Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
File:                     PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json)
Hash identifier:          hIXd44E1LqCM2lSY2BQx8zkEy7Ico1RxIacl/e2U0XM=
Subject key identifier:   6B:BD:AD:92:0D:3F:5F:F1:35:A9:6D:BF:E7:88:DA:D1:A4:06:10:77
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Certificate issuer:       /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial:       0199FC8F6E0CE42A4FD86C754A7F7556F39B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
Manifest number:          1642
Signing time:             Sun 19 Oct 2025 13:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:22 +0000
Files and hashes:         1: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: 2DvHzmwhgXc6g9QexyCNnHsF2qNSCPMJ/aTTYXxSuZs=)
                          2: wgfEWoteV0ugJhJFFY5StCpYga4.roa (hash: Bu0QgGIHWGxscJbgnF2zr/rd8qdTFWvwHrlBzc8O9aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:6e:0c:e4:2a:4f:d8:6c:75:4a:7f:75:56:f3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
        Validity
            Not Before: Oct 19 13:01:22 2025 GMT
            Not After : Oct 20 13:01:22 2025 GMT
        Subject: CN=6bbdad920d3f5ff135a96dbfe788dad1a4061077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ea:64:d4:24:74:2a:75:0a:e6:f7:24:32:96:
                    89:46:a8:1e:53:95:f5:fc:96:08:85:df:21:5a:cf:
                    0b:d8:b6:52:6e:71:58:c8:e2:c9:1c:75:8c:4c:69:
                    54:4d:09:e7:55:0d:1d:c0:96:78:57:b4:23:85:d2:
                    7d:55:a4:38:c8:65:f6:a6:ce:73:90:b2:9e:88:8a:
                    39:c5:da:13:74:6b:84:51:47:6e:9b:d9:16:f6:d4:
                    52:60:73:82:80:17:2c:61:5a:f9:aa:96:bf:64:93:
                    4f:a0:1b:f8:ee:b0:c4:f0:03:d8:57:37:62:4a:11:
                    29:57:49:c8:b3:68:08:84:b1:b4:a9:dc:d4:00:42:
                    e2:13:fa:be:11:fa:9b:5c:66:9a:93:07:44:3c:9d:
                    69:94:ea:c9:dd:01:fe:db:f4:0d:d9:c9:e7:87:df:
                    30:4a:45:27:0a:63:41:4e:c7:18:7a:ab:ff:b8:5f:
                    65:0f:f0:5a:8a:98:19:e0:01:4e:31:3b:5b:f1:f1:
                    3e:19:65:1c:5d:19:8a:e9:9c:38:79:84:ea:3e:51:
                    d9:42:b4:7a:bf:84:99:85:24:0b:6e:68:e4:02:5d:
                    b6:2e:5b:a2:e6:57:3a:be:54:4a:17:07:f5:ed:94:
                    e4:6b:aa:dd:db:9a:58:bf:03:b8:cb:0b:8b:31:4a:
                    52:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:AD:92:0D:3F:5F:F1:35:A9:6D:BF:E7:88:DA:D1:A4:06:10:77
            X509v3 Authority Key Identifier:
                keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a5:fb:17:7e:bd:dc:07:65:c2:33:a5:a0:b8:47:3a:58:f3:
         f3:78:3d:6a:00:29:ef:fa:0f:4a:0c:ed:f1:d0:99:d8:e8:0a:
         92:d4:6f:ef:4a:2b:e0:ec:ad:2e:77:04:49:27:be:c0:45:5d:
         ef:3b:82:70:99:3b:73:ff:1e:9b:7c:67:f5:ff:66:87:37:d2:
         66:20:cd:f5:f8:ee:3a:ee:7e:cd:6d:82:bd:2a:08:b9:24:33:
         48:ea:fd:ab:69:e1:96:3c:c8:ce:03:0d:1a:1b:62:58:f8:30:
         88:1a:9a:5b:2a:e8:c7:1f:81:39:49:64:a4:49:f5:aa:15:24:
         fd:bd:d2:b1:99:49:a9:41:1a:34:2d:0f:97:53:ba:2f:b8:e1:
         0b:cc:b4:18:f3:3a:57:a0:c0:1f:47:fa:d9:23:c8:31:31:dd:
         82:24:75:68:69:48:0f:1c:3d:b7:a2:0e:3b:b3:c2:31:dc:4e:
         2c:76:b8:6e:6c:aa:c7:5e:21:a9:a1:72:ff:4e:a9:4f:5d:92:
         17:80:81:23:92:db:4e:4c:5e:b4:fd:15:13:0b:60:41:1c:6f:
         93:41:61:16:0c:ab:3f:fb:3a:10:ba:a2:84:51:2d:29:7c:2f:
         6e:91:cb:6e:84:3a:d6:37:ee:07:bd:43:5a:13:ad:cb:a9:56:
         db:e8:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:34 2025 by rpki-client