Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File:                     PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier:          mKEZryxZqzsbkL//hlKSrbsHRV51AbaXonRawtwJODM=
Subject key identifier:   41:04:73:5D:B2:88:12:28:71:50:EF:88:D6:86:F3:22:AA:54:4F:75
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer:       /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial:       01984A0A2C4AFAE71F11CC658A9AAEC1BFFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number:          0A79
Signing time:             Sun 27 Jul 2025 04:00:37 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:37 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:37 +0000
Files and hashes:         1: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: 6/QGrS7awva2faYGbvgy2EmEoQNoLLxEO7LcSL0yRkw=)
                          2: _BTZQ0zK_fvKReKxFaBu1-Vwvm8.roa (hash: IbkaaN1eobNCsZcNskJYmH0crzqKNoH6G8sKqEsCFhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:2c:4a:fa:e7:1f:11:cc:65:8a:9a:ae:c1:bf:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
        Validity
            Not Before: Jul 27 04:00:37 2025 GMT
            Not After : Jul 28 04:00:37 2025 GMT
        Subject: CN=4104735db28812287150ef88d686f322aa544f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:b7:cf:89:7c:cd:55:1b:08:b7:ca:dd:1b:
                    e0:b0:d7:1e:f9:d7:0e:64:95:36:3e:1c:f7:d8:0c:
                    05:76:4b:7b:f3:8d:f4:86:a4:4c:44:eb:76:c0:1a:
                    6c:56:e0:e8:57:50:1d:fa:e8:44:bc:25:c0:d1:c5:
                    6c:98:5c:25:2d:14:d2:1a:fe:3c:5c:3b:a4:08:c1:
                    43:85:85:c0:07:09:f8:87:c6:cb:f2:5c:04:34:f7:
                    fd:55:4d:be:c4:44:35:ca:76:97:3e:bb:d6:bf:98:
                    4d:71:b4:95:98:a2:5b:73:cb:2a:88:30:88:08:99:
                    fd:83:22:36:b3:a3:0b:61:da:24:70:32:4a:6c:3e:
                    b3:7a:06:64:63:61:b1:63:26:23:ff:04:63:aa:ab:
                    9f:f8:12:a4:0f:09:92:d4:31:87:b2:c7:b6:b1:2b:
                    ac:13:20:e3:fa:46:98:7a:60:12:ca:a3:e0:d9:37:
                    8c:89:d0:ee:36:0c:93:40:77:49:8b:35:10:84:1f:
                    3f:ba:45:90:da:09:98:0c:f8:db:98:4d:45:17:bf:
                    8a:2a:f4:ef:f6:26:33:4e:fc:fc:ce:d0:74:17:e3:
                    fc:ce:4a:9b:d8:68:1c:c5:35:22:73:22:dd:b1:1f:
                    f1:5d:4e:e2:0c:1e:09:94:c4:b1:d9:c8:9d:ef:85:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:04:73:5D:B2:88:12:28:71:50:EF:88:D6:86:F3:22:AA:54:4F:75
            X509v3 Authority Key Identifier:
                keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:2e:cd:ff:62:ba:61:17:b9:bd:a4:51:26:f6:36:43:54:
         11:12:91:e8:61:94:9a:5f:d5:e1:f9:f8:40:f3:37:70:92:3a:
         3f:d1:54:74:36:ed:bd:ae:31:9c:ae:13:a7:c4:b9:37:52:17:
         f3:fe:9b:80:7a:44:9d:b2:20:48:fc:57:ab:86:05:89:a9:a3:
         04:d2:f4:f5:71:f6:c4:d3:d4:d7:82:ad:79:1d:e7:f7:f9:2a:
         71:5c:45:d7:e8:12:a0:9e:c4:fe:5d:d0:cf:be:bb:e8:ec:af:
         42:47:fd:03:be:f3:fe:d9:d6:d6:d6:c4:e4:d3:8d:cf:b1:ea:
         18:af:d0:6e:b8:e0:eb:cd:fb:12:3b:a4:1e:34:f5:f9:58:3c:
         8b:2d:d7:7d:c6:8c:8c:a1:93:a3:35:c1:d3:6c:14:30:62:67:
         73:6b:c8:35:c3:e0:6b:ba:d5:4a:ac:bd:34:e4:45:b9:da:a4:
         6f:da:7d:a5:71:0a:0d:31:01:ca:85:26:bc:b7:e5:73:63:35:
         19:37:9d:9e:0d:9e:d1:cd:1b:6b:7d:f7:a5:fe:f6:5a:b3:8c:
         11:d1:b9:44:7f:78:66:e5:6a:c4:c7:db:91:eb:a9:a1:9e:78:
         9d:c1:87:f5:9c:1b:ec:12:0a:ac:ff:70:af:44:c4:4c:a7:5e:
         28:6c:7a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCixK+ucfEcxlipquwb/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNzc1ZTFiOWZiMGFjOTNkNTYzYmE4ZTk3MDg4NGRhNTdi
NmUxOTcwHhcNMjUwNzI3MDQwMDM3WhcNMjUwNzI4MDQwMDM3WjAzMTEwLwYDVQQD
Eyg0MTA0NzM1ZGIyODgxMjI4NzE1MGVmODhkNjg2ZjMyMmFhNTQ0Zjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZO3z4l8zVUbCLfK3RvgsNce+dcO
ZJU2Phz32AwFdkt78430hqRMROt2wBpsVuDoV1Ad+uhEvCXA0cVsmFwlLRTSGv48
XDukCMFDhYXABwn4h8bL8lwENPf9VU2+xEQ1ynaXPrvWv5hNcbSVmKJbc8sqiDCI
CJn9gyI2s6MLYdokcDJKbD6zegZkY2GxYyYj/wRjqquf+BKkDwmS1DGHsse2sSus
EyDj+kaYemASyqPg2TeMidDuNgyTQHdJizUQhB8/ukWQ2gmYDPjbmE1FF7+KKvTv
9iYzTvz8ztB0F+P8zkqb2GgcxTUicyLdsR/xXU7iDB4JlMSx2cid74X4WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEEc12yiBIocVDviNaG8yKqVE91MB8GA1UdIwQY
MBaAFDx3XhufsKyT1WO6jpcIhNpXtuGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEt
NGU1Njg2YmU2YjgyLzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEtNGU1Njg2YmU2Yjgy
LzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLwuzf9i
umEXub2kUSb2NkNUERKR6GGUml/V4fn4QPM3cJI6P9FUdDbtva4xnK4Tp8S5N1IX
8/6bgHpEnbIgSPxXq4YFiamjBNL09XH2xNPU14KteR3n9/kqcVxF1+gSoJ7E/l3Q
z7676OyvQkf9A77z/tnW1tbE5NONz7HqGK/Qbrjg6837EjukHjT1+Vg8iy3XfcaM
jKGTozXB02wUMGJnc2vINcPga7rVSqy9NORFudqkb9p9pXEKDTEByoUmvLflc2M1
GTedng2e0c0ba333pf72WrOMEdG5RH94ZuVqxMfbkeupoZ54ncGH9Zwb7BIKrP9w
r0TETKdeKGx6FQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:31:03 2025 by rpki-client