Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File:                     PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier:          nxWJFI0yUIJ1Oo0sKeiYl5tSoHlVDXwb1r/mHyuziR8=
Subject key identifier:   14:9F:2B:93:E1:48:DE:9D:D0:48:73:04:1E:BD:24:C9:8C:43:EB:D9
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer:       /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial:       019922FA28FAFDAAC0FD69349E21D6A12C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 07:00:43 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:43 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:43 +0000
Files and hashes:         1: 3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa (hash: bNvleSp/4QB52V4DZ5fxsf4u+utsXgrzdigeABa48Cw=)
                          2: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: k9ZdY4MGgrJ8rcul9QWuQagtheJYQ1Y6P1FYOLXnQr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:28:fa:fd:aa:c0:fd:69:34:9e:21:d6:a1:2c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
        Validity
            Not Before: Sep  7 07:00:43 2025 GMT
            Not After : Sep  8 07:00:43 2025 GMT
        Subject: CN=149f2b93e148de9dd04873041ebd24c98c43ebd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:bd:3d:d3:c6:63:17:ac:f0:82:16:b8:9c:
                    0d:ab:29:3c:7b:39:57:a4:06:5d:4b:db:b9:73:36:
                    d0:71:7d:fd:3a:a2:30:eb:98:a0:ad:74:b1:be:bc:
                    b9:e1:38:ea:07:e5:a4:ac:13:73:22:ad:a3:97:fe:
                    a8:fa:50:c6:65:09:ae:0f:ee:a8:12:87:b6:95:aa:
                    30:02:11:39:fe:42:59:84:1f:c5:67:8c:79:54:57:
                    47:3a:e0:4f:f4:8f:50:b6:33:e2:e3:7e:84:af:58:
                    4c:b0:ff:7c:56:b3:28:ef:4c:5f:73:78:a7:e7:6e:
                    d9:e7:1f:f7:ab:11:d9:34:14:2e:1e:00:3d:e5:84:
                    70:3b:dc:f4:1a:ad:69:7e:b3:e5:1d:20:44:b6:84:
                    e3:f4:ba:2a:93:fb:0c:eb:36:3c:d4:f3:89:83:1b:
                    17:6c:9d:55:d8:c5:d3:bd:68:ec:32:ee:34:7a:f7:
                    cb:cb:d8:26:19:17:5a:91:25:ec:58:a0:00:95:b1:
                    97:b7:a9:e0:c9:a4:15:a5:3a:b7:a0:9f:9e:f5:ac:
                    80:6c:6b:30:31:c1:96:dd:e6:ab:8d:a6:5c:63:da:
                    4e:06:38:72:29:f4:69:35:e2:6c:18:ce:84:30:ec:
                    8c:99:78:47:41:10:14:b9:fe:ac:b2:b2:61:8b:49:
                    ac:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9F:2B:93:E1:48:DE:9D:D0:48:73:04:1E:BD:24:C9:8C:43:EB:D9
            X509v3 Authority Key Identifier:
                keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:dd:ce:cb:a9:4c:f1:b1:d6:ed:e5:04:86:67:dd:02:12:f5:
         c9:50:82:d5:c4:65:02:fa:b2:f7:3d:a9:ff:64:46:3b:a5:38:
         0b:c1:31:43:a6:08:72:f5:4f:0d:f1:82:6c:1d:21:b8:88:f7:
         ad:4d:96:ac:6c:98:53:63:49:11:80:73:b4:f8:94:bf:d6:0d:
         70:4e:2c:0e:4d:de:fc:af:a5:05:58:c8:1f:c5:4b:45:71:47:
         ef:82:be:70:ed:3d:b8:08:fd:48:5f:dd:dd:f5:3a:44:80:42:
         7d:20:76:3e:5c:b4:fa:f1:d7:0e:1e:21:8b:3b:2a:65:15:58:
         70:c9:da:ce:a7:97:c6:d8:f1:14:31:41:db:28:25:9a:b2:c3:
         6d:d9:7e:bc:f6:61:30:de:a1:d2:59:fd:0a:df:76:06:9d:40:
         8a:3c:a8:f1:11:c3:22:d5:4f:a0:ad:80:f0:0e:c6:8b:12:51:
         77:e1:ba:74:43:fc:fd:0c:d3:eb:e3:4e:e1:ac:04:08:0e:6c:
         89:c8:35:36:c6:46:9d:52:c2:60:b7:0e:d1:4b:55:df:8b:1d:
         85:5a:fd:be:77:ab:15:45:0d:70:9a:b3:d4:11:c8:be:30:08:
         25:5b:9f:bf:72:c3:cd:81:9d:54:b3:b8:a6:e3:0b:de:ca:27:
         ab:24:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:30 2025 by rpki-client