Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
File:                     pnkWCgRJ6LUPwByF3PzlSyxim1E.mft (raw, json)
Hash identifier:          mEeUgMUd4rlC7G3BOA4PnQDVk1LVmtRifko9f/vzbQQ=
Subject key identifier:   D4:05:D5:20:74:19:AF:8D:F9:6A:0C:2A:4F:05:F8:56:86:8D:AC:DC
Authority key identifier: A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51
Certificate issuer:       /CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
Certificate serial:       0199FB7CBCE8901A206E7B4A1A4607BDFB36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
Manifest number:          10E7
Signing time:             Sun 19 Oct 2025 08:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:19 +0000
Files and hashes:         1: 6zgBCVzd-5kdX0sgGe0YDglrk04.roa (hash: mpYaeNHnIzoaHZnsNjSuZCAnd5S6WeK+VhnJsngc1QQ=)
                          2: pnkWCgRJ6LUPwByF3PzlSyxim1E.crl (hash: CF7zgo4xEe7dwwjx50tPg2PQEm/TsNcpMx/YeCJVWzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:bc:e8:90:1a:20:6e:7b:4a:1a:46:07:bd:fb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a679160a0449e8b50fc01c85dcfce54b2c629b51
        Validity
            Not Before: Oct 19 08:01:19 2025 GMT
            Not After : Oct 20 08:01:19 2025 GMT
        Subject: CN=d405d5207419af8df96a0c2a4f05f856868dacdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:94:fe:b0:08:ef:ee:6d:cf:73:e2:3e:cc:fa:
                    3a:08:3a:22:61:18:9a:6e:d8:6e:fc:58:ed:e8:44:
                    7d:45:27:bc:e5:3c:b7:11:ad:39:13:22:88:2f:4c:
                    51:8f:87:22:6b:56:69:ef:0b:1f:ba:eb:a8:59:f7:
                    d4:00:75:2d:b3:8e:a2:e8:34:34:f8:10:c1:0d:d4:
                    3d:f7:0c:17:42:1e:85:24:ce:ac:d1:ed:9b:7e:21:
                    d5:0c:af:fd:af:84:f4:40:0e:80:8a:22:8a:67:39:
                    67:e4:c5:4b:66:58:82:35:bc:59:56:dd:61:7e:76:
                    28:67:8e:8b:da:32:60:98:e3:cb:bb:97:12:f7:dd:
                    7d:a9:96:3e:3f:78:a5:a6:ed:df:24:ab:9d:7a:7a:
                    78:62:ba:86:9b:de:eb:51:56:0a:8a:15:fd:5d:a8:
                    de:2b:92:da:5d:ef:4c:18:36:a0:0f:56:26:32:27:
                    89:86:58:32:3a:c9:96:ec:08:f5:8a:2f:c8:99:2f:
                    dc:77:50:bc:aa:7b:83:a5:47:d3:46:c5:6f:96:80:
                    2d:11:ae:9d:c4:fb:ff:8c:ec:d0:6a:87:83:d7:18:
                    5d:62:8d:71:b4:e2:1f:4a:3a:12:4e:88:ac:cb:01:
                    83:cb:05:0c:92:4a:62:0a:7f:0a:37:11:e4:01:4c:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:05:D5:20:74:19:AF:8D:F9:6A:0C:2A:4F:05:F8:56:86:8D:AC:DC
            X509v3 Authority Key Identifier:
                keyid:A6:79:16:0A:04:49:E8:B5:0F:C0:1C:85:DC:FC:E5:4B:2C:62:9B:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnkWCgRJ6LUPwByF3PzlSyxim1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/72de35-338d-4a43-b719-8b4d08d37c5f/1/pnkWCgRJ6LUPwByF3PzlSyxim1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:be:0a:f0:d1:68:57:d9:36:58:ce:8a:11:e5:55:21:f8:17:
         14:f4:33:5d:dd:1d:e5:6e:68:93:04:48:a3:ea:35:59:15:bf:
         a4:5a:c3:6f:5a:ad:69:86:0b:c0:8d:95:27:cc:82:ee:f1:18:
         62:9b:cc:b7:0f:1f:5f:7d:a9:a9:e8:05:5e:d0:ab:0d:70:9d:
         b2:48:ca:ca:2c:08:53:90:8e:c4:e6:4b:ce:05:c8:ae:99:30:
         7e:23:e1:3b:75:f6:1f:bb:02:77:f8:16:38:3f:2e:e0:d7:24:
         3b:8e:be:02:67:cc:19:93:b7:9f:db:57:42:86:9b:a2:b8:35:
         1f:fd:ea:16:80:0a:49:be:97:f3:37:be:40:d4:d0:06:08:46:
         31:7e:29:e3:2c:b7:8c:f0:af:7d:fc:b2:95:f1:74:68:c1:00:
         ed:d0:3b:b6:d4:35:6d:23:62:ab:1e:09:b4:f1:f2:58:57:ff:
         2f:72:00:d3:d6:7d:fd:48:55:c7:39:0f:b1:4d:a2:9e:3c:a5:
         f3:ee:3d:e3:f3:69:b8:41:50:6e:5a:6a:92:72:d5:b3:a2:ff:
         1d:b6:44:bb:15:c2:6d:0d:41:b8:d0:b3:b5:95:a0:d1:cd:14:
         90:b3:eb:1d:83:b9:ce:33:a2:94:42:bf:55:5f:34:fb:fe:e7:
         98:79:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:50 2025 by rpki-client