Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
File:                     Ph_ROPEC19yxWDtElBAvD-WH5F0.mft (raw, json)
Hash identifier:          un6sWEhYUXHFS+2fCEs3EDgPNWPNgDBjdsrMPzH1cTA=
Subject key identifier:   2C:8B:53:52:05:89:25:D2:73:7A:92:E3:3A:09:F9:44:04:B8:60:0F
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Certificate issuer:       /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial:       019933EE1BD4AB76F609BD4AC80F7BFA1CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
Manifest number:          167D
Signing time:             Wed 10 Sep 2025 14:01:06 +0000
Manifest this update:     Wed 10 Sep 2025 14:01:06 +0000
Manifest next update:     Thu 11 Sep 2025 14:01:06 +0000
Files and hashes:         1: Ph_ROPEC19yxWDtElBAvD-WH5F0.crl (hash: 2Gjm25RK5fhMN7D1HYJcyOkmcamhTa1M6gq3zSZlbcA=)
                          2: wBeey_3DAfmS3bVpXKczcJjM4cE.roa (hash: 0BXIC9Ywwqhs3eAEJFqVmWCSiRTOnC7ial/YIuKbIQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:ee:1b:d4:ab:76:f6:09:bd:4a:c8:0f:7b:fa:1c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
        Validity
            Not Before: Sep 10 14:01:06 2025 GMT
            Not After : Sep 11 14:01:06 2025 GMT
        Subject: CN=2c8b5352058925d2737a92e33a09f94404b8600f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:3d:5d:5c:b2:38:d6:37:07:76:98:28:91:
                    d0:32:f7:e9:04:d7:fb:44:6c:f7:74:dc:16:6a:10:
                    6a:25:c7:56:05:3f:99:ad:1a:da:d9:aa:61:a1:98:
                    d9:d3:9b:29:8c:48:86:50:a0:2a:f9:c1:d6:12:33:
                    02:78:bf:a4:19:9b:b0:3f:59:66:0d:9e:d8:a7:af:
                    0f:92:08:28:07:ce:95:be:c7:0c:ff:e2:32:d0:8f:
                    f8:b9:4b:a5:22:52:ea:8e:aa:ba:67:19:ca:22:93:
                    b9:27:2b:e1:fa:4d:df:ef:75:9b:d1:80:79:89:69:
                    c5:82:16:54:a4:b4:6a:48:6d:ae:d1:53:3f:c0:46:
                    71:24:bf:75:77:ce:f7:98:08:dd:3c:9a:82:b5:01:
                    3b:7f:d8:66:86:b8:22:a8:b0:f0:51:96:27:4e:e6:
                    07:21:93:44:c3:e7:44:24:b0:4d:ba:6d:93:42:ad:
                    a8:d4:9d:b4:64:bd:38:72:ef:60:bd:37:05:0c:2f:
                    a7:5b:f3:53:48:6c:e2:9f:9d:c9:b8:5f:eb:7d:14:
                    53:93:a4:9b:bc:d8:9d:d8:73:77:9b:21:c3:96:6d:
                    a0:82:e6:86:ca:ed:1b:e0:aa:6f:8e:bc:cf:17:aa:
                    14:7f:ef:28:53:03:fc:dd:78:e3:e9:9d:13:60:ee:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8B:53:52:05:89:25:D2:73:7A:92:E3:3A:09:F9:44:04:B8:60:0F
            X509v3 Authority Key Identifier:
                keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:06:91:3d:94:b8:17:82:27:55:ca:0e:64:15:33:7b:c8:c2:
         2b:99:47:9b:aa:26:75:bc:1b:c6:93:7c:f5:6f:3f:0d:86:ad:
         f7:a0:be:40:3e:e7:0c:f8:5f:6d:1e:a6:7f:a0:b6:76:34:7e:
         36:6b:e7:22:c6:74:09:5b:b1:cf:ff:3e:fc:51:1c:48:fc:7e:
         ab:b0:16:87:e5:76:2f:2d:e0:35:ee:55:10:9c:29:d3:c4:34:
         ee:8a:c7:36:2c:c2:4d:8b:4d:ee:17:79:fd:87:c4:56:c7:c4:
         4c:de:c5:7e:86:03:3e:f9:e2:6a:3b:e1:4e:37:d2:b9:1a:ed:
         57:e0:3e:1a:27:c8:09:70:f0:41:b8:24:b7:81:6a:9b:0b:2c:
         20:e1:82:4c:90:aa:cc:e3:5d:7d:1a:ac:02:1e:eb:57:d0:37:
         09:6a:1c:31:6b:7b:02:0a:a4:98:2e:7d:68:73:6f:5d:20:53:
         3a:bb:49:83:ef:55:93:f9:9d:92:d6:b7:7f:64:67:5b:a8:c0:
         49:09:45:ca:ab:3e:56:3a:2a:76:88:cc:db:90:64:60:89:b2:
         c6:87:6d:64:16:c8:65:2b:21:d3:e7:fe:97:cb:5c:8a:b3:9b:
         f2:07:c1:65:7b:51:83:c8:37:24:13:f1:75:a4:63:2f:89:f1:
         d8:34:e8:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkz7hvUq3b2Cb1KyA97+hzHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWZkMTM4ZjEwMmQ3ZGNiMTU4M2I0NDk0MTAyZjBmZTU4
N2U0NWQwHhcNMjUwOTEwMTQwMTA2WhcNMjUwOTExMTQwMTA2WjAzMTEwLwYDVQQD
EygyYzhiNTM1MjA1ODkyNWQyNzM3YTkyZTMzYTA5Zjk0NDA0Yjg2MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzo9XVyyONY3B3aYKJHQMvfpBNf7
RGz3dNwWahBqJcdWBT+ZrRra2aphoZjZ05spjEiGUKAq+cHWEjMCeL+kGZuwP1lm
DZ7Yp68PkggoB86VvscM/+Iy0I/4uUulIlLqjqq6ZxnKIpO5Jyvh+k3f73Wb0YB5
iWnFghZUpLRqSG2u0VM/wEZxJL91d873mAjdPJqCtQE7f9hmhrgiqLDwUZYnTuYH
IZNEw+dEJLBNum2TQq2o1J20ZL04cu9gvTcFDC+nW/NTSGzin53JuF/rfRRTk6Sb
vNid2HN3myHDlm2gguaGyu0b4KpvjrzPF6oUf+8oUwP83Xjj6Z0TYO4/DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyLU1IFiSXSc3qS4zoJ+UQEuGAPMB8GA1UdIwQY
MBaAFD4f0TjxAtfcsVg7RJQQLw/lh+RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kMGMzZTUtOTljNS00ZjEyLTlkYTIt
YzU5ZTk0YmZmNzQzLzEvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kMGMzZTUtOTljNS00ZjEyLTlkYTItYzU5ZTk0YmZmNzQz
LzEvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwaRPZS4
F4InVcoOZBUze8jCK5lHm6omdbwbxpN89W8/DYat96C+QD7nDPhfbR6mf6C2djR+
NmvnIsZ0CVuxz/8+/FEcSPx+q7AWh+V2Ly3gNe5VEJwp08Q07orHNizCTYtN7hd5
/YfEVsfETN7FfoYDPvniajvhTjfSuRrtV+A+GifICXDwQbgkt4FqmwssIOGCTJCq
zONdfRqsAh7rV9A3CWocMWt7AgqkmC59aHNvXSBTOrtJg+9Vk/mdkta3f2RnW6jA
SQlFyqs+VjoqdojM25BkYImyxodtZBbIZSsh0+f+l8tcirOb8gfBZXtRg8g3JBPx
daRjL4nx2DTowg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 23:33:17 2025 by rpki-client