Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File:                     PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier:          jnxbt6jwzZQfVXwXf1rE8cG7YMoxFonGLlJBfcGdCME=
Subject key identifier:   57:38:DF:13:5C:C3:D1:66:06:CF:96:16:FE:D4:71:D2:4D:F3:D6:8C
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer:       /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial:       0199FC58C9C0634D6B234DB32CBD52CAA118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 12:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:41 +0000
Files and hashes:         1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=)
                          2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: AOLEQATmQcQ08VL4GcTrdXP3Ia6PTN7uySjplVSuRRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:c9:c0:63:4d:6b:23:4d:b3:2c:bd:52:ca:a1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
        Validity
            Not Before: Oct 19 12:01:41 2025 GMT
            Not After : Oct 20 12:01:41 2025 GMT
        Subject: CN=5738df135cc3d16606cf9616fed471d24df3d68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:dd:39:b0:f2:4e:bc:42:54:d2:81:b9:6e:67:
                    b4:03:3c:30:55:96:26:9d:94:42:c6:37:b9:30:71:
                    4c:21:aa:5a:9f:82:00:7a:29:ea:19:8a:61:0c:92:
                    eb:1a:11:36:59:0a:1b:a3:ed:64:ff:61:8d:ec:a8:
                    5b:84:59:8f:7b:a7:40:17:84:00:a1:f2:9e:e7:b4:
                    78:f7:09:da:7a:7f:2a:04:d6:77:04:14:da:6d:85:
                    16:49:7f:69:f8:a7:30:0f:b3:cd:13:be:b3:31:0a:
                    86:9d:9a:e9:cf:7c:4e:3b:78:f6:d1:e4:d7:9d:19:
                    d8:a3:21:8a:ab:f7:ee:7c:fd:30:cd:e6:3b:f7:75:
                    72:9e:b3:d4:90:b8:5c:f5:5e:c1:74:e5:3a:7b:54:
                    93:ab:dc:80:dc:97:72:2e:d3:a6:89:d1:3d:b4:ae:
                    bd:16:9f:84:05:71:73:99:4f:90:8f:45:5a:28:99:
                    26:82:d0:ec:5f:1f:0a:cf:69:ff:c5:f5:e3:d6:24:
                    db:44:1e:3b:e5:6f:cc:d8:95:c3:77:70:0b:a0:9f:
                    56:81:25:f6:6c:08:1b:77:99:65:c7:ec:87:4b:d9:
                    f3:91:a9:f6:d0:80:9d:46:ab:1e:e7:5f:da:3b:64:
                    02:86:2e:0d:4c:e7:ac:3e:b7:57:9b:df:f3:b2:df:
                    c1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:38:DF:13:5C:C3:D1:66:06:CF:96:16:FE:D4:71:D2:4D:F3:D6:8C
            X509v3 Authority Key Identifier:
                keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:34:a9:37:2d:45:b7:0f:b4:9f:38:44:a5:22:80:93:39:c9:
         c2:1e:47:51:33:f4:44:7a:9a:ce:4b:2e:93:76:fa:0c:99:13:
         d7:28:58:5c:64:2f:7a:1c:0f:66:bf:ac:1e:eb:d6:20:51:11:
         b4:a2:64:3b:86:1b:77:04:bb:96:99:8d:c1:24:aa:92:e0:a6:
         2d:09:24:1e:0c:cc:22:63:56:ee:77:83:d1:6d:78:e4:15:cf:
         71:65:b1:a4:9a:44:30:ca:cd:0d:5d:f1:f7:e8:aa:6d:65:c2:
         40:ea:c2:a1:76:d7:a9:00:fc:ab:ca:4b:7a:d4:be:b7:ab:c4:
         e6:7b:db:3d:5f:2e:e9:75:f3:55:89:1e:4c:04:52:26:4f:ad:
         00:58:1f:41:64:70:d8:28:aa:3f:7d:63:b2:e1:2f:85:2c:58:
         e6:89:d1:d2:55:ec:57:5e:64:34:ee:4f:89:a0:a5:9f:85:05:
         ed:b2:28:34:0c:36:b9:e7:e8:fc:43:33:17:24:f1:ce:68:cc:
         42:ec:4b:4c:41:79:0e:c3:0a:88:1c:f4:a8:82:c0:3f:e3:b4:
         7a:e2:71:59:7a:da:3c:fe:20:bc:d8:9a:a4:31:dd:fb:37:d0:
         59:fc:64:53:16:e3:f4:87:a0:91:84:d4:cc:5f:c6:98:f2:1f:
         64:41:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:08 2025 by rpki-client