Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File:                     PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier:          C9RzioROT6tfQ5JR6FQ1K06eR784mettw/30VgmdaqA=
Subject key identifier:   19:B1:B3:42:49:29:63:FE:FB:4B:03:11:DC:41:C9:54:28:FD:49:0C
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer:       /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial:       0198D73B3FA557F62B82A1EBA0C3658A2F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number:          0318
Signing time:             Sat 23 Aug 2025 14:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:41 +0000
Files and hashes:         1: Jv9ea6TjWXgvrL4UJOE0Y6J6Kzo.roa (hash: vQZS+xG2DvESCsjLOI3ZeRzubYmodylcXb11ZuJ/VmA=)
                          2: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: +WrHHhGhrbr3cGXnPaQPfJIbStStxtxd1qu+MM09fSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:3f:a5:57:f6:2b:82:a1:eb:a0:c3:65:8a:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
        Validity
            Not Before: Aug 23 14:00:41 2025 GMT
            Not After : Aug 24 14:00:41 2025 GMT
        Subject: CN=19b1b342492963fefb4b0311dc41c95428fd490c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:e7:01:b0:59:64:b4:25:5c:bd:58:be:19:
                    1e:a9:80:03:78:52:7f:f9:94:93:68:9e:ab:b9:cb:
                    7a:b9:68:20:db:7e:5e:03:14:b9:43:d7:d1:8b:1a:
                    cd:36:3e:41:bc:12:99:70:11:23:bd:01:8b:8f:44:
                    55:9d:81:42:24:a7:6d:11:9e:fa:a3:70:4a:2f:ab:
                    43:f9:67:75:80:65:e5:1b:0e:ca:fe:ee:55:22:1c:
                    93:0e:39:88:07:1c:df:54:ef:56:54:af:01:e1:9f:
                    66:d0:28:04:21:be:41:ea:31:21:df:8e:81:e7:e3:
                    ee:89:56:44:ef:1d:95:71:1b:c4:88:68:64:59:c7:
                    b2:a5:2c:e2:fb:32:6e:53:34:a4:cd:09:8b:2f:09:
                    05:80:5b:0d:78:b4:5d:7c:b0:df:cf:aa:05:39:b9:
                    e5:1d:31:da:bc:af:02:63:24:79:29:f5:6f:b1:86:
                    7a:fd:f2:ec:14:58:cd:e3:c1:b0:a6:ce:39:e0:ad:
                    71:2e:10:7c:20:6b:4b:cf:c5:b0:4d:0d:01:96:4f:
                    e2:ec:ec:01:ca:bc:91:fe:ea:04:a2:25:40:6b:fd:
                    f4:00:43:97:16:85:d7:87:07:a5:f6:49:2b:ea:fb:
                    a7:6d:33:f7:85:1b:df:6f:b4:89:fd:dc:63:2a:75:
                    94:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B1:B3:42:49:29:63:FE:FB:4B:03:11:DC:41:C9:54:28:FD:49:0C
            X509v3 Authority Key Identifier:
                keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:86:f1:c0:09:3c:1e:28:79:a8:c2:30:9f:57:e4:fa:e3:c5:
         89:cf:f3:61:97:f6:5b:08:37:c8:b3:3c:cc:93:e6:dd:b8:35:
         37:79:07:5c:41:24:f2:2a:c1:c8:6d:c5:ff:1f:7c:b1:68:79:
         d4:fb:e2:96:16:8c:6e:5c:d8:7d:79:74:4b:e8:00:ff:7d:40:
         04:e1:ef:b3:c2:d2:bf:d2:46:96:a9:7d:85:23:3f:7c:a5:07:
         f4:8d:15:bb:f4:d5:0c:8f:ef:4e:17:48:18:32:ac:85:e4:41:
         6b:18:5a:c1:f9:32:b1:fb:18:25:df:50:21:64:ce:5a:68:4a:
         ad:44:22:13:d7:ab:af:29:ba:98:ca:0c:d6:e9:89:2b:37:ba:
         20:d3:57:25:a0:56:70:30:c1:0e:ce:14:b1:f9:16:fb:2f:49:
         0c:8e:6e:22:48:a4:44:2b:8d:da:9f:7a:63:ee:16:32:2e:1c:
         4c:56:a8:bd:7e:26:5a:5a:3e:17:3a:c3:10:da:6a:c7:f6:cd:
         e1:e2:37:bb:eb:24:31:1d:0a:0d:6b:86:82:a0:8d:27:8b:28:
         06:c0:e5:f2:b8:23:93:14:41:bf:7a:37:fd:69:20:5a:67:bd:
         9a:64:15:aa:73:c4:7b:e5:70:93:a3:d1:b9:d6:fd:7d:39:fd:
         a0:78:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:20:53 2025 by rpki-client