Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
File:                     PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json)
Hash identifier:          fGtJsNRgH1F0L7rUB+bwtHdDvbC4bW5JMS6RlOU1hxw=
Subject key identifier:   A3:22:96:AC:DB:04:51:D8:97:E5:6B:6A:F3:0D:AD:79:89:14:3F:ED
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Certificate issuer:       /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial:       0198D65F9A88B2C0C74F19F29E4D029F4C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
Manifest number:          165F
Signing time:             Sat 23 Aug 2025 10:00:46 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:46 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:46 +0000
Files and hashes:         1: 30uzQGt2sOP8IgaSYaMTDquW3Z0.roa (hash: P6F3XLSWCNAXZxqOxgAo6zkRmbGUu0m7JhEJGVuwo+Y=)
                          2: 6FCLQHtozzvvT3rILarZx-dLMdk.roa (hash: CE/HPZOWQIhCk0/eQd5v6UrJlGl3+mfNdRJaoA8qyRQ=)
                          3: 9OoDrhEhbXk4ekzKyQm0jV-44SA.roa (hash: 6i+5X9C2TOzi7xmik76MYbzQQCGqHcJmrVsoOb79H80=)
                          4: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: aeMPjL4hwdZJqS55zEVnZAhBqTaKTzIAk5F00VZp3wY=)
                          5: PthqEj22M7At2kBHUijks0QzL2Y.roa (hash: mLNqUo+b6WtFCG82EqWZEk2WU+0M7VwjwYAWyGVtt1I=)
                          6: mnP6qn4_GBwg4u6pBxeQlf6iTVo.roa (hash: 0XbOSZ/9PP5b8D3OCSb6PfXvqNIMPwXQe0cizFkU/dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:9a:88:b2:c0:c7:4f:19:f2:9e:4d:02:9f:4c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
        Validity
            Not Before: Aug 23 10:00:46 2025 GMT
            Not After : Aug 24 10:00:46 2025 GMT
        Subject: CN=a32296acdb0451d897e56b6af30dad7989143fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a5:fa:72:65:52:ec:1f:0a:87:ac:4f:31:e2:
                    e6:a2:57:bc:1f:21:b7:72:9d:c7:ec:d9:6f:77:64:
                    8c:1e:ca:39:c0:9e:df:1d:7e:58:b6:f6:42:97:97:
                    86:db:3b:4f:c1:44:dd:c5:d5:e8:bb:09:8e:23:1f:
                    05:92:85:b6:2e:d2:de:62:ff:f3:e7:11:6d:68:02:
                    0c:0a:7d:9b:0f:21:4e:c4:f2:3b:68:4b:24:28:3c:
                    72:22:b4:96:68:82:64:8f:fc:be:60:26:6f:4f:63:
                    27:fc:63:1a:c6:9f:9a:8b:c4:55:d4:f0:e3:35:aa:
                    9b:b9:28:77:f5:29:a4:e6:5e:29:bd:8d:27:3d:b8:
                    5a:b1:c7:cb:4e:46:79:45:02:26:67:49:8e:48:15:
                    97:d5:45:a5:ce:67:84:02:44:4c:48:19:b2:b1:49:
                    31:2a:ae:9b:16:48:70:57:5c:90:cf:30:15:fe:3b:
                    90:0d:41:60:5a:3a:b7:a3:08:a3:e5:28:2e:fc:e6:
                    2e:42:1f:98:c4:e3:bf:cd:27:d9:e8:81:91:38:a9:
                    75:42:94:40:15:35:51:d3:71:32:fd:91:1f:ac:39:
                    7d:b5:52:a2:44:29:15:db:fb:41:d8:a4:38:0d:7b:
                    31:38:8a:31:28:cb:20:a6:47:74:fa:3c:a3:e0:c9:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:22:96:AC:DB:04:51:D8:97:E5:6B:6A:F3:0D:AD:79:89:14:3F:ED
            X509v3 Authority Key Identifier:
                keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:96:5f:e1:38:35:08:e3:df:4c:bf:a1:0e:aa:de:1b:b9:d3:
         b5:da:91:d0:b5:a8:65:4a:a8:79:0f:08:fa:09:bc:d6:d9:9e:
         77:04:aa:41:25:46:72:3b:c3:33:8d:e9:8a:ac:6b:80:53:92:
         cc:e2:39:69:68:19:5f:fa:63:8c:66:0d:a2:bd:15:54:bb:2f:
         43:e8:e9:2b:63:72:07:5d:7c:b9:42:99:8f:6e:c4:c5:93:e9:
         5f:a3:9c:0b:27:8b:7e:b8:91:1b:93:50:18:2e:73:30:89:d6:
         0a:0e:a8:13:ca:5f:bd:d7:b3:f3:52:54:1f:b3:98:dc:12:36:
         1a:04:7c:33:38:d1:9c:e2:eb:74:d0:25:4c:cc:12:78:2f:e7:
         b4:43:20:59:31:e7:24:8e:09:7b:a9:3b:82:d3:dd:65:5a:ad:
         ce:8e:9e:76:3c:72:e5:4a:d7:90:b3:e6:d0:e9:9c:5f:33:b2:
         7e:d9:69:eb:e7:b1:4c:52:58:7c:2a:ae:63:1b:fd:87:6d:55:
         19:d9:56:1c:86:de:95:a5:af:35:22:9c:ba:0a:ec:00:82:63:
         e7:c6:43:97:a8:0a:7d:93:83:8e:03:4d:d7:8c:3e:dd:a2:df:
         e9:4b:e4:66:4a:a3:d4:31:a2:bb:bd:1f:5f:f1:d3:4e:6f:fe:
         a8:c1:af:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:26 2025 by rpki-client