Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
File:                     P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft (raw, json)
Hash identifier:          0o1FTaeLx7vWEiEH+C3SIH7LslQTasCnoF1Iqf9h4uQ=
Subject key identifier:   2A:F4:97:F5:B8:72:21:FF:61:3E:FA:70:47:3B:B9:76:DB:33:1C:38
Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
Certificate issuer:       /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Certificate serial:       0198D54E0BA487D65483AF0AA8276BC993AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
Manifest number:          017F
Signing time:             Sat 23 Aug 2025 05:01:58 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:58 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:58 +0000
Files and hashes:         1: P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl (hash: pRPhQBmVh9b+NQ6w4shgAJmgpQbCTn/GyHE5OTXgMaY=)
                          2: tO945n8IOH4m4HY-IByza0kUANU.roa (hash: 1Y70k1PM1fySvFZtbmtzuB2FgWQvwNTM4axab3kjR2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:0b:a4:87:d6:54:83:af:0a:a8:27:6b:c9:93:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
        Validity
            Not Before: Aug 23 05:01:58 2025 GMT
            Not After : Aug 24 05:01:58 2025 GMT
        Subject: CN=2af497f5b87221ff613efa70473bb976db331c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f1:16:30:8f:b1:ea:07:c1:6d:e4:6f:fa:f3:
                    a8:3f:12:0e:26:48:57:cf:d7:b5:be:60:14:c1:bd:
                    2e:66:db:9d:7f:d7:0c:5a:d8:af:db:9c:7b:cb:0e:
                    09:77:b4:f2:a4:e3:19:5c:da:8b:20:e1:28:0f:0f:
                    f4:b6:26:ca:fe:5c:c8:ee:3c:d9:fc:0e:85:f3:eb:
                    2e:fc:31:67:54:68:7d:ec:1a:53:dc:55:50:19:9b:
                    7b:0e:f3:07:6e:aa:b3:68:49:4a:d8:f3:f4:30:ec:
                    6d:93:29:d7:ae:d3:bf:e0:b1:3e:bd:af:55:7a:05:
                    dd:9b:48:76:23:d0:e3:96:0e:9c:3e:6e:9f:ac:af:
                    a0:c6:88:8d:9a:4d:2a:95:de:f0:11:63:24:e2:94:
                    2f:f7:ef:22:b0:02:70:65:f2:0c:a1:49:16:3c:44:
                    ef:d7:de:f6:ba:5f:af:6f:6d:e5:ba:3d:19:8c:05:
                    de:bb:a9:18:a8:a0:09:c3:87:14:6b:3b:77:22:c8:
                    fd:90:10:78:18:3b:0e:f1:db:7b:f2:1a:a4:ce:a7:
                    06:db:2e:b3:59:30:9f:f8:5e:b9:cd:42:49:d6:64:
                    cd:15:57:fb:ce:3b:28:42:3c:b5:0f:b5:62:29:97:
                    de:10:39:4e:f8:77:0d:01:14:90:7d:ea:b4:f7:c4:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F4:97:F5:B8:72:21:FF:61:3E:FA:70:47:3B:B9:76:DB:33:1C:38
            X509v3 Authority Key Identifier:
                keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6b:e2:d8:e2:0c:56:9f:56:18:28:d0:cc:79:aa:f2:f6:4d:
         d8:67:b4:25:41:9f:8c:ed:64:03:5f:e4:84:5b:03:8b:83:f8:
         00:31:47:4a:6b:a4:3e:15:8a:b8:8f:85:21:1e:fd:0c:07:1c:
         d5:95:dd:3c:d0:5c:71:6b:61:1b:bb:55:c6:73:4c:b1:12:38:
         d2:6e:be:93:ae:8a:2b:36:95:12:d5:16:8f:31:c0:04:4d:3b:
         c8:79:ed:d5:22:c1:8e:df:5e:e4:df:b0:cd:1a:fb:7c:09:0b:
         1b:b4:dd:6c:b4:ca:c1:79:07:75:21:f7:69:0c:8d:f1:37:21:
         17:13:c0:ce:83:9a:67:fa:1b:50:83:76:52:11:0b:3c:e3:18:
         3c:fc:b8:8b:34:b7:07:02:66:33:89:ab:27:76:23:51:52:54:
         61:05:9a:49:e5:5a:a4:22:3b:cf:ec:06:02:b2:e2:35:24:df:
         4d:d4:68:e6:35:86:a2:a1:9f:1b:03:78:39:1e:01:45:af:e6:
         03:72:fb:16:0b:83:f0:03:e7:6d:1a:e7:6b:9a:e1:d2:74:83:
         ec:df:16:01:ba:c7:e1:eb:de:7b:a4:bb:89:0e:42:33:5f:62:
         bf:ae:fa:59:e3:3b:c9:3a:e9:55:fd:c8:d7:8a:94:69:1e:b9:
         c3:d6:cc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:35 2025 by rpki-client