Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File:                     pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier:          yT1IoVjhqC5DSjBDE+7YpC3lvrbzbvaBE6GoZv4g0Yk=
Subject key identifier:   ED:9F:AB:4D:A9:C8:25:C5:F3:CD:3D:FA:BA:93:9F:A5:3C:4B:08:A1
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer:       /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial:       0198D84F7D5E265DAA23DEC7276D6172CE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number:          0A3E
Signing time:             Sat 23 Aug 2025 19:02:24 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:24 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:24 +0000
Files and hashes:         1: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: d+Q/bxJHoy98JKWIrHbTFdX5SvOv3j7VuYxZIh5myH0=)
                          2: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (hash: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:7d:5e:26:5d:aa:23:de:c7:27:6d:61:72:ce:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
        Validity
            Not Before: Aug 23 19:02:24 2025 GMT
            Not After : Aug 24 19:02:24 2025 GMT
        Subject: CN=ed9fab4da9c825c5f3cd3dfaba939fa53c4b08a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:b3:66:ed:16:b8:f8:33:26:2b:f9:27:47:
                    d2:ae:04:78:29:45:f2:c1:e6:22:a0:a8:dc:c3:86:
                    c2:e0:f9:c8:c8:af:86:f4:ab:e8:0c:e3:45:b6:11:
                    ba:13:88:51:ad:75:9e:b3:fd:07:87:90:06:7e:e8:
                    e0:da:ce:14:9a:a7:0f:c6:f5:1b:93:e7:17:39:d9:
                    5d:15:cd:29:04:1d:d4:52:c9:02:22:b8:35:7b:c9:
                    66:71:f8:0a:e3:d4:c6:53:12:db:86:f2:2e:e4:a5:
                    67:cd:c6:08:98:57:8d:4a:0a:f7:15:f8:69:55:bc:
                    ac:e9:3c:67:c5:c8:df:17:ec:55:44:cd:81:b7:ea:
                    dc:f5:db:ce:0a:a5:cb:62:02:ef:43:2d:11:c8:86:
                    9b:4d:61:7c:60:48:28:0f:2a:db:63:f1:64:6f:ca:
                    3a:7c:41:34:c4:d5:0b:15:0e:d0:78:2f:68:09:1f:
                    de:76:de:35:ed:43:d7:69:89:b0:d1:7f:c4:9d:fe:
                    42:35:b7:f9:97:80:f7:18:8e:4a:9b:41:cc:41:77:
                    11:48:6c:dd:29:8d:0c:48:7b:a1:1d:1d:9e:20:94:
                    d1:05:b0:0f:ba:d3:ca:60:14:bc:13:b3:c2:f5:d1:
                    db:6d:84:02:6c:41:b2:48:98:88:12:1b:c5:cc:02:
                    87:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9F:AB:4D:A9:C8:25:C5:F3:CD:3D:FA:BA:93:9F:A5:3C:4B:08:A1
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:81:3c:35:d2:3d:3d:cc:4a:74:08:b2:dd:95:4e:8c:48:a0:
         15:76:ea:3d:79:2e:40:ba:b8:8c:b9:3f:49:36:62:0a:a5:4d:
         7a:68:e2:4b:0c:56:b4:06:0d:f5:09:f1:e3:ac:c4:0d:fd:e2:
         fa:1e:7b:19:7e:3a:f8:64:53:b3:73:3a:3f:8a:df:15:86:88:
         02:59:f8:a0:45:aa:3f:33:5f:3e:d9:f0:a2:13:28:47:7a:6a:
         10:58:80:6e:9f:cb:bc:26:26:e5:e3:7c:89:0d:59:a2:de:62:
         64:05:3b:aa:69:b0:26:d5:de:67:8d:7e:1c:7a:b4:05:43:3b:
         1f:16:56:47:19:21:33:a0:87:dc:fc:2f:e1:61:9d:ce:37:65:
         97:02:ec:3c:66:c9:23:39:aa:38:42:6e:a9:cd:de:3a:1e:4d:
         ed:df:b5:ed:95:8d:39:8f:28:68:a0:93:be:30:f0:95:41:b1:
         2f:e2:98:2a:b5:07:5c:78:5d:34:40:90:a2:be:a7:9d:d4:9e:
         0a:e1:cf:73:d2:62:e8:83:58:cf:7d:37:94:2b:76:1d:d8:ac:
         37:93:d7:25:f0:8d:e5:87:24:a3:bd:9f:00:c0:ed:19:5d:69:
         81:69:0b:4e:61:6f:f6:3a:bd:9b:ef:45:e5:c1:5e:48:8f:72:
         6c:7d:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:26:43 2025 by rpki-client