Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
File:                     Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft (raw, json)
Hash identifier:          0+mc9+YEf8oE8DXhM+OisjI7h/C9c3G6ogKEc6jUgNg=
Subject key identifier:   2C:EF:09:ED:BD:F1:B0:11:6B:9C:5C:4B:CF:70:2F:3D:C1:1D:EB:65
Authority key identifier: 3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
Certificate issuer:       /CN=3edd1cf4370085b6d25714091436f6686028d558
Certificate serial:       0198D472C0EFD61C7390C6B3F7698F03456F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
Manifest number:          FD
Signing time:             Sat 23 Aug 2025 01:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:26 +0000
Files and hashes:         1: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl (hash: wyX0JpDaY0RYUuUm6Yn0JMLr7Jd00MMW5x5Ziw/BXr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:c0:ef:d6:1c:73:90:c6:b3:f7:69:8f:03:45:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edd1cf4370085b6d25714091436f6686028d558
        Validity
            Not Before: Aug 23 01:02:26 2025 GMT
            Not After : Aug 24 01:02:26 2025 GMT
        Subject: CN=2cef09edbdf1b0116b9c5c4bcf702f3dc11deb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:81:84:3f:36:62:d2:d8:d3:88:23:8e:2c:
                    db:25:cf:8b:fb:9b:94:62:47:3c:69:b5:a2:af:3a:
                    13:f8:63:e5:23:94:ef:66:1d:b9:04:52:61:70:5a:
                    0d:d0:93:73:56:4d:bb:28:c4:01:99:9c:ea:69:07:
                    c3:13:d8:6f:f3:0e:c3:88:19:da:b7:5c:92:55:e6:
                    62:24:e9:ef:32:11:2f:d6:37:d6:2b:92:84:a8:38:
                    a8:1a:5c:e6:ff:82:8a:5b:f2:a8:43:f3:61:65:14:
                    1c:c3:1f:bf:9d:a1:86:5d:bb:bf:38:ea:79:2a:3f:
                    d5:3e:09:48:46:be:6f:e6:e9:3e:25:07:c2:2f:af:
                    6e:9f:57:63:6c:09:5b:89:c6:6d:fb:ac:d1:82:5d:
                    9b:ad:c1:fe:7c:a3:c8:51:07:55:04:b5:2f:8d:a6:
                    e2:67:32:3c:1a:fc:be:52:57:d5:8a:62:64:69:39:
                    b1:ee:d7:87:d2:59:3a:98:34:11:c1:0a:d3:19:8e:
                    f5:0e:bf:68:b8:8a:d8:a1:56:72:ba:51:f8:51:e6:
                    7f:77:1a:37:09:4c:14:0f:2d:28:d7:56:51:2a:b0:
                    27:ed:86:10:49:3f:a8:53:45:38:7f:d5:ec:47:44:
                    5c:71:57:1b:bb:7f:cd:43:26:78:09:be:bf:d4:e8:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EF:09:ED:BD:F1:B0:11:6B:9C:5C:4B:CF:70:2F:3D:C1:1D:EB:65
            X509v3 Authority Key Identifier:
                keyid:3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:24:88:9d:07:c9:91:bb:2f:68:47:94:c8:47:20:86:a9:a8:
         d1:37:c6:5b:b1:fe:19:24:16:c0:42:fc:ae:cb:59:34:10:61:
         e9:3e:46:29:0c:b1:08:09:37:b0:e1:5f:2d:73:2c:db:cb:30:
         6a:cc:dd:fe:ce:b6:27:79:30:0b:7f:54:8c:d8:40:ca:05:34:
         f4:ec:41:10:f6:de:a1:7d:c3:b3:09:46:58:49:61:2b:76:41:
         23:f7:f2:3f:c7:05:2c:7d:18:4f:53:e6:a3:2c:19:62:af:e6:
         79:ba:04:3b:7c:4f:bd:e1:4a:e9:62:7b:e1:50:64:4a:3a:f7:
         7d:2e:4c:45:d3:95:52:25:59:60:a2:b1:0d:69:6b:cc:8c:7a:
         04:a9:9f:f1:11:78:a4:56:2b:28:e0:ae:6b:27:6f:c7:10:1b:
         70:20:69:28:14:91:8d:6c:9c:46:7d:e6:c8:7e:9b:bb:98:d3:
         79:93:33:e1:a5:2a:c0:79:b6:1a:ba:a1:91:45:84:53:f6:9c:
         ed:0a:4e:be:2f:20:d6:1f:c1:02:45:b5:6e:86:63:09:b2:23:
         cf:51:df:fd:c3:19:52:67:f9:61:b8:ed:a2:fd:d0:e0:99:f9:
         e2:9e:f2:5a:d1:ae:a7:91:84:e1:ac:a5:76:4f:e8:db:41:45:
         3f:5a:91:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:58 2025 by rpki-client