Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File:                     PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier:          WLk0WT8kRb+bkzK9LTG0DhMuIKv2vD39pAEH3NJJqmU=
Subject key identifier:   4F:98:47:92:6E:3E:79:9E:95:78:AA:6D:5F:9E:00:A7:E5:61:34:46
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer:       /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial:       0199FC587066B6987E198914753F3FE2D1CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number:          119A
Signing time:             Sun 19 Oct 2025 12:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:18 +0000
Files and hashes:         1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: 077JsDMiODRmcBvD33tk8jn7P7aYwKq6aQUoqofuFSE=)
                          2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:70:66:b6:98:7e:19:89:14:75:3f:3f:e2:d1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
        Validity
            Not Before: Oct 19 12:01:18 2025 GMT
            Not After : Oct 20 12:01:18 2025 GMT
        Subject: CN=4f9847926e3e799e9578aa6d5f9e00a7e5613446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:86:d3:25:b9:43:3a:84:c4:27:01:94:74:
                    7d:38:95:b3:94:33:bc:88:f4:bf:5d:09:f3:82:42:
                    67:f7:22:d1:93:0f:aa:1a:cb:d5:79:24:44:92:47:
                    c9:de:6f:4a:2a:3b:47:22:23:a8:0c:d6:25:d7:ae:
                    f4:c8:e1:33:72:8e:c0:12:b9:f7:f0:3f:6e:49:10:
                    24:0d:62:79:bf:dc:9b:f7:dd:f2:72:6f:b7:b5:7d:
                    3b:0d:fd:d1:ef:91:86:36:21:23:22:86:c3:50:57:
                    dd:49:ee:36:3d:3a:ea:27:28:63:0e:79:9a:dc:12:
                    c6:06:5b:f5:37:66:88:e3:f0:cf:02:ad:47:8f:a3:
                    bc:94:08:fd:b5:85:d4:65:56:e2:18:25:69:a3:94:
                    68:84:95:71:a8:2c:f0:fd:db:7a:40:cf:2c:fb:bb:
                    b4:66:13:8c:b1:ef:58:d2:d8:07:3d:6d:48:87:94:
                    a8:60:fe:15:11:14:d2:37:14:5c:d8:33:af:dd:c9:
                    bd:a2:d2:10:36:30:71:32:86:b8:17:3b:1b:56:0c:
                    ca:95:1f:ec:fd:75:00:6c:a3:4f:bc:9a:7a:79:7b:
                    ab:73:fb:4d:ac:ea:d3:2b:48:ca:f8:8f:f1:60:6b:
                    1a:12:11:7f:ce:2e:6c:52:b6:34:07:0b:87:92:44:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:98:47:92:6E:3E:79:9E:95:78:AA:6D:5F:9E:00:A7:E5:61:34:46
            X509v3 Authority Key Identifier:
                keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:95:80:02:ce:03:47:4c:32:23:94:84:ae:4c:be:ec:1e:38:
         f7:26:db:2b:82:f2:55:65:04:d5:8e:5c:aa:27:97:14:98:20:
         da:1e:69:dd:a0:28:8a:4b:eb:31:40:40:25:27:47:28:f8:64:
         ba:47:3f:0f:dc:ae:b9:0e:db:1d:8a:ac:53:1e:17:5c:6c:27:
         8e:4d:37:4c:fc:4f:21:e4:ab:52:df:a0:90:ef:b4:7d:3c:a8:
         29:dd:f3:68:d1:93:12:ea:f7:0b:56:60:3a:4f:b1:03:5b:21:
         f5:ee:af:e6:f2:2f:f0:f5:32:0f:65:ab:08:ed:e6:7d:b9:9c:
         4d:1d:2a:15:8f:74:0f:f9:ca:52:30:93:32:0a:b4:11:17:ef:
         c0:cb:d9:e5:13:25:bc:fb:92:ab:8e:5f:9b:cb:4b:62:dc:03:
         68:9d:93:58:68:a2:91:5f:87:98:11:5e:9d:7f:95:8f:52:55:
         d8:b3:b7:13:46:a0:5d:43:88:92:6d:1d:33:bc:c7:21:dd:ff:
         ed:c2:83:9f:8c:6c:36:44:70:4f:d4:38:50:78:f0:fe:a4:60:
         7a:82:c6:77:20:ca:ce:bc:12:e9:16:6a:05:51:ed:2b:ff:b5:
         99:66:90:38:ca:b4:85:32:f8:c9:4c:9c:a7:1f:b4:c3:77:16:
         29:2b:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:29 2025 by rpki-client