Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File:                     PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier:          F+JQR3nOv+AcYF70AiC/IbyaUxcTT1VeH6I/Xw2/M+c=
Subject key identifier:   BD:8D:28:8F:F4:E6:76:63:FD:D6:02:EA:B7:13:E0:54:AB:FD:86:8F
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer:       /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial:       0199161A9986112CCC7B4BB836DB85DE2ABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number:          0A77
Signing time:             Thu 04 Sep 2025 19:01:05 +0000
Manifest this update:     Thu 04 Sep 2025 19:01:05 +0000
Manifest next update:     Fri 05 Sep 2025 19:01:05 +0000
Files and hashes:         1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: FdiohLdfRzeFRxQkf2tbSTHQ90esK8oHTk5tAC3O3Qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:1a:99:86:11:2c:cc:7b:4b:b8:36:db:85:de:2a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
        Validity
            Not Before: Sep  4 19:01:05 2025 GMT
            Not After : Sep  5 19:01:05 2025 GMT
        Subject: CN=bd8d288ff4e67663fdd602eab713e054abfd868f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:08:00:f9:a7:e7:bb:26:4f:f6:40:4f:b2:
                    b0:0c:be:de:42:b5:d5:68:78:9c:21:7a:28:0a:cf:
                    24:d3:e7:78:8e:bd:92:48:8c:a9:71:1a:3a:a6:bc:
                    74:40:f6:32:86:c2:25:b0:10:27:1b:a3:19:e0:29:
                    5c:fb:c2:57:98:ec:53:3f:f5:94:1c:f7:89:1a:19:
                    c5:71:1a:55:d2:ea:23:24:82:5f:a0:85:dd:1e:17:
                    6b:08:95:c4:e6:d8:60:dc:76:79:10:dc:cd:c2:a6:
                    64:38:c1:37:ed:0a:f3:6d:17:e6:a0:6a:9c:08:ce:
                    d6:94:8e:da:4b:b3:df:8e:e3:5e:90:a8:de:8b:9e:
                    69:af:ae:97:5e:50:de:ea:4a:f1:dd:ac:1a:d4:6c:
                    c0:62:ba:10:e7:9c:12:be:ac:a5:a4:4b:3c:a1:6e:
                    cc:66:74:48:c9:28:35:23:30:b9:8e:fb:21:71:c7:
                    5d:8c:1c:a0:3a:18:82:9f:0a:76:f8:6b:9c:28:c9:
                    ab:16:18:af:84:0d:8f:22:92:a6:39:60:49:80:8c:
                    42:44:b9:4d:99:cb:b7:66:c4:74:93:c2:4a:7b:29:
                    54:13:87:a4:d1:ee:56:93:18:73:55:b4:01:ac:5a:
                    d1:a3:31:65:9b:36:aa:b4:b0:11:7e:7c:00:a2:92:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8D:28:8F:F4:E6:76:63:FD:D6:02:EA:B7:13:E0:54:AB:FD:86:8F
            X509v3 Authority Key Identifier:
                keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4f:d7:71:76:d0:99:23:43:9b:eb:69:81:1b:2a:79:77:96:
         b3:6c:09:2d:1e:6a:60:7c:6f:95:50:0c:f1:e9:0f:71:39:ec:
         d5:09:92:d3:bb:af:0e:c3:91:8f:64:f2:f4:ac:34:53:50:63:
         0c:bc:e9:14:2d:60:27:8d:a7:37:61:12:71:3d:60:48:ae:3e:
         d4:a9:91:2d:4c:7a:27:b8:c1:2d:27:74:1a:57:21:17:60:71:
         ae:c0:f6:b2:0d:1d:53:0f:95:fc:00:ab:df:f0:5c:76:5a:b0:
         b5:cf:01:ab:8f:8a:06:54:46:0c:7a:9d:d3:44:ce:d2:9b:5f:
         5a:70:f6:9d:42:a6:e8:cc:3b:43:6d:30:c2:70:12:a9:98:4e:
         d6:d7:bc:29:d7:ff:64:cf:e8:2c:b7:ba:a1:63:fa:05:5a:ba:
         37:dc:cd:0c:3f:8f:b6:d8:80:ae:69:03:fa:f0:32:25:fc:4c:
         38:75:9f:7f:69:d4:26:55:1a:f6:13:e5:68:2a:c2:c2:1a:2c:
         bf:a7:8a:7e:d8:49:7d:55:b4:5e:fd:b2:88:fd:0e:64:02:4c:
         b1:c2:2b:f3:94:5b:b2:24:05:c4:9c:81:78:e8:08:3b:67:28:
         94:03:01:fa:e0:7b:e6:1f:19:8f:b6:e3:b7:b9:83:c7:11:5a:
         8e:70:e8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:03 2025 by rpki-client