Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File:                     PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier:          XZvbgWyo581Pp/73+D/VTwgZ9x2wJQka9fXrT0NZPbs=
Subject key identifier:   F6:03:7A:71:AD:F0:77:9F:BB:58:C3:67:B1:46:02:40:C3:F2:D9:F5
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer:       /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial:       0199FBEC7348368F667F51260BFE9C75014E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number:          036B
Signing time:             Sun 19 Oct 2025 10:03:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:21 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:21 +0000
Files and hashes:         1: 2DxOeFRwGr0ZkLmLFLoh-xJZObE.roa (hash: aeAg8fL5FqA68LiiZmemChuMc/666QpvAefI6BAnFLU=)
                          2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: rpq1ynVV3MsCKbG7284i0YRX9jBn/m8GxgJb6zQ3kF4=)
                          3: QubVM_6N5lx1EgDJtxcjPI_RV3o.roa (hash: 0U5OEeLVzA3Fo3jdio9FkyyDkZiO1CmcUt6CGyuWF74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:73:48:36:8f:66:7f:51:26:0b:fe:9c:75:01:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
        Validity
            Not Before: Oct 19 10:03:21 2025 GMT
            Not After : Oct 20 10:03:21 2025 GMT
        Subject: CN=f6037a71adf0779fbb58c367b1460240c3f2d9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:cb:33:7e:8e:80:07:07:4c:34:10:2f:bb:
                    fe:4c:88:b4:96:43:bc:4f:e7:81:a8:a5:5e:17:d5:
                    e1:d4:6a:82:4c:74:ee:8b:d0:99:35:50:fa:52:88:
                    bf:d2:d5:52:65:34:e7:5b:87:b1:54:16:96:69:52:
                    d3:bb:61:e7:41:ca:1f:78:83:db:10:46:e2:0d:0e:
                    e5:05:a2:0b:0f:a6:0a:fd:a4:fc:44:72:00:fd:5e:
                    82:6b:5e:07:66:85:b3:7d:81:26:d2:89:84:bb:b7:
                    3b:69:0a:c7:cc:dd:76:3b:0a:7d:15:b1:4a:1c:95:
                    d5:ea:d6:5b:db:9d:7a:18:88:c6:39:6e:a4:ae:89:
                    a8:1a:fb:39:ef:fe:b3:31:0f:45:09:bd:5f:06:35:
                    e7:3c:29:bf:4f:08:dd:b8:2b:9c:ec:89:64:4f:73:
                    75:d2:d9:90:7d:eb:27:18:2f:11:fb:0e:00:81:87:
                    fc:e9:4c:af:70:0a:36:ca:da:9a:b9:07:aa:a2:a4:
                    34:8d:2e:74:69:69:90:79:7c:5c:43:aa:25:45:02:
                    db:1e:ec:53:db:83:94:d3:6f:d2:c8:18:55:d3:8e:
                    c0:4e:49:9d:cf:22:c4:db:77:ab:ba:a8:e3:56:b0:
                    93:e7:f7:98:e9:19:d2:9e:d7:90:67:54:e4:28:92:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:03:7A:71:AD:F0:77:9F:BB:58:C3:67:B1:46:02:40:C3:F2:D9:F5
            X509v3 Authority Key Identifier:
                keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:07:d8:7a:98:b6:a4:92:de:e3:1a:62:3f:0c:3c:10:4e:85:
         ce:8b:2d:a7:4b:65:40:b3:53:c1:1c:5b:2c:fe:03:bf:7b:5b:
         64:41:50:ba:ec:ab:18:97:ab:10:c3:aa:e2:c6:10:bc:a1:c4:
         7e:33:8f:a3:c7:55:99:64:89:50:d8:0b:00:ed:8e:23:ad:0b:
         ca:1e:8d:09:ed:f4:38:c0:30:c4:d3:37:38:72:4a:36:2b:e8:
         d0:1d:9a:d2:17:e0:0c:f4:73:50:96:f4:9b:24:15:3a:04:e7:
         08:57:05:e9:2b:3d:17:2a:b1:88:48:2d:ef:53:67:99:59:33:
         85:bf:ad:f7:5e:83:25:62:1c:67:d6:d9:75:39:88:d5:e7:78:
         71:de:69:54:96:7f:b6:68:d3:2d:09:88:3d:66:a6:49:59:64:
         2e:9c:77:54:6b:bb:b1:a9:68:5c:23:1c:5e:b1:b6:26:d3:f5:
         7e:ec:98:55:69:3f:2d:83:c3:74:9b:e4:2f:fa:18:8c:5c:bc:
         7c:ae:13:13:6d:04:b8:94:a3:27:b6:a9:4d:36:8b:c0:a7:65:
         4b:1b:c9:d5:dc:0c:9c:6a:76:46:df:78:8f:4c:79:85:82:84:
         ba:55:ed:6e:8b:46:71:7a:f4:08:07:4b:2a:b7:bb:73:f6:e8:
         11:6f:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:02 2025 by rpki-client