Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File:                     PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier:          1nwmON4Bgn8aYtC9vymwPWyR5Z1jGangRxiGXz1CjNU=
Subject key identifier:   8D:E5:1B:96:ED:7B:50:6B:12:18:05:68:72:9C:8E:A3:D9:67:10:AC
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer:       /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial:       0198D4726708AD5CF68F416DD9A8E20914FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:02:03 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:03 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:03 +0000
Files and hashes:         1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: ItoqfdPT7t44ZCwmcos5P3UhvQYd/4m3hqqrLDdmzG8=)
                          2: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (hash: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:67:08:ad:5c:f6:8f:41:6d:d9:a8:e2:09:14:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
        Validity
            Not Before: Aug 23 01:02:03 2025 GMT
            Not After : Aug 24 01:02:03 2025 GMT
        Subject: CN=8de51b96ed7b506b12180568729c8ea3d96710ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:08:0c:fc:69:38:4f:1a:52:6f:77:b9:6c:
                    3b:81:8d:39:37:ed:41:2b:12:0a:c4:d8:8e:e0:82:
                    4f:e9:b1:d3:8b:ca:1f:b6:7c:38:76:02:f4:89:87:
                    e5:35:56:9f:16:cf:f4:e4:f3:d5:75:a4:7e:90:f5:
                    bb:75:0d:ba:fc:7c:1b:05:c8:05:94:86:be:00:05:
                    b1:dc:e4:81:cc:7d:f0:0b:c2:5d:b5:c4:af:be:a5:
                    d2:73:40:89:96:e9:58:05:5e:0e:3b:3f:3a:c5:07:
                    68:ff:69:64:2c:ad:fd:56:78:5d:21:f3:b8:96:b7:
                    78:33:4d:64:0f:6c:21:21:a5:ea:47:2e:09:38:2f:
                    e2:bc:9b:c3:64:a6:05:17:ee:43:f9:e2:37:3e:ec:
                    0e:e9:84:7e:c0:f3:4e:50:24:cc:ce:4f:c9:d4:00:
                    35:36:07:32:e1:cc:68:3f:05:e9:d6:05:2d:d0:1c:
                    ca:90:50:30:b1:82:4e:a9:6d:46:90:9b:0e:0c:20:
                    d7:96:e6:0e:f7:c6:e8:bb:16:7d:dd:41:c9:54:e0:
                    21:9d:27:dc:fc:b1:95:4a:ff:04:18:45:d4:16:e1:
                    9b:2d:8a:ca:b1:36:90:6e:b6:1a:c7:0c:31:60:b0:
                    21:61:cc:22:26:75:d5:06:c5:a9:3f:9b:2b:0b:f4:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E5:1B:96:ED:7B:50:6B:12:18:05:68:72:9C:8E:A3:D9:67:10:AC
            X509v3 Authority Key Identifier:
                keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:72:9d:3b:05:96:60:85:92:67:9d:05:99:cc:bf:81:12:8c:
         1f:e2:fc:ca:06:e6:2e:fc:3f:01:bc:e0:ed:f9:d2:5a:f2:8e:
         7d:99:c7:be:3a:c3:5f:f4:33:c6:59:66:5d:ed:c4:03:28:9d:
         41:a0:96:2b:c7:07:79:39:cf:86:1f:2d:b2:5a:81:21:f1:9b:
         b9:8a:75:37:54:c7:30:ec:d5:fe:4f:66:fe:f0:a0:d0:97:f9:
         b7:19:db:8f:ae:5f:c0:d8:11:fa:e5:67:4f:a3:f6:69:af:75:
         54:ba:c2:ff:62:5f:bd:78:16:9c:de:3c:52:c1:28:cc:a9:5d:
         81:ad:e5:40:96:f9:f2:0c:1c:44:23:92:c5:eb:aa:e5:2b:2b:
         e9:fb:6f:f8:78:d5:ab:fa:75:d7:15:6f:8c:42:a6:38:0c:b6:
         6b:a3:d2:6a:44:55:4a:ee:d7:de:ee:3a:b6:d7:38:5c:27:4c:
         05:f1:e8:66:26:af:50:8c:f9:08:a3:69:f0:1b:a7:80:70:79:
         41:fa:01:6b:92:3d:fc:b0:70:7a:d5:61:59:d3:22:81:3c:df:
         b4:36:23:4a:f9:cc:a2:0f:bb:ba:11:bb:6f:d7:e2:75:70:ac:
         bf:9e:b5:b1:22:a0:2c:6f:ee:65:d5:66:40:5d:98:2b:78:f5:
         67:ba:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:25 2025 by rpki-client