Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
File:                     _PLPcoTXoDRugvN4rYMPV8OWG20.mft (raw, json)
Hash identifier:          Uiqu8y1IW3lk9g14CrhhF/IapPEDwb36wJcmeIdlQtU=
Subject key identifier:   5F:E1:56:C8:CD:76:F9:4C:A0:3F:8A:F3:DE:45:DC:12:F9:67:BC:93
Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
Certificate issuer:       /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Certificate serial:       0199239FC1F755C6DF7B23FCBE9B475A2E36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
Manifest number:          097E
Signing time:             Sun 07 Sep 2025 10:01:36 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:36 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:36 +0000
Files and hashes:         1: _PLPcoTXoDRugvN4rYMPV8OWG20.crl (hash: NOsSb6Ud/Zw2UZTi0h+pod8TT2/7Zs5NhFLBD40IX3A=)
                          2: c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa (hash: fm+w7SzhvawtVdf496aqLGV6dF6J/LTyEnyM1VppA6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:c1:f7:55:c6:df:7b:23:fc:be:9b:47:5a:2e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
        Validity
            Not Before: Sep  7 10:01:36 2025 GMT
            Not After : Sep  8 10:01:36 2025 GMT
        Subject: CN=5fe156c8cd76f94ca03f8af3de45dc12f967bc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:26:e1:96:28:1e:b1:84:b3:94:ef:a5:1e:
                    a6:50:1f:27:ee:1a:ff:22:0d:a3:94:8b:6c:54:d2:
                    01:e6:29:17:c2:1a:79:d1:0c:a0:28:0b:b7:65:ac:
                    1a:40:76:be:b5:2c:f2:f2:69:24:53:e3:bb:c5:dc:
                    6b:97:18:ac:2a:af:19:c6:81:0d:07:af:44:48:ef:
                    7b:87:cf:2b:44:70:f1:36:81:c2:89:13:d2:0b:18:
                    5b:c9:13:c6:10:f5:bd:66:b7:db:81:61:40:e4:87:
                    86:eb:90:fa:fd:4e:fb:9c:58:21:1b:9c:6f:88:7a:
                    fa:4b:35:9a:50:57:13:b6:28:72:44:bc:48:a7:03:
                    fb:dc:2f:5b:da:2f:17:16:bf:6a:b2:94:a5:9a:27:
                    70:99:42:be:72:e9:94:e5:6b:44:53:79:f7:22:25:
                    f4:e0:ff:d9:7c:d8:75:4f:c8:de:f4:57:5e:94:fc:
                    3e:d5:27:ca:c0:e1:86:18:f1:27:ac:d2:d7:20:1e:
                    bc:84:5d:d8:31:06:aa:62:a3:3e:87:1d:19:55:ae:
                    31:7f:c9:b5:36:41:00:cd:55:3f:6c:e9:1d:1f:28:
                    04:15:38:45:a0:36:42:df:f9:35:99:00:f5:46:f2:
                    7c:15:fd:5d:bb:f2:f1:df:51:41:95:20:53:f8:27:
                    4d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E1:56:C8:CD:76:F9:4C:A0:3F:8A:F3:DE:45:DC:12:F9:67:BC:93
            X509v3 Authority Key Identifier:
                keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e8:77:b6:41:25:8a:20:18:5a:d1:12:44:70:b1:51:a2:25:
         a4:ea:6e:38:89:ac:e7:43:8c:9e:a7:cf:de:c7:3a:cd:98:e7:
         fb:8e:10:f3:c9:5a:af:4a:f4:30:40:6b:07:1f:80:49:b7:52:
         b2:5e:1b:61:42:da:db:1c:cf:a0:2c:a1:63:19:7a:99:56:f0:
         d0:c1:53:bd:53:d5:2a:7c:7f:c9:36:35:72:00:39:c6:eb:63:
         ff:90:3d:91:30:61:57:71:7b:5a:f6:5b:23:bb:ac:b7:2a:8e:
         db:4a:aa:80:30:d9:55:ee:34:0e:78:d6:3f:79:da:06:cd:79:
         b6:18:7b:8c:16:3f:46:8c:bf:3d:68:c7:dd:63:d0:db:f6:4c:
         f8:b7:55:db:0c:2c:a1:d9:34:68:ae:b5:2d:92:04:20:3a:22:
         0a:d6:9b:85:82:85:cc:79:f1:41:c6:20:90:3d:93:c9:3f:7a:
         0e:34:de:6a:f6:47:7f:a3:87:fa:03:9d:d1:80:cb:69:ec:b2:
         61:41:6e:aa:1e:e9:7d:f3:1e:a9:ac:40:33:fb:64:0a:59:60:
         1d:6d:ad:f9:9b:26:6d:29:97:3f:8f:56:d1:72:53:b7:d5:46:
         c2:8f:cf:01:1b:a1:2a:24:2c:be:d2:a0:97:4c:fe:34:e1:1d:
         82:00:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:45 2025 by rpki-client