIuKbIQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:f0:f9:2e:c9:d5:f8:8e:23:f0:66:c5:35:30:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
        Validity
            Not Before: Aug  4 02:01:26 2025 GMT
            Not After : Aug  5 02:01:26 2025 GMT
        Subject: CN=3cb68bfaf7ad9b35118d1233a73d8e58965651e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:0a:dc:81:86:b4:8c:f3:10:9a:7d:fa:63:
                    5c:7c:dd:a2:33:8b:b1:4e:94:34:49:f5:6c:c3:e8:
                    27:9a:ef:eb:93:f7:1d:ca:bb:7d:19:c8:1f:4c:ae:
                    de:9b:46:93:b1:2e:8e:22:45:02:dd:95:e1:af:47:
                    5c:8f:e9:1d:bf:3c:0c:aa:e8:b1:47:5f:12:ea:22:
                    8c:e0:3b:8a:86:bb:6b:04:98:53:09:9f:54:3a:d8:
                    a7:2c:01:38:dc:2a:91:90:c4:ff:e6:f5:cd:da:89:
                    cb:f7:9b:45:a0:44:ba:10:95:5d:c7:da:0f:40:15:
                    cf:47:98:50:76:5b:46:f9:3a:15:f7:0e:39:bd:19:
                    6c:ac:1f:80:aa:39:82:80:11:30:fc:cf:e9:e9:f6:
                    e8:fd:4d:c0:c3:a3:fe:64:aa:63:08:67:3f:68:e3:
                    84:01:58:0a:10:1c:f9:48:10:1f:6e:2b:cc:d5:80:
                    21:bb:19:bc:95:3d:71:81:71:7b:b0:6a:b5:a7:21:
                    13:cc:9e:f1:51:71:ff:dd:a6:24:18:f8:18:b0:78:
                    b9:81:81:52:28:1b:af:9a:31:25:40:8b:85:13:1c:
                    a3:52:7e:bb:71:da:35:38:fb:d3:e2:be:c2:b9:fb:
                    e5:f2:12:17:21:94:ca:db:b2:b3:bc:0e:0b:b7:e9:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B6:8B:FA:F7:AD:9B:35:11:8D:12:33:A7:3D:8E:58:96:56:51:E6
            X509v3 Authority Key Identifier:
                keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d6:7e:14:db:b9:84:83:97:54:87:f3:85:15:75:0b:65:ac:
         0a:0f:f9:0d:1b:32:27:9c:b3:65:87:ea:bd:8a:95:8a:48:d8:
         b1:f0:2d:3f:55:5f:4c:33:d2:7e:e9:f3:8a:08:e7:61:5b:ad:
         c7:80:7a:04:e6:a3:dc:89:47:e8:a4:4b:a7:b9:c9:02:48:07:
         f3:40:87:ab:7e:a4:06:e0:d0:b6:c6:ea:04:a8:ce:13:aa:d5:
         3d:f0:ca:9d:88:9d:9b:a4:89:d4:04:cc:83:fa:b9:0d:63:35:
         44:39:25:18:ab:89:39:01:5b:b1:2b:6d:78:85:92:21:c6:c0:
         02:e0:8c:1d:49:98:0c:d9:2f:74:a3:a5:be:9c:27:6b:01:82:
         48:d9:00:c7:c8:85:35:e7:00:c6:94:e2:56:4f:96:e9:59:00:
         5f:c2:59:0a:f1:f4:e6:50:f8:9c:06:d9:ea:7c:3e:1f:50:29:
         b6:3b:ab:44:5a:d2:3e:f9:60:9f:99:16:c0:9d:b5:7c:4f:af:
         68:1d:57:b5:1e:0b:e7:49:8a:c4:6d:f0:39:c7:14:c8:72:58:
         56:71:59:58:98:a5:aa:66:a6:8e:e4:d3:6c:1d:8f:45:9a:d3:
         af:01:c5:87:3b:f5:2d:62:8a:dc:ab:43:08:23:7a:ba:1a:e1:
         f1:f4:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:55 2025 by rpki-client