Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File:                     PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier:          DwWzoZteGbl2u/cNEwo1EPE5Zgxbpju5WMt+k048dMI=
Subject key identifier:   5B:71:8C:3B:29:C4:30:07:97:61:A7:17:F2:5A:F8:CF:90:CB:58:A7
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer:       /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial:       0199239FF2FEE2D3F84751BEB48661C6DE27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number:          0728
Signing time:             Sun 07 Sep 2025 10:01:48 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:48 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:48 +0000
Files and hashes:         1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=)
                          2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: N1g6rBRQ4rbyyKzBHOREK+m3h8wsAFfR360qgK48wzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:f2:fe:e2:d3:f8:47:51:be:b4:86:61:c6:de:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
        Validity
            Not Before: Sep  7 10:01:48 2025 GMT
            Not After : Sep  8 10:01:48 2025 GMT
        Subject: CN=5b718c3b29c430079761a717f25af8cf90cb58a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:60:00:6d:4a:57:01:fa:14:e2:c2:1d:14:
                    41:ac:5b:98:c9:8a:9e:5f:2a:41:6a:b8:14:60:e1:
                    05:04:fb:3c:9c:de:7b:28:47:ff:8f:83:e1:34:2b:
                    4c:60:d6:11:ba:9b:ea:43:33:21:e4:b7:d8:e5:82:
                    ea:ac:22:0f:4e:d0:10:3f:40:84:43:e5:70:4e:30:
                    a3:4b:5a:12:70:11:ed:1b:06:d6:df:da:af:0a:13:
                    4d:31:dc:60:00:98:59:a2:75:6d:02:c3:b7:ce:50:
                    37:73:d0:f4:83:48:9e:9d:67:86:2d:74:56:2f:f6:
                    16:34:a8:11:70:f5:f1:16:47:91:70:c4:bc:43:33:
                    de:dd:a4:cc:5d:b0:58:5b:2a:89:8f:6e:9b:97:c4:
                    47:7e:bd:db:10:45:2a:a0:0e:2f:f9:77:84:db:b7:
                    a1:1d:77:dc:3a:ee:71:76:7f:f8:23:fa:74:7b:c3:
                    aa:d0:d9:3f:ff:51:33:5e:32:5a:c6:f6:d9:5c:0c:
                    a1:29:03:38:d4:bc:1c:3f:83:f6:99:36:d5:22:91:
                    0d:4a:a3:a8:97:31:be:3d:17:a9:bc:2d:69:fa:cd:
                    c8:63:bf:8c:66:8a:5c:26:e8:86:1c:4b:8d:bc:e7:
                    3e:5d:b9:ec:8b:24:35:0e:18:02:0f:45:ab:7e:5e:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:71:8C:3B:29:C4:30:07:97:61:A7:17:F2:5A:F8:CF:90:CB:58:A7
            X509v3 Authority Key Identifier:
                keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6f:57:2e:bd:0f:39:ec:ef:13:a6:b5:ce:7a:c7:b9:a2:69:
         c1:3b:63:a2:a0:0b:63:c7:63:fa:64:46:8f:69:5b:37:8e:c9:
         ba:d8:3d:09:3b:31:30:97:4f:34:44:45:b0:3f:98:6b:1f:39:
         27:0d:ed:ab:76:d6:61:0b:8b:03:2d:41:16:a9:80:80:e2:f0:
         bb:cb:18:83:a0:ec:66:3e:41:fe:34:a0:ac:81:7f:09:45:d9:
         2b:63:13:df:42:dc:fe:cd:99:de:da:b1:9e:d4:f1:1f:d5:cd:
         73:dc:81:74:69:b6:e9:03:85:aa:17:57:89:60:30:ef:07:bf:
         82:70:da:b8:44:31:87:af:49:24:93:ef:ab:e6:4c:0e:f1:6f:
         c2:da:a4:7b:af:5a:50:be:d2:3f:22:59:91:67:96:90:ac:8d:
         45:dd:29:d6:3f:e2:75:20:26:27:ee:4f:50:2f:b0:0f:88:55:
         6f:7b:30:70:8a:1e:e6:f2:68:30:46:2c:2a:1a:94:48:91:67:
         ab:c4:53:b4:66:f7:10:76:c4:6c:e1:9f:31:b9:62:d4:6c:da:
         c2:a0:5a:ba:64:0c:5f:fe:62:34:05:a0:e9:0c:75:e3:c1:f0:
         91:6c:60:ae:86:a7:f5:41:98:c6:fa:b2:44:68:26:5c:45:c9:
         90:a9:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:41 2025 by rpki-client