Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File:                     pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier:          ZAmuAxv0Qsx0Ah5/a687TuCaTZRNrQZ0dAxyk1DBmvI=
Subject key identifier:   D6:16:A6:AA:C7:0D:4B:C1:A9:C9:94:D1:59:7B:B5:CA:20:C0:25:46
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer:       /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial:       0199FDA1D1F975119C4BB090AF86A3AB66A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number:          0511
Signing time:             Sun 19 Oct 2025 18:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 18:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 18:01:04 +0000
Files and hashes:         1: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: pUIaFLpd1ZsLJETga5pC61fAoiSo7o15AziszqABt4k=)
                          2: yTZlHlMAE_3YBA7oQmF4fIZqHOM.roa (hash: lfCvg73z+0fvdagtNm9IPM2kVoIfwTGx2gcIBEuq7Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:d1:f9:75:11:9c:4b:b0:90:af:86:a3:ab:66:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
        Validity
            Not Before: Oct 19 18:01:04 2025 GMT
            Not After : Oct 20 18:01:04 2025 GMT
        Subject: CN=d616a6aac70d4bc1a9c994d1597bb5ca20c02546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:9d:dd:3b:d4:5f:46:d7:e5:25:88:39:5f:
                    36:65:3e:73:06:a9:dd:6b:95:8f:03:84:84:0c:76:
                    82:d4:82:b0:f0:65:4a:cc:ad:41:a3:eb:11:76:eb:
                    88:63:e4:05:bc:d6:d8:3e:93:e1:e7:87:56:3c:07:
                    32:2f:f6:5b:ca:c7:d7:0c:26:28:9c:5a:39:a9:a8:
                    80:0b:c1:8a:ad:15:17:c3:8a:b5:a5:c8:5d:dd:19:
                    40:a2:39:e8:8f:0e:1f:9a:63:de:65:70:5b:55:cf:
                    72:b0:91:a6:f3:36:43:48:43:20:de:d4:a7:7f:48:
                    71:b6:60:a2:46:ee:53:ed:78:3a:ee:2e:c7:0e:8c:
                    d3:0b:f7:32:a7:d4:37:ca:02:6d:38:c3:64:d1:c2:
                    98:76:88:a3:c1:46:ce:61:dc:53:d7:f0:e0:27:da:
                    3d:cd:e7:33:4f:1b:4a:f4:79:9d:ea:a4:22:c5:25:
                    84:78:b9:e4:a9:0a:03:be:e5:5d:b9:b0:1a:6d:5e:
                    74:39:df:59:c3:7d:99:47:24:62:5c:ff:79:6b:69:
                    8a:60:68:6b:1c:69:fd:eb:e7:09:a7:cc:c5:ec:04:
                    e9:87:5d:07:43:83:06:60:af:7c:f2:f9:91:04:5e:
                    7d:22:39:33:67:6d:0e:1e:28:a1:0d:b9:a4:d3:d2:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:16:A6:AA:C7:0D:4B:C1:A9:C9:94:D1:59:7B:B5:CA:20:C0:25:46
            X509v3 Authority Key Identifier:
                keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8a:28:c6:02:07:b1:7a:c7:b6:1e:d2:41:10:04:66:8c:24:
         24:32:62:b3:a8:46:da:b6:6c:f4:b3:c7:86:55:3c:0a:16:a6:
         43:6e:5c:1a:50:0a:2d:ff:7f:ee:14:8d:34:22:9f:2f:c9:6f:
         b0:04:32:4d:9a:de:ea:8a:09:c8:c8:37:73:c2:47:11:54:8c:
         e5:2b:8b:de:57:9a:9f:15:1e:7d:52:0f:08:f9:55:02:b7:fc:
         88:e4:e2:b9:b1:30:8a:9a:7d:e9:c2:e4:90:1a:f6:c9:c0:7d:
         f7:af:68:3b:1e:d7:fe:0f:d1:ea:31:c7:eb:90:4f:75:71:22:
         58:5a:35:40:b0:23:6d:c3:27:3d:ae:cb:43:c7:76:47:28:2c:
         d3:96:9b:3b:64:0e:4d:fc:20:b0:99:b8:b3:a1:7e:33:0a:86:
         fa:73:86:13:7a:97:2d:45:f3:f4:f6:02:f9:1a:bb:7c:4c:e4:
         97:de:9b:15:67:0f:6b:a5:ea:22:19:69:9c:70:96:38:78:eb:
         e9:be:5a:7f:95:ed:1a:cb:70:cc:b2:b7:b4:f8:5a:93:dd:50:
         b0:f9:e2:02:7e:72:5d:96:5d:8e:ec:ad:5e:d1:51:10:f9:9e:
         2e:31:96:9e:b8:ef:25:f2:e5:33:45:6c:51:58:fa:5e:94:6f:
         9f:46:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:21 2025 by rpki-client