Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          l3630AaTOvz/6T6+nP+iR1tknHxXbqfi4EPF0Vt2Cvc=
Subject key identifier:   E6:2C:BC:C4:AD:9F:40:54:52:67:69:DE:1E:EE:0F:74:D5:3B:5E:53
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       019A299E758ECC03B0A316400FC65CB4B649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          16FA
Signing time:             Tue 28 Oct 2025 07:00:41 +0000
Manifest this update:     Tue 28 Oct 2025 07:00:41 +0000
Manifest next update:     Wed 29 Oct 2025 07:00:41 +0000
Files and hashes:         1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=)
                          2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: PpbO6voFo4ZAdlxfsUovPmGtCumvO0Z7f9Q4Etxg0NM=)
                          3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=)
                          4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=)
                          5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:9e:75:8e:cc:03:b0:a3:16:40:0f:c6:5c:b4:b6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Oct 28 07:00:41 2025 GMT
            Not After : Oct 29 07:00:41 2025 GMT
        Subject: CN=e62cbcc4ad9f4054526769de1eee0f74d53b5e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:7f:7d:ea:d5:c5:ce:d6:66:04:b7:6d:ba:
                    6f:de:5b:bb:5d:94:cf:3c:84:be:79:38:3d:51:a2:
                    de:96:19:31:d1:4e:74:df:58:49:fe:6f:48:25:cd:
                    3b:ba:ab:2e:af:ee:3e:5a:64:e6:2c:46:1e:94:22:
                    27:55:40:c9:f3:bc:a2:d8:13:16:51:2a:ba:60:3e:
                    ae:5c:53:64:63:22:2a:b0:34:a9:27:30:e2:65:b9:
                    7a:a8:43:3f:05:ca:6e:a3:85:6a:41:29:ab:d2:7b:
                    f7:22:66:a7:86:84:ef:c3:de:aa:dd:9f:e3:a4:e7:
                    72:db:02:9c:82:26:7b:09:f9:09:ad:ae:a5:7c:52:
                    0e:e0:bf:cd:8f:e0:b3:de:b7:3c:6d:5b:91:08:00:
                    26:a1:03:99:d0:46:52:ff:1d:73:47:b2:c7:94:3a:
                    19:f3:69:10:51:2d:5d:c7:92:60:aa:e4:9d:6a:aa:
                    f2:61:9f:9c:a3:b9:5e:b0:16:06:b2:fe:c0:8a:32:
                    a7:cf:51:87:f6:1d:cc:cf:81:91:b0:ea:31:e4:c5:
                    76:c3:ae:fd:4d:1c:9e:95:12:72:12:35:23:e3:32:
                    a6:00:ba:b5:b5:41:4d:ce:a3:c4:83:e9:63:06:aa:
                    da:3e:2f:6a:72:87:ed:5f:b7:d7:66:0b:72:82:b3:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2C:BC:C4:AD:9F:40:54:52:67:69:DE:1E:EE:0F:74:D5:3B:5E:53
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f1:a2:dd:04:ea:b2:ee:28:01:e3:3c:b1:f8:b9:6d:fe:bd:
         81:b9:0c:6d:1c:7f:b8:42:81:64:48:d0:71:30:4d:f3:36:66:
         d9:63:1c:67:6c:47:4e:f4:86:69:17:95:1a:05:c4:42:de:8e:
         9d:2a:1c:6d:9a:7b:dd:8a:95:eb:e8:fa:75:d2:77:78:b1:c0:
         93:22:a8:80:8d:ad:22:70:62:3f:d9:ec:20:19:98:49:e7:b6:
         3c:c2:b4:48:07:43:be:96:f4:b9:c1:04:6d:4d:3c:6d:12:77:
         f7:51:86:8e:7b:bd:c5:67:f2:be:f8:d5:fa:68:49:22:7e:6b:
         bf:ca:59:81:1a:f9:85:7c:e7:69:b6:9a:a5:2f:13:e5:24:46:
         41:a9:2c:e6:82:9a:22:73:7a:0c:d3:1b:ef:de:9f:b2:cd:99:
         35:aa:37:ad:d7:6d:e4:5f:4f:9c:6c:bc:eb:55:97:93:99:f5:
         f0:2d:af:e9:bc:6c:85:65:0f:0e:cf:da:96:c7:96:7d:21:62:
         34:72:1e:4e:e1:aa:e2:6c:33:92:6f:8c:79:c2:9b:67:87:51:
         ef:aa:d5:bd:1c:6f:32:1c:05:5e:1f:39:f6:4b:33:b3:48:9a:
         42:45:85:d5:2c:55:1c:9f:6f:89:f1:4c:62:3a:26:f9:0f:72:
         90:d8:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:17:52 2025 by rpki-client