Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File:                     PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier:          WizdJRsz0DZdzp/0zB/QLLxHdKfZEWSNA8DjyVgN9o8=
Subject key identifier:   45:25:F6:E6:DE:C9:8B:7E:68:D9:39:D4:C8:0B:AB:7C:02:AB:CD:D0
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer:       /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial:       0198D583422EB5753840E31A646133C2EB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 06:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:05 +0000
Files and hashes:         1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=)
                          2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: uBwJ7pDIRQNhQITOKD1FMeXKL6rv7VbkmAcFUtqHjEk=)
                          3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=)
                          4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:42:2e:b5:75:38:40:e3:1a:64:61:33:c2:eb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
        Validity
            Not Before: Aug 23 06:00:05 2025 GMT
            Not After : Aug 24 06:00:05 2025 GMT
        Subject: CN=4525f6e6dec98b7e68d939d4c80bab7c02abcdd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:02:c0:a2:04:0f:7b:5a:29:ea:fe:9d:3d:80:
                    f1:0e:2d:10:59:64:c3:8c:b6:cb:6c:c9:1c:f0:59:
                    fb:18:71:79:d5:f7:d0:af:8a:60:5e:0a:e6:35:41:
                    32:44:9c:39:70:fe:93:da:65:73:9e:2a:1a:78:03:
                    93:2b:11:dd:44:65:80:46:03:a5:24:ea:5e:6c:61:
                    d7:bd:fe:8e:18:08:70:98:82:69:98:fc:a2:e8:28:
                    b4:a1:4b:ab:8f:fe:dc:ea:4c:73:d5:6c:ba:cb:c3:
                    0e:88:8f:66:f9:71:3d:f7:6a:11:81:09:9f:14:64:
                    ef:92:8b:44:cf:3b:17:6a:32:94:11:12:a6:07:0f:
                    b5:37:65:c0:fe:ed:7f:02:64:e7:b7:46:6c:2f:25:
                    8e:08:20:6a:29:e5:45:16:60:46:23:26:f9:58:e1:
                    3e:82:c4:dd:4d:38:bd:b2:3c:c3:ae:d6:7b:79:a5:
                    c4:04:61:f3:ac:bf:7c:63:06:01:2e:bf:6a:d1:46:
                    2e:c7:06:99:5e:70:72:1a:3c:3e:cb:b7:dd:fb:1e:
                    02:99:8c:a4:d1:06:64:b8:d1:d9:18:5e:5c:87:0c:
                    df:50:87:02:10:b0:62:aa:f5:50:f6:5e:28:48:dd:
                    9a:bf:37:5f:b3:1b:65:ec:e6:9b:a1:4f:d9:95:84:
                    28:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:25:F6:E6:DE:C9:8B:7E:68:D9:39:D4:C8:0B:AB:7C:02:AB:CD:D0
            X509v3 Authority Key Identifier:
                keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:da:4c:0c:ed:88:97:f9:85:16:2e:df:7b:5c:3d:d7:fd:54:
         09:6a:bf:29:15:1c:2d:24:09:b8:fd:fc:e0:9a:97:4e:5f:19:
         39:ac:80:be:55:c0:a2:9e:eb:b5:85:2c:d5:48:28:4b:c7:7d:
         9b:27:c9:9d:fd:4b:c2:24:dd:45:1f:11:94:28:72:64:2d:1a:
         d8:0e:d5:8c:a7:a0:e0:2b:95:04:b9:6e:2b:a6:47:94:eb:51:
         0a:87:dd:5e:d4:9b:cd:53:d2:b7:be:e8:58:b1:be:2a:17:4a:
         57:57:34:59:93:2b:44:bb:9e:63:30:11:70:df:99:ae:a7:12:
         69:7c:fc:33:43:a2:2f:95:a4:c8:49:75:85:50:c3:39:e8:27:
         0b:5c:8b:38:3c:8e:15:80:21:42:27:1c:f0:e5:3c:73:d6:68:
         29:11:28:9b:80:ca:23:38:5d:ee:34:c4:28:14:6c:8b:82:48:
         c5:91:e6:fb:b7:f2:89:97:eb:59:6f:59:3f:d1:da:1e:2a:f2:
         1b:ee:8e:ac:4d:87:72:99:a2:83:26:64:7f:98:d8:0d:3f:26:
         cb:51:f9:c6:3b:9e:99:f4:ad:d1:32:88:e7:75:e6:c6:18:16:
         2b:8b:93:f5:b5:35:1a:51:fc:f8:5a:91:1e:b7:b2:38:42:86:
         20:18:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:07 2025 by rpki-client