Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
File:                     Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft (raw, json)
Hash identifier:          ULqeaVjABc1A3P/+18klpJxpMOA4rfQulc37ixm28ls=
Subject key identifier:   8F:3E:18:91:3C:D8:6B:27:69:11:07:C0:4C:C0:19:27:5D:05:F5:3A
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Certificate issuer:       /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial:       0198D65FFC2E6E8486057ABB97C7310CFB77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
Manifest number:          1271
Signing time:             Sat 23 Aug 2025 10:01:11 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:11 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:11 +0000
Files and hashes:         1: Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl (hash: PStHjEbV162JhS044V/8is8JEH8hI4titr/5O0zEXWc=)
                          2: TvTxBLGF9a81RGikK2pVw5Qclrk.roa (hash: Swsi8hcudUdP4trO5kArswNQiDBcmbNtUjmXbEXUd0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:fc:2e:6e:84:86:05:7a:bb:97:c7:31:0c:fb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
        Validity
            Not Before: Aug 23 10:01:11 2025 GMT
            Not After : Aug 24 10:01:11 2025 GMT
        Subject: CN=8f3e18913cd86b27691107c04cc019275d05f53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:74:09:18:63:fd:af:8b:b4:f0:a6:57:37:
                    c7:72:d8:b6:68:93:41:e5:93:73:3b:3f:65:14:3f:
                    71:27:4f:ec:9b:7b:1f:20:b8:2d:ce:c9:ea:c0:b1:
                    d7:80:da:24:0b:6c:f9:03:42:e2:ca:70:b2:0c:30:
                    be:85:8c:19:20:f8:83:62:97:6b:bf:2a:4a:f0:5e:
                    21:0e:31:3d:7e:99:d7:46:4b:4a:13:e4:8d:b1:af:
                    14:07:0c:64:a8:36:db:46:ee:f4:70:d7:4a:f2:92:
                    af:19:f4:0d:85:23:94:70:9d:f3:e9:6d:fd:f1:7e:
                    ba:70:cf:5c:2c:fb:78:ce:2f:50:5d:66:9f:54:5e:
                    92:7d:03:20:83:37:aa:6d:36:72:eb:da:70:2e:df:
                    e4:ea:3d:9f:56:0d:c3:47:67:b2:5c:25:d4:98:d9:
                    8a:ce:75:18:2e:d7:e1:c2:d1:fe:66:99:94:9b:51:
                    d3:28:8f:b7:4d:30:84:61:59:62:8b:18:98:4e:ee:
                    9f:93:68:ab:ab:64:47:11:3d:e0:59:e3:44:9c:2d:
                    81:6b:86:11:12:53:9a:aa:32:5e:c4:68:1e:52:de:
                    cb:e4:51:86:3d:06:bb:f0:a0:d5:52:c6:af:fa:01:
                    aa:f9:64:d0:2f:f8:e7:74:95:5c:a2:f8:22:f2:52:
                    22:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3E:18:91:3C:D8:6B:27:69:11:07:C0:4C:C0:19:27:5D:05:F5:3A
            X509v3 Authority Key Identifier:
                keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4c:0e:13:4b:b6:81:c2:dd:18:57:55:2d:80:2a:9d:eb:22:
         b8:f3:34:40:40:c7:0a:ac:cd:bf:55:64:57:54:5e:2a:26:89:
         2d:6f:0c:87:41:96:46:3b:7a:24:54:f1:da:3e:5c:ea:0e:53:
         f2:2f:77:4b:52:09:53:27:fc:19:a3:fe:fa:d4:64:9a:23:04:
         af:25:6d:4a:bd:b3:fc:b4:f3:f5:a1:db:c9:c7:27:ad:da:e6:
         51:31:55:fd:a2:68:df:e8:df:ba:29:36:2f:53:49:4b:2e:a4:
         ed:a1:f3:bd:ed:8a:4d:0f:2a:bb:16:3e:dd:c1:ec:14:f1:97:
         ea:c5:1e:49:fc:11:63:9b:f3:2f:6f:e4:35:04:a2:4a:df:3a:
         54:0e:76:db:b2:83:c7:a9:48:a4:e7:b0:61:df:00:29:9b:e6:
         bb:76:6e:64:9f:0d:e9:f1:17:4c:01:3c:62:50:4c:3d:66:46:
         d2:02:46:34:d5:8d:c3:71:42:b6:88:f2:18:ac:0c:0d:4c:f2:
         d0:bc:c8:56:40:c4:86:4d:ee:3c:df:f0:e0:a5:66:86:48:4a:
         45:b5:3e:fe:20:d9:4d:a8:9f:fe:a7:e1:87:d5:9d:af:15:2b:
         b2:47:49:9f:86:81:40:00:d4:0d:41:2e:9b:04:2d:22:91:be:
         c1:bd:13:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:27 2025 by rpki-client