Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
File:                     PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft (raw, json)
Hash identifier:          4O4IixUSPyi9v1UXThbLCQLdN+8x9dAMzLmk/TBaWYk=
Subject key identifier:   71:6C:CB:A6:3B:E4:C3:19:A0:57:44:81:A1:80:A2:C1:EB:F4:32:8B
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Certificate issuer:       /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial:       01984A77A5FE6395F9613DA01C5FD2C86EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 06:00:11 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:11 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:11 +0000
Files and hashes:         1: 3-Ja7oUVjGguwh6QaF2yeAfwhyM.roa (hash: nrUNLtMMNN8x4oqm05IG63Gk5IknemEKbhNaDnkCTrY=)
                          2: PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl (hash: vzaB2qTSLGkiye8GB5hqT2IIoW2fIQUoOhVTrZsc5Sg=)
                          3: QvOFAf8FV-u4BHZ7nVnLpgpZ8-o.roa (hash: xTswaXIuzP+4J3jL8v5PcwUSYu10jxnq7ts41cuAvZE=)
                          4: adzPWtlHDTvsggmKWbe4TnrcvIk.roa (hash: n14P1Q6Wx2eq+iqMHqpfTj36nMIIclkcTcwOpIeBWTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:a5:fe:63:95:f9:61:3d:a0:1c:5f:d2:c8:6e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
        Validity
            Not Before: Jul 27 06:00:11 2025 GMT
            Not After : Jul 28 06:00:11 2025 GMT
        Subject: CN=716ccba63be4c319a0574481a180a2c1ebf4328b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:56:d0:cb:44:be:61:59:bc:cb:92:79:f0:
                    0e:66:3c:1b:5f:5e:9f:72:ba:82:56:7b:51:b7:7f:
                    46:7f:83:f8:b3:25:93:27:e6:ec:56:c0:fb:80:cd:
                    b6:fd:2e:cb:bc:5d:fa:bc:81:18:cd:22:ea:53:84:
                    6e:8b:df:f5:0a:37:c2:6b:6f:70:74:ff:22:78:9b:
                    18:2b:96:46:1c:bb:01:d7:6a:de:38:a0:0f:f1:06:
                    f0:d9:97:90:48:61:eb:db:fd:7f:73:1a:30:f4:49:
                    b0:0e:17:6b:0c:dc:89:35:7e:7e:9a:7f:9d:3a:67:
                    e2:5d:9d:f8:0e:82:10:06:c5:d8:aa:4c:fa:f9:72:
                    11:65:2d:ca:57:fc:11:c0:95:d3:66:c3:72:bd:a2:
                    5a:1a:44:9c:0d:a0:91:ed:0c:9b:01:80:8a:2b:dc:
                    8e:3a:3c:9c:83:71:fd:96:34:b2:2f:21:17:50:23:
                    65:ef:29:99:54:d9:dd:ef:0a:b2:e9:aa:fa:ec:3e:
                    d9:56:74:7b:53:09:ad:3b:0b:5d:58:2c:02:32:e4:
                    d4:ed:0d:c8:04:16:34:e4:5e:2a:c6:56:96:6a:27:
                    83:da:e9:b6:17:68:90:18:8f:2e:ba:e8:fa:9d:81:
                    a0:a7:f5:14:5f:b0:02:40:55:70:50:b0:8e:67:82:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6C:CB:A6:3B:E4:C3:19:A0:57:44:81:A1:80:A2:C1:EB:F4:32:8B
            X509v3 Authority Key Identifier:
                keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:34:a9:c1:f1:dd:80:55:12:b4:1c:c6:4c:a7:72:b6:c2:5d:
         67:35:41:41:a9:77:38:b7:7b:1e:c3:51:d9:7a:aa:8c:6b:8e:
         d3:e1:0c:f5:c6:4e:75:19:44:a0:3d:19:29:ce:a4:c0:59:10:
         00:d0:d7:c8:6b:21:7c:e1:ed:7d:59:54:0e:4e:7a:a2:8d:de:
         27:bb:43:ec:5a:8d:42:95:90:d6:e5:4d:32:27:f8:e3:08:3e:
         20:fa:6d:56:83:49:63:98:6a:91:a7:ef:1a:8c:b6:79:c9:89:
         0c:0e:e2:34:f7:60:b3:77:3b:aa:14:38:13:dd:04:6f:55:3a:
         87:b2:b1:30:f1:fd:3f:29:e6:b0:a1:fe:e2:c2:ac:81:70:f7:
         4e:98:d4:b8:11:f7:5a:79:9c:d6:c0:f4:29:6e:85:31:f2:58:
         58:bb:31:f3:e7:8e:43:e7:cf:3b:9e:ac:2d:65:72:05:3a:2e:
         b9:23:af:ad:d5:91:50:94:35:ac:34:56:0a:b4:55:75:d9:5d:
         9d:72:d2:13:48:6d:a5:21:a6:01:96:aa:01:b2:45:ee:9a:18:
         0c:28:c8:9d:9e:74:94:31:1e:80:a4:b8:a0:07:e4:49:7e:59:
         58:5e:f4:45:ce:54:b5:f2:0f:e6:fa:a5:51:35:4d:89:25:51:
         36:5a:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:57 2025 by rpki-client