Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
File:                     PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json)
Hash identifier:          9Xzomw0Ik70Ptz0m/zDJ9CH4j4/ymCxF9epnLrXwArw=
Subject key identifier:   8C:62:56:22:E7:86:4F:E4:DA:34:82:D5:67:34:7B:BF:C1:03:59:9C
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Certificate issuer:       /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial:       0199FC58994416E73CA2CF140A8B981E3060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
Manifest number:          0177
Signing time:             Sun 19 Oct 2025 12:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:28 +0000
Files and hashes:         1: 1-AcyZzR_rYiM2ehdDTTg0kr4UTw.roa (hash: qHmoXJmRx4dkuxN3uy5t1kjSUTwhuDfIP867Nh4f5Ts=)
                          2: LbGHBzwRAfceRmxwP2ccsuOGwGU.roa (hash: ZwRIC8Resn0brXABJWxiiw1dDspM+fWK1hVb1pb6YYQ=)
                          3: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: hDy4txnbrvmXz1n7FXzfCFFilKr8CLAFWbjoOlA93LU=)
                          4: VjUF6mkOxxkGBT69SzLniaN5UYw.roa (hash: JTMUgsA+g5cqMZGbs8rgNYEsQMEwv0Fop5cCQWjZZZ0=)
                          5: dUEg2uHl_mzH4Gc59hF0SQlEOPk.roa (hash: FAec0jGTBdqWnGcu6aY23AJJHb4v1uDZ1rxzpmt/9ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:99:44:16:e7:3c:a2:cf:14:0a:8b:98:1e:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
        Validity
            Not Before: Oct 19 12:01:28 2025 GMT
            Not After : Oct 20 12:01:28 2025 GMT
        Subject: CN=8c625622e7864fe4da3482d567347bbfc103599c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:f9:69:7e:b0:3e:54:99:a4:6c:a9:1d:b5:
                    9c:a2:11:c6:7d:b9:2f:82:d8:7d:4c:91:8a:cf:a7:
                    75:5d:cc:16:06:c8:4e:8a:a1:44:02:28:2e:6b:2e:
                    ed:2c:a2:45:d3:a2:c4:38:21:d5:7b:67:11:38:56:
                    c9:a1:79:78:db:6b:b3:60:28:f2:4c:2d:5d:21:9e:
                    68:4a:46:8b:05:7c:f0:0a:a9:ec:21:47:bc:db:f4:
                    d5:8f:e0:85:77:8a:95:b1:ec:aa:60:7a:fb:45:16:
                    4c:43:1a:4e:40:dc:75:23:43:a8:e3:0b:53:31:0a:
                    fc:40:ef:51:aa:57:21:fc:b7:46:23:e2:d9:68:8c:
                    fc:ef:07:8a:ac:73:65:c7:6b:59:91:fc:57:ce:08:
                    1a:ee:53:05:bd:a1:1e:5b:94:e4:d4:74:47:55:3d:
                    f7:17:8d:4a:be:d6:f8:92:9d:36:8d:f3:7e:2d:b2:
                    d9:a3:13:df:83:13:29:dd:c8:2d:f8:0d:17:fc:48:
                    4b:3c:22:8e:6c:af:02:ff:82:13:9a:c2:72:9e:cd:
                    ca:2d:c5:05:4c:34:35:0b:7c:19:35:ee:ae:24:4d:
                    86:fe:3b:78:53:88:7d:97:a7:3a:67:17:d9:c8:0a:
                    be:6b:40:56:e5:a3:b0:d1:ec:d0:e0:e2:44:88:3d:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:62:56:22:E7:86:4F:E4:DA:34:82:D5:67:34:7B:BF:C1:03:59:9C
            X509v3 Authority Key Identifier:
                keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:e0:5a:19:39:e8:95:49:ef:b2:72:a2:16:a5:fa:71:89:
         a1:b5:8d:77:f2:22:16:2e:b2:cd:0e:bf:8f:d6:86:07:88:3e:
         86:b9:9e:58:6b:93:e3:02:30:e3:88:30:49:b8:20:40:da:cd:
         64:5c:22:ed:07:86:d3:b9:11:23:2e:bc:33:f4:de:71:4f:01:
         14:6a:62:be:2f:be:19:8c:06:e3:ee:c5:72:46:17:ef:b0:50:
         94:6f:24:84:19:bc:34:ea:82:4b:7a:1a:e4:0a:ed:3e:79:85:
         3b:e5:7b:2b:e5:8a:b8:eb:07:ce:a8:f3:f7:10:06:d3:46:6b:
         0c:dc:75:94:b2:b3:95:bf:e8:8c:df:3c:7e:82:6e:ed:60:65:
         f4:3b:9c:9c:7f:e1:71:97:e4:f3:ee:32:b3:c4:f1:ea:47:47:
         4d:b2:c0:84:29:6e:e8:8f:91:89:5d:4d:0c:d5:e6:69:1f:35:
         31:fa:34:43:62:c8:1a:93:f5:75:fe:3c:e4:98:af:23:41:8f:
         70:19:25:42:4c:39:27:fe:db:a6:f0:61:79:94:c4:c9:10:cf:
         37:1c:69:27:16:c6:d4:8a:93:2a:dc:da:51:83:30:fd:0d:34:
         1e:42:52:41:4c:c8:e0:ed:0f:5d:f6:6a:10:7b:03:46:06:eb:
         f2:b0:9b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:09 2025 by rpki-client