Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
File:                     Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json)
Hash identifier:          LaxHokP+nYjvBQTPt1agF0IU0Z+CQkgFHLZ+GuDOSSk=
Subject key identifier:   19:99:33:7A:DE:FC:F8:21:DA:74:6E:62:FA:27:78:CF:24:D8:31:76
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Certificate issuer:       /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial:       0199221EA7E88DCB8EBD753860BBB8F1A9DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 03:00:58 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:58 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:58 +0000
Files and hashes:         1: EWY61EBMWvIz95kZvxz3f7Ao8DM.roa (hash: hUfTdT/UdwzPCuJouTIN5MiLU84ihpYE+x77dYeKVgo=)
                          2: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: 1vQY51y8dTa5OYcq5Dyj8vAjI7b/TL3vBG9wdVnB9Gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:a7:e8:8d:cb:8e:bd:75:38:60:bb:b8:f1:a9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
        Validity
            Not Before: Sep  7 03:00:58 2025 GMT
            Not After : Sep  8 03:00:58 2025 GMT
        Subject: CN=1999337adefcf821da746e62fa2778cf24d83176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dc:8a:fb:f1:e0:fa:92:be:10:a9:9d:e3:09:
                    ff:46:8e:71:16:76:0c:9d:a1:5e:03:68:4b:b4:2b:
                    0e:0d:73:55:c1:e0:c1:35:06:44:92:54:5d:64:e7:
                    2a:e4:bb:eb:2f:96:51:0b:9e:7b:08:32:ec:31:ff:
                    f9:57:a9:be:22:df:1e:6d:03:9b:b5:c1:51:c3:61:
                    c1:07:83:ed:43:9f:2c:1b:79:46:9e:7a:1d:68:46:
                    8e:4a:30:a4:80:e2:e6:04:78:98:55:e2:95:7a:a2:
                    37:52:a9:d7:f4:53:d1:16:62:ca:f9:8e:09:21:7b:
                    99:82:72:3a:ce:fa:bb:20:05:59:48:83:ba:a5:ca:
                    e9:21:ec:f5:24:e4:22:c9:5a:27:94:d5:29:ae:ce:
                    ca:1a:cb:62:f1:f5:d4:54:29:47:71:a3:43:17:4b:
                    ed:00:83:de:4d:30:e8:f4:35:2f:85:89:a1:e2:f4:
                    02:d3:79:3e:18:9b:b5:04:3b:96:a4:6a:66:07:6b:
                    f0:31:71:63:b5:b7:28:26:cd:68:7c:ca:f6:e7:41:
                    4c:9d:a3:6d:5a:ea:1e:6b:44:10:4c:d6:17:a3:0b:
                    9c:1f:b9:9a:9b:5e:0b:1a:88:0d:66:08:18:67:4f:
                    7c:3c:ff:13:51:b9:11:04:99:4d:e5:93:69:fc:3c:
                    5b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:99:33:7A:DE:FC:F8:21:DA:74:6E:62:FA:27:78:CF:24:D8:31:76
            X509v3 Authority Key Identifier:
                keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:72:30:eb:64:14:c7:a6:c5:71:bc:a4:eb:4a:b3:18:58:9b:
         53:c8:e9:b7:c5:0f:fe:1a:5e:11:9d:01:a0:fb:2a:35:04:ba:
         cc:0f:10:80:81:d7:c5:f2:ed:b0:ce:82:df:38:c6:05:de:dd:
         ca:00:46:7e:ef:c8:fa:10:95:47:84:d5:44:d4:22:e5:10:a8:
         16:7e:f1:03:e3:cb:ae:00:20:26:d7:6e:7c:27:84:d5:d8:83:
         d3:d0:da:cb:ab:38:ad:8c:38:e1:0d:bf:77:88:fb:f9:22:e5:
         94:d5:36:39:f5:8b:a8:8e:28:60:a5:06:b4:76:73:f6:ba:ac:
         17:9d:62:ea:26:ce:38:bd:99:a0:12:73:f9:1d:56:fd:99:3e:
         78:8a:3d:cb:c1:d5:50:67:61:b4:da:2a:42:93:46:b9:a3:2e:
         e4:d3:59:37:97:a7:db:eb:4d:a7:1d:2a:82:bb:90:67:96:e9:
         f7:33:a2:61:0e:30:c4:dd:35:bd:0f:64:4e:d6:d1:6a:a8:95:
         52:5f:27:27:3c:08:3a:6a:c7:53:66:f8:64:8a:2f:98:60:fa:
         d8:96:67:c4:17:4c:50:42:cd:6e:62:05:69:56:81:ac:14:e9:
         0e:c7:6a:0e:07:0f:ed:86:5d:35:53:13:ef:f8:e7:bf:e3:63:
         2e:88:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:10 2025 by rpki-client