Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          M6igwfzmiFO0M3vuGE8hJzH7bAZPXAYuc+0QvqPJxyw=
Subject key identifier:   CD:26:DE:D3:12:9F:22:D6:DC:F2:E2:6B:D3:79:54:E6:75:24:06:57
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       0198D4DFCA56D62AB40FC0634AB772B1D8F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          1108
Signing time:             Sat 23 Aug 2025 03:01:32 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:32 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:32 +0000
Files and hashes:         1: 1qkc6Y9jXUF8IhL-xIP9OmQuRxQ.roa (hash: FyT7i1iA2UYuQa2unCvmYr0/izQdX0gwOaXqE1QmUDA=)
                          2: 4pndJR5YmydmS9JXz_iQx8ck7j0.roa (hash: Z1im/UM2UzYVlqGcYguPnrUORp/DmOYEtnYcSLNDNIU=)
                          3: 790_0aC0pIVxZhv7VxK50ulYRQA.roa (hash: Omml7Q0FvpnQPClJTkXnFHAOdNcYGcFxuVbnF3UpV4k=)
                          4: 7TRbsGhzrO0599svAEtwSgPzAhc.roa (hash: W3VT9OquRIsAh2qTrbG0g8QkGqxQgHgPGhS6fP34/Qo=)
                          5: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: VCkpMghnb7k/6NTeH6U3GTpOOkaSYh7yLxr6x+dmoV8=)
                          6: rq9aneEoVWHNrooCWNRA9paJqvA.roa (hash: yfPP93JQllNK5aLLASi/RUmEtM270jETA3o9ZRbSPvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:ca:56:d6:2a:b4:0f:c0:63:4a:b7:72:b1:d8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Aug 23 03:01:32 2025 GMT
            Not After : Aug 24 03:01:32 2025 GMT
        Subject: CN=cd26ded3129f22d6dcf2e26bd37954e675240657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:c8:e2:37:78:6d:f8:aa:7b:bc:30:1a:78:
                    08:17:50:f3:56:5a:39:62:81:a3:4d:c4:fd:b6:08:
                    1f:ed:d9:1d:5c:18:18:7a:3d:3a:ce:d2:5f:d9:c0:
                    52:ab:63:01:f0:71:fc:e8:fb:80:db:cd:49:ee:cd:
                    fe:9c:ef:4e:3e:ad:50:f7:f9:b3:b8:cd:18:c1:df:
                    c7:5d:78:2a:ee:98:91:7a:24:71:35:80:19:14:61:
                    f1:a5:6b:67:04:dd:77:8c:ea:3a:c6:92:2b:ea:d3:
                    c2:b4:97:12:c7:5b:e1:6c:59:d7:87:50:2b:9e:43:
                    4a:a3:32:09:96:6d:09:5b:5b:87:1a:fd:fc:33:a4:
                    76:aa:e7:65:99:84:7a:bd:83:aa:1b:87:cf:de:88:
                    a8:3e:e3:68:e4:a8:20:73:94:87:0b:10:90:b0:17:
                    32:01:ff:50:09:2f:99:21:17:3c:21:b3:61:97:1e:
                    d3:1d:40:3b:af:a9:75:6a:e4:25:fb:09:e6:18:ab:
                    9d:7e:6b:f8:b4:bf:87:3c:31:2c:e3:4f:fa:e5:fd:
                    24:6a:74:ea:53:ff:6b:bd:e7:7a:af:27:f1:99:42:
                    58:48:b3:25:b8:91:b7:fd:44:b8:12:9f:4e:4a:7b:
                    f5:9d:9a:21:4d:8f:74:f1:4f:de:0f:a1:29:a9:37:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:26:DE:D3:12:9F:22:D6:DC:F2:E2:6B:D3:79:54:E6:75:24:06:57
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:70:c2:65:f0:da:85:54:30:14:ee:15:2b:93:3e:b8:18:ed:
         43:ac:78:d5:9c:62:6b:54:3f:3f:8c:1c:fd:f0:51:96:f2:d0:
         45:a2:56:b3:2c:68:18:59:df:67:3f:24:63:7e:c6:6f:08:7d:
         6b:63:6f:ba:79:82:22:f7:21:70:5f:eb:43:f7:a6:ad:e8:b2:
         5b:72:6f:db:e1:a2:e8:af:3f:33:3b:29:17:cf:29:c0:fd:90:
         9a:c1:1a:80:22:7f:76:c8:70:8e:e3:36:93:58:8d:2a:33:cc:
         61:bf:6a:ae:8e:e9:da:7f:3b:de:b1:19:71:07:fe:3a:58:5b:
         6e:c9:60:14:37:6e:22:8c:b5:bc:10:e3:aa:1b:a2:c5:94:06:
         38:cb:80:08:fa:00:06:1d:53:89:38:ed:00:bc:0f:21:33:74:
         ed:dc:70:bb:1a:e0:7c:09:75:30:5c:02:82:b1:c5:db:6c:2b:
         fa:0f:c4:b0:84:d8:1b:37:8c:c2:50:b0:d2:1b:04:45:f0:07:
         2a:f2:70:52:b4:1f:c9:75:78:9c:08:35:25:fb:29:1a:c6:3e:
         50:0e:06:36:02:65:fd:61:bd:7c:ff:1e:cb:a6:92:e2:26:9e:
         eb:d8:f0:bf:dd:f6:8c:96:33:d7:b7:b1:26:75:ff:45:6b:87:
         80:50:78:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU38pW1iq0D8BjSrdysdjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGQzZmIwNDRlYjFjMGExMWJlMDYwMmFjZWVmODhlNWY1
ZDJkZGYwHhcNMjUwODIzMDMwMTMyWhcNMjUwODI0MDMwMTMyWjAzMTEwLwYDVQQD
EyhjZDI2ZGVkMzEyOWYyMmQ2ZGNmMmUyNmJkMzc5NTRlNjc1MjQwNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogDI4jd4bfiqe7wwGngIF1DzVlo5
YoGjTcT9tggf7dkdXBgYej06ztJf2cBSq2MB8HH86PuA281J7s3+nO9OPq1Q9/mz
uM0Ywd/HXXgq7piReiRxNYAZFGHxpWtnBN13jOo6xpIr6tPCtJcSx1vhbFnXh1Ar
nkNKozIJlm0JW1uHGv38M6R2qudlmYR6vYOqG4fP3oioPuNo5Kggc5SHCxCQsBcy
Af9QCS+ZIRc8IbNhlx7THUA7r6l1auQl+wnmGKudfmv4tL+HPDEs40/65f0kanTq
U/9rved6ryfxmUJYSLMluJG3/US4Ep9OSnv1nZohTY908U/eD6EpqTec1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0m3tMSnyLW3PLia9N5VOZ1JAZXMB8GA1UdIwQY
MBaAFDxNP7BE6xwKEb4GAqzu+I5fXS3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEt
YjE4NGUzZjRiNTBlLzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEtYjE4NGUzZjRiNTBl
LzEvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHDCZfDa
hVQwFO4VK5M+uBjtQ6x41Zxia1Q/P4wc/fBRlvLQRaJWsyxoGFnfZz8kY37Gbwh9
a2NvunmCIvchcF/rQ/emreiyW3Jv2+Gi6K8/MzspF88pwP2QmsEagCJ/dshwjuM2
k1iNKjPMYb9qro7p2n873rEZcQf+OlhbbslgFDduIoy1vBDjqhuixZQGOMuACPoA
Bh1TiTjtALwPITN07dxwuxrgfAl1MFwCgrHF22wr+g/EsITYGzeMwlCw0hsERfAH
KvJwUrQfyXV4nAg1JfspGsY+UA4GNgJl/WG9fP8ey6aS4iae69jwv932jJYz17ex
JnX/RWuHgFB4ng==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:19 2025 by rpki-client