Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File:                     PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier:          DGe1WSipY32r4Kxp/9JlFUbnNysIv5ff6fvlwIY6OB8=
Subject key identifier:   76:68:6A:DD:C2:44:09:8C:98:BD:61:B2:F9:A6:0E:CF:E0:FE:B4:8E
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer:       /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial:       019930B5BB9E9E0DBDA7C9C0AAB4B827DB8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number:          0D87
Signing time:             Tue 09 Sep 2025 23:00:40 +0000
Manifest this update:     Tue 09 Sep 2025 23:00:40 +0000
Manifest next update:     Wed 10 Sep 2025 23:00:40 +0000
Files and hashes:         1: 1-PRouHcN36iLzwy9uNqLaIiV2X0.roa (hash: 4hehSvfv8sJqIC+vHja2uEOG+73HXBFbIDrIN8bH3vg=)
                          2: 67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa (hash: Iy7s2Aw6gINY7MrIIhsJrkKAANHoHyCQ2Dm8An5q6ps=)
                          3: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: i/WXHFrt0vC6HePeFppvhihlFI9VcGM16Zqy3WBXiAs=)
                          4: rTI3MC_cflVKmz4QHcC39TCJNIM.roa (hash: Gn7Y1Iho0e2nKKiZXGFb+cFXQIXgua4De8STjxaheIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:b5:bb:9e:9e:0d:bd:a7:c9:c0:aa:b4:b8:27:db:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
        Validity
            Not Before: Sep  9 23:00:40 2025 GMT
            Not After : Sep 10 23:00:40 2025 GMT
        Subject: CN=76686addc244098c98bd61b2f9a60ecfe0feb48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:80:a2:49:10:24:d1:71:77:a8:00:bd:23:
                    d6:4f:8f:ce:e0:66:33:72:63:e1:32:37:d0:ea:12:
                    28:1f:df:55:83:2e:97:fe:c1:f9:c1:64:7e:68:ac:
                    7c:bd:be:38:7c:8c:82:02:46:f2:36:cd:1a:86:85:
                    8c:57:72:0d:95:cd:4f:f5:90:fe:17:9c:37:9a:1c:
                    fb:14:95:9f:fd:44:cc:f5:97:94:12:8c:ea:2c:d4:
                    fa:5e:71:18:9e:39:5f:9e:f5:6f:cf:63:e2:1f:80:
                    ff:91:0d:48:54:0f:50:98:08:f6:0e:27:fb:d4:3a:
                    f4:14:56:3e:0a:97:5c:a2:7d:8e:6b:16:64:49:8c:
                    7a:6e:87:bc:18:59:40:42:4b:94:d2:1a:2b:b6:de:
                    df:dc:43:b8:19:25:03:a5:71:2c:ed:0b:61:eb:97:
                    fd:6e:a5:17:78:e9:a0:6c:f1:e8:5b:12:b2:ff:a3:
                    c7:18:b1:90:ff:ac:f4:4c:4b:59:9f:e1:49:af:be:
                    5a:36:1e:11:95:fb:ff:ec:52:d8:3b:79:77:4e:00:
                    ba:7b:37:aa:21:69:05:a1:7e:12:f9:5a:9f:60:81:
                    7f:b8:0f:06:5f:81:8e:ce:6c:6b:6f:23:b7:db:d2:
                    e7:1b:e6:28:ea:07:3c:08:4a:c9:75:e8:11:3e:3f:
                    27:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:68:6A:DD:C2:44:09:8C:98:BD:61:B2:F9:A6:0E:CF:E0:FE:B4:8E
            X509v3 Authority Key Identifier:
                keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:aa:f9:ee:88:1d:0f:b3:f9:90:85:18:e7:49:6e:d7:34:
         e5:26:a4:d4:68:6e:03:1a:f2:27:fb:b4:0d:79:d4:40:b5:86:
         88:f2:6b:e0:30:36:cf:e0:8f:77:b0:e9:c5:f4:4a:bb:6e:aa:
         8b:b7:59:e6:e8:19:4b:67:d7:d4:5e:40:04:21:23:30:18:60:
         24:16:eb:84:ca:8e:24:26:f2:77:e5:de:e3:5d:e0:f3:78:6d:
         d2:ee:fb:04:9e:bd:fa:90:19:8b:bf:a1:2f:96:83:84:28:4a:
         3f:7f:fd:01:f3:ac:74:9c:55:b7:88:56:9c:ad:2c:e3:0b:be:
         39:7f:eb:68:9c:a2:27:28:42:5a:db:b3:7c:b2:c4:55:f8:28:
         2d:dd:1c:c2:65:a5:d3:42:b8:d4:f0:a9:1f:51:00:dd:45:bd:
         a2:7f:ae:58:2c:03:73:52:50:8f:c2:14:21:0e:29:00:5b:8a:
         2f:75:f3:84:44:08:02:6e:f7:de:18:50:79:56:5e:e9:ea:25:
         97:16:a7:f5:6b:a4:06:82:e6:2f:14:a3:c4:73:16:5f:05:10:
         de:fd:a9:58:92:27:6b:3f:ef:a5:35:1e:66:bc:c6:34:ef:02:
         46:d8:2a:16:1e:ed:bc:bd:dd:c2:12:46:b3:4d:da:7e:a2:db:
         29:8b:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:49:00 2025 by rpki-client