Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
File:                     PcJAKLjucj8XJvRZUfpc_mteQms.mft (raw, json)
Hash identifier:          PG0n6clZ5YM+x+6ukdJ3Rt5XnC3e2xhQTL75B3x3Unk=
Subject key identifier:   00:6B:22:BF:88:6B:F0:73:AB:91:1B:6B:C1:AA:17:A1:53:7E:4C:59
Authority key identifier: 3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B
Certificate issuer:       /CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b
Certificate serial:       0198D5BB7F134357B0FFB39CD8E40463A285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
Manifest number:          DE
Signing time:             Sat 23 Aug 2025 07:01:31 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:31 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:31 +0000
Files and hashes:         1: PcJAKLjucj8XJvRZUfpc_mteQms.crl (hash: K9NntiVxnghxjeRxINIZubgl0NFQ1juAtrO3ch9Fpbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:7f:13:43:57:b0:ff:b3:9c:d8:e4:04:63:a2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b
        Validity
            Not Before: Aug 23 07:01:31 2025 GMT
            Not After : Aug 24 07:01:31 2025 GMT
        Subject: CN=006b22bf886bf073ab911b6bc1aa17a1537e4c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:f7:e9:a4:e8:0c:be:70:cd:c3:5c:c1:d7:
                    15:2a:bf:28:08:9b:e1:64:4e:ef:a1:0a:56:05:4e:
                    0b:ea:38:94:59:41:85:02:7a:6c:f9:47:2d:ea:67:
                    d9:99:ad:d6:5a:aa:11:e9:27:a9:34:72:3f:41:e7:
                    31:c6:a5:20:ae:49:1e:79:fa:fe:64:75:bb:ed:51:
                    52:69:5e:f4:9e:ec:69:7f:78:2f:4b:e9:a3:73:d4:
                    22:77:01:c5:c6:11:18:fe:97:0e:79:3b:cb:d9:c3:
                    fa:2e:6c:08:6c:a7:cd:6c:36:83:d1:79:ac:59:52:
                    9a:5f:f6:b5:a6:23:3a:d7:f0:40:f2:85:5d:56:98:
                    ac:30:f4:ce:f5:71:4e:b8:f4:bc:3c:fd:17:48:85:
                    99:22:94:49:4a:17:03:b6:3a:72:51:b2:32:5c:a7:
                    d5:2b:6a:37:24:77:56:d1:b0:02:8f:d1:d5:03:e8:
                    6f:94:e4:12:0b:2b:37:2e:98:c1:f6:99:8e:5b:30:
                    1e:f4:56:c8:ea:b5:3a:de:43:a2:9c:d5:9c:56:b8:
                    a1:57:80:5a:22:12:5f:1e:d4:a0:36:8d:3b:e3:a6:
                    2d:83:57:7b:04:e1:2e:34:eb:0b:35:8b:27:8f:de:
                    c0:cf:81:21:52:7d:18:6c:a4:3a:7d:8b:54:7f:36:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6B:22:BF:88:6B:F0:73:AB:91:1B:6B:C1:AA:17:A1:53:7E:4C:59
            X509v3 Authority Key Identifier:
                keyid:3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:34:b0:e7:1d:8e:ca:4d:16:18:93:2b:5a:f1:ae:2b:2f:e7:
         ee:8c:e0:30:9a:47:b4:8a:72:c3:d2:de:99:bc:0d:c7:3f:fa:
         d3:da:58:9a:53:f5:23:6d:38:4d:bd:36:89:e7:84:39:cc:31:
         fa:40:5e:d6:b1:22:74:20:98:13:d4:df:47:16:b6:a1:07:6e:
         7c:6a:9f:3c:a1:06:8c:03:c5:55:08:d5:5e:d6:16:3f:28:84:
         14:e3:11:a2:79:49:63:64:1a:96:82:82:39:5f:e2:26:fb:90:
         0b:e0:0e:f7:4b:a2:95:0c:4b:14:58:86:5a:67:66:52:20:82:
         b3:61:34:9d:8c:3b:56:c9:2b:60:21:b3:ae:5d:67:69:b4:90:
         15:60:c7:23:65:7d:b8:01:db:88:5d:00:f9:8e:d3:ff:93:81:
         6d:bd:ed:a5:2e:2b:e2:ec:60:b7:7e:4d:cc:df:07:5e:c9:22:
         c8:f1:d8:41:f2:fd:c0:38:39:58:60:f0:51:34:3b:50:fc:7a:
         a7:7a:a6:18:f9:6f:77:6f:b4:f7:5e:59:f0:aa:06:67:eb:af:
         bb:cb:e8:97:c5:32:5c:2b:9f:60:6d:b2:8c:8b:40:a7:70:b4:
         4c:23:f7:b0:55:a9:52:25:89:15:9d:47:96:c2:aa:94:09:5e:
         67:81:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:22 2025 by rpki-client