Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File:                     Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier:          vUickyaDmR9y6n+UZ52XTjnMUsldDeBZcOhU/ULDFPo=
Subject key identifier:   75:74:21:5E:57:9F:16:1A:B3:9F:E1:D0:80:DF:A2:71:40:2F:5D:B9
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer:       /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial:       0199FBEB2DDDE8805BE842E309A3197FB0E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number:          1673
Signing time:             Sun 19 Oct 2025 10:01:57 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:57 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:57 +0000
Files and hashes:         1: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: TG73IhAX7yYSDfIxr/AxcLCtViFXbn5llEE2K3qWHws=)
                          2: Sw2yUjR1ZL0ByAYEDmqJ1PKv-34.roa (hash: nd+025SnSLe+QrA8ZI1nLVUbcuTRnShB52imVtkdZsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:2d:dd:e8:80:5b:e8:42:e3:09:a3:19:7f:b0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
        Validity
            Not Before: Oct 19 10:01:57 2025 GMT
            Not After : Oct 20 10:01:57 2025 GMT
        Subject: CN=7574215e579f161ab39fe1d080dfa271402f5db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ef:c7:ab:c9:35:91:ac:02:b4:76:a9:0d:04:
                    5a:d8:46:74:1d:07:6c:8c:9a:a7:36:b0:f3:7f:70:
                    89:8e:b3:7b:74:45:a7:5e:a6:f4:ca:b2:a7:2c:96:
                    5d:c7:19:07:5a:57:1e:64:5d:31:96:8e:42:b1:97:
                    7c:f4:8b:b6:ea:82:6e:0c:eb:b8:41:30:cf:7c:3d:
                    b9:ca:5c:0d:34:09:0a:99:1e:5d:ff:ae:91:aa:02:
                    77:71:04:93:5f:1e:49:59:4d:10:0b:ae:ac:7d:70:
                    c2:f3:af:d5:c5:20:fb:1c:48:10:ae:25:fb:39:8e:
                    ae:bb:21:94:bf:cd:b6:25:92:7a:26:1d:01:79:d9:
                    43:40:41:35:06:ec:36:01:fb:34:07:24:51:37:14:
                    5a:f7:64:1e:ce:06:d1:16:88:1e:09:40:b4:1a:64:
                    63:0f:8c:35:af:be:96:3d:07:c3:4e:63:81:98:7e:
                    50:76:47:9d:4e:2d:51:b4:c1:fd:2d:0d:f0:bd:84:
                    88:f8:d3:8c:e1:70:62:a6:8c:ff:ef:89:e7:2f:67:
                    4c:b7:96:f6:c7:49:5e:e0:3b:28:2a:ee:b1:42:d2:
                    4c:c3:34:b1:48:2d:18:07:ce:a3:96:67:00:42:98:
                    39:45:95:aa:1a:bb:00:29:84:b2:91:8b:90:53:01:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:74:21:5E:57:9F:16:1A:B3:9F:E1:D0:80:DF:A2:71:40:2F:5D:B9
            X509v3 Authority Key Identifier:
                keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8b:a7:74:3e:50:8a:25:2c:1f:65:a0:01:b3:b1:77:4a:bc:
         36:9d:c9:b9:3d:dc:41:63:c9:d2:bf:47:69:7e:3c:9c:54:ff:
         05:5c:cc:f3:1c:d0:84:d0:7e:d6:f1:24:d0:91:8e:fb:37:64:
         c5:11:2a:81:b0:96:29:2e:bd:71:42:1e:39:cd:7e:7b:26:5e:
         1b:d5:ff:d9:c3:1d:dc:ea:c3:29:5e:cf:14:36:34:ab:ce:4a:
         9a:f1:94:69:3a:03:29:fb:c6:df:85:97:02:23:75:85:7b:e1:
         ba:76:f7:17:8f:dc:1f:22:72:ae:d9:a3:f9:3e:d0:4d:e9:25:
         55:66:eb:e4:43:90:eb:c4:3c:39:6f:15:c5:67:a7:bc:89:ce:
         6b:53:a4:f0:88:18:e4:5e:30:5b:27:8b:35:90:a5:d3:1e:93:
         cd:57:bb:9b:4d:e2:54:52:22:41:aa:6a:a9:8c:c4:57:64:c6:
         a5:47:91:f2:37:ca:08:c3:cc:36:86:f2:81:26:4b:f1:22:77:
         f4:d5:2a:c4:fa:3d:eb:96:49:c1:c6:cf:c2:a8:31:55:db:1f:
         23:71:01:92:53:42:e4:a7:89:a7:7a:69:b6:1c:24:19:7d:a3:
         e2:3b:e8:e3:a2:57:19:b0:89:bd:9d:fc:a1:96:ed:c8:ee:ea:
         c3:3c:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:42 2025 by rpki-client