Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
File:                     PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json)
Hash identifier:          SzVKH+ALulKVJ+8zgOnmT+pXMWUlO96fvhH5SUMT6/M=
Subject key identifier:   7D:8E:9B:A0:78:80:F2:ED:75:E3:5A:7C:E6:18:F9:5D:E8:E0:D1:96
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Certificate issuer:       /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial:       0198D6605450B23693E3A829BB79BC187C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
Manifest number:          064A
Signing time:             Sat 23 Aug 2025 10:01:33 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:33 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:33 +0000
Files and hashes:         1: NtKyDgbGesEe8awF15SqP0_3q5E.roa (hash: 5/QwTKhvWnKsc5Bc5M0m9rQLZKRH4InU93sknSCwHzs=)
                          2: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: QL3ZivamUXY0r60fEtSck2fOrGuF2Xhmjm99AiUYGA0=)
                          3: WNJuWEXBIip_f5G2ObX5HLas-6I.roa (hash: boUS884QFMK9V7SQvxUAnalpgEFhwVVzKbrcjkzFqDQ=)
                          4: hUje3HFTF6f1DLkrPmJro0BJv84.roa (hash: kR65nTDvmrqvVF+VEljMTGu7vMzX0EU8UFNtyZDk3w8=)
                          5: i63lT8gZ80ZQnoxkIIq3_XH-qGo.roa (hash: u7r5j40jao9jpdMvyg5KQYNAFcKXMkC3d+QE0v1EduY=)
                          6: ibMRX0UskUZ1fKV63OderSyFGp4.roa (hash: eA4MV5O6XQVzVYEe9jvmxnmU146aKwd4Gt1iGOJqAdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:54:50:b2:36:93:e3:a8:29:bb:79:bc:18:7c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
        Validity
            Not Before: Aug 23 10:01:33 2025 GMT
            Not After : Aug 24 10:01:33 2025 GMT
        Subject: CN=7d8e9ba07880f2ed75e35a7ce618f95de8e0d196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:1f:0c:f7:79:f2:03:e6:41:22:51:40:9d:
                    b7:46:3d:26:6b:73:47:8c:52:93:68:64:43:0b:30:
                    f6:c7:0b:2a:27:e5:75:33:2d:73:e6:c9:cc:ee:f1:
                    36:eb:78:c7:fd:e9:53:00:b9:35:cc:63:00:56:67:
                    57:cc:84:6d:5e:b3:01:6a:dc:7e:b5:6c:35:8d:20:
                    38:17:2d:a0:92:27:e7:07:a7:09:77:45:5a:f6:e4:
                    54:8b:c4:5f:4a:3d:91:16:26:a2:89:5e:e2:9b:ad:
                    3a:75:03:be:bd:e3:07:6b:c4:37:31:3d:ae:cc:87:
                    9a:83:aa:ca:41:b5:ff:2b:27:b5:ea:f0:7a:3e:81:
                    b4:f4:d7:0a:2e:21:d3:51:b7:ab:24:64:98:80:15:
                    95:89:a2:54:cc:ba:9f:b0:1e:2e:86:b3:33:56:c2:
                    e3:68:86:8b:74:76:fc:20:c5:89:fd:4a:b2:1f:39:
                    46:9e:99:0f:1d:e9:26:dd:fb:e2:cf:f8:05:38:52:
                    3e:2c:3e:e8:d5:f6:91:0f:68:28:80:9f:c3:26:46:
                    0b:fd:8e:db:6c:95:e4:4f:40:f5:6e:ab:63:0e:f7:
                    fc:c0:69:d7:0d:bf:a2:3a:07:b4:ac:78:af:d9:c6:
                    86:e7:e0:23:aa:45:61:29:45:0b:75:bf:1f:f0:43:
                    8d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8E:9B:A0:78:80:F2:ED:75:E3:5A:7C:E6:18:F9:5D:E8:E0:D1:96
            X509v3 Authority Key Identifier:
                keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c3:e7:fc:d4:70:a1:84:2b:f2:1a:2e:7c:ab:ed:d1:d9:5d:
         9f:d5:89:3c:03:b9:de:fb:3e:6a:95:05:60:67:a8:3b:7c:7b:
         92:0e:73:ef:3c:08:64:92:00:65:a3:61:1f:11:fe:b2:71:ff:
         25:29:1e:e4:60:35:23:5e:06:f6:ab:e7:68:47:86:fd:c2:c4:
         56:53:2d:09:52:a0:78:90:cb:1a:3e:49:fa:74:52:3d:b8:e2:
         82:fe:fe:90:c0:5f:4c:aa:4a:e4:ff:33:82:dd:39:c0:6c:f0:
         f7:11:7c:47:0e:bf:6a:82:9c:ee:62:b2:9d:54:45:96:2e:5b:
         fb:74:2d:7d:04:a9:17:e2:01:b1:64:38:72:03:30:a1:a9:c6:
         2e:e9:4b:89:4d:7a:95:39:6e:90:77:af:bc:c6:20:9a:22:bf:
         db:ea:65:fc:36:50:f1:1d:3f:5e:33:b7:79:08:98:6f:12:d1:
         4b:d9:1f:68:35:23:d1:44:4a:05:ff:e1:29:e1:a6:c5:a4:11:
         e2:19:93:62:d9:38:c5:1a:ef:55:11:7a:53:de:6a:07:e8:c9:
         87:fa:b7:bf:aa:b7:59:4b:c2:bf:9c:9c:d8:fb:54:e4:1f:c8:
         43:e6:4f:e7:d5:df:d6:76:1c:20:e1:4a:6a:4b:09:03:7f:2b:
         c1:02:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:23 2025 by rpki-client