Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File:                     PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier:          MaNyrRG4IbrNY3/18JEEOocd0Bpq5NO7RNFrKWkqHAY=
Subject key identifier:   E6:8A:CE:17:67:39:24:D3:1E:D8:61:23:EF:57:C9:9D:B8:13:B3:C7
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer:       /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial:       019A06DB2132D303FD3591EB8F4003FA71EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number:          0331
Signing time:             Tue 21 Oct 2025 13:00:15 +0000
Manifest this update:     Tue 21 Oct 2025 13:00:15 +0000
Manifest next update:     Wed 22 Oct 2025 13:00:15 +0000
Files and hashes:         1: 7MAR8ldskj16F5kzBhniowMVmU4.roa (hash: mAbacv2iYcdMB2GMEDPPh1FDDClOu0PIdLu6x7Tl3MY=)
                          2: Cu_tMI7PQ6xbwC801ON2UpFh-7U.roa (hash: GIgBSdweK8qeTSk0k9hGLBlRLULkx2CFmhF3qwcGbl0=)
                          3: FmkKEcHCN4SKkKjvm4wbiP2rqGc.roa (hash: BxDXl5Xd1DRGy1evvpUKKCLNhtBpKlkHYmd1XWHZ6n8=)
                          4: N8UiZC6ekKP1es4B_Bk3APFkdxc.roa (hash: tgQGNuurT5CnHai6yz0N+Wra1nyaeCzvPS5Kjtxbyvk=)
                          5: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: p38k3m2n/Yx3MfN8ghPVxGBkLeC/HKtWyheyxDlBxb0=)
                          6: k4yKqIR7cQItxrDu_gDWC-myYX0.roa (hash: xhdvsy13/3L8cbu2Dvi5ab7FoTe57YZRZZmouEau4sA=)
                          7: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=)
                          8: pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa (hash: WNvv2z5ka9H0FOvY11NFaV4Er6oN7s2ejAsfJawgadw=)
                          9: rBORiVnjaTLo34wXgk56Wdk6L40.roa (hash: ilIiHrBuCknqXlqYLmYdfV8RuudQEzNokXG+7gARkUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 13:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:06:db:21:32:d3:03:fd:35:91:eb:8f:40:03:fa:71:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
        Validity
            Not Before: Oct 21 13:00:15 2025 GMT
            Not After : Oct 22 13:00:15 2025 GMT
        Subject: CN=e68ace17673924d31ed86123ef57c99db813b3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d1:1f:d2:89:14:a6:10:fa:1b:e3:f1:b8:c3:
                    8b:fa:8c:39:6f:77:98:01:2a:37:ab:80:be:bf:72:
                    d2:e0:22:f8:c2:5d:01:69:bf:38:e4:b7:eb:fe:5d:
                    dc:ae:de:5a:55:4b:62:61:3c:99:19:e4:4a:32:8c:
                    cb:07:11:3c:c9:d3:29:37:e7:48:32:88:72:bf:43:
                    54:ca:d5:27:38:bd:ac:f2:84:d9:75:10:80:d3:44:
                    9c:42:8b:27:04:12:bc:6f:b3:85:61:73:5f:f8:b9:
                    0a:f7:54:61:fd:4e:73:c9:8f:ef:f1:ec:25:8c:18:
                    00:cd:f8:5c:33:42:e1:f4:af:74:78:4e:a8:5c:d7:
                    2b:43:21:b5:1a:a7:67:6f:6f:71:bb:69:de:d8:4e:
                    e5:67:f3:a9:36:11:6c:72:14:be:bf:b9:27:86:bc:
                    fd:41:2f:be:f1:63:ae:51:81:4d:5d:1b:a8:a1:4a:
                    88:59:0a:d1:17:ab:04:0f:51:2e:6e:f0:f0:d3:71:
                    3d:68:3b:83:5d:17:f4:19:aa:59:4f:6d:b6:26:ec:
                    ab:5e:6b:7c:7d:6a:0f:d3:06:5b:e6:d2:64:09:16:
                    db:87:41:b8:c2:8a:05:25:46:dd:6a:f1:70:44:66:
                    c8:dc:4f:c6:ae:48:68:40:4c:d3:8c:37:d4:c0:b3:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8A:CE:17:67:39:24:D3:1E:D8:61:23:EF:57:C9:9D:B8:13:B3:C7
            X509v3 Authority Key Identifier:
                keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:de:24:97:6f:9a:9c:38:40:8e:97:c6:7d:d9:e0:70:57:
         ef:0e:44:bb:40:d8:66:a8:64:a8:bc:19:77:f6:f9:eb:d1:ea:
         1f:d2:9b:63:33:7f:03:cb:74:f1:5f:f6:b3:4c:a4:11:84:c4:
         84:a7:bc:d0:c0:f0:e4:4e:bb:ea:8b:08:60:16:15:50:64:ad:
         87:d0:4e:bf:6a:69:77:81:8f:d4:0a:b4:8c:97:ed:16:cd:3a:
         de:6d:5d:de:01:63:f1:96:fa:53:bb:3d:2a:a7:76:ab:b7:a0:
         84:e0:2a:e9:88:78:1f:c4:df:a3:c7:62:af:87:f4:61:a8:dc:
         29:6e:d9:9b:4d:c7:ab:d5:4c:ef:78:90:fc:62:58:34:1d:04:
         4c:c7:a2:1e:da:b5:e1:0f:ff:be:c6:84:54:af:e1:9a:35:35:
         56:06:2b:72:50:3e:7d:a7:8d:a8:20:97:14:18:a7:63:54:e9:
         dc:ae:e4:2a:68:5b:9a:47:74:0d:95:17:a3:2b:4b:60:42:62:
         35:bf:b2:7b:38:ff:7a:9a:d8:6c:89:09:c8:e5:b8:58:d3:8f:
         74:e0:6f:1d:5f:dc:5a:0b:4c:40:d4:f7:81:70:0e:64:b8:e6:
         2f:07:f0:ac:72:ce:44:65:14:38:d6:a3:18:7a:bd:ce:02:f7:
         06:59:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 23:00:56 2025 by rpki-client