Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File:                     Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier:          h/MkP55n3M/m5aQZNpgPm8Nte8VG8iNqE6HGibg9eDc=
Subject key identifier:   9F:73:39:ED:D5:5D:B3:95:8D:FC:D8:4B:9F:98:A9:4F:28:16:58:2B
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer:       /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial:       0198D472C94CD03F05D63EF5794158C928FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number:          12DE
Signing time:             Sat 23 Aug 2025 01:02:29 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:29 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:29 +0000
Files and hashes:         1: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: G16O7uHnio5dYpqcSGV4Cc01pQsQ0RWFZmC/rR255ac=)
                          2: f4uXUqTz6EMLfxnYPkQ3ht2dRz0.roa (hash: WwKae4E8mCPYphGvXV9B/QCbohcENp4wZ1ekmYvPPps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:c9:4c:d0:3f:05:d6:3e:f5:79:41:58:c9:28:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
        Validity
            Not Before: Aug 23 01:02:29 2025 GMT
            Not After : Aug 24 01:02:29 2025 GMT
        Subject: CN=9f7339edd55db3958dfcd84b9f98a94f2816582b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f5:b3:51:b8:06:94:2f:45:b0:13:e3:50:e0:
                    79:94:d0:a7:9a:57:00:e1:ac:9c:c6:6f:9e:dc:02:
                    af:b0:2a:6e:37:ea:14:83:6b:9e:36:6c:77:0f:40:
                    d0:b2:5f:58:fc:77:a7:c3:25:98:42:46:2d:8f:ae:
                    df:04:30:21:8b:92:27:91:54:aa:67:f0:6c:f1:33:
                    f7:a1:d8:70:13:40:80:e3:9a:39:01:36:8e:ce:7f:
                    f9:c2:18:32:fe:c4:64:5b:f7:7f:b5:5b:50:34:46:
                    86:0d:e6:66:0f:bd:46:d0:2c:2f:c2:c3:64:93:d5:
                    8b:60:15:d9:05:32:0e:0f:5e:e6:f0:f3:0d:41:75:
                    4d:79:ac:a2:dc:df:03:08:b3:67:37:43:ab:72:d0:
                    9d:bf:f3:08:54:9b:50:51:48:cb:d5:55:15:04:a6:
                    2f:16:59:e3:ce:9f:90:76:e4:8a:3b:88:08:8a:32:
                    ed:f6:81:4e:02:ab:9b:31:41:f0:39:5e:a9:1f:91:
                    44:1f:0e:a6:94:f0:cd:df:24:0b:73:16:e9:9d:2a:
                    55:2f:f6:21:1b:83:0c:d8:d5:28:8a:e2:8d:5c:26:
                    0b:df:56:25:07:b4:fc:c4:c9:79:3d:ef:ef:36:e4:
                    2b:fd:76:62:05:74:12:7e:d3:bd:ce:73:77:3f:1d:
                    44:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:73:39:ED:D5:5D:B3:95:8D:FC:D8:4B:9F:98:A9:4F:28:16:58:2B
            X509v3 Authority Key Identifier:
                keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3d:7c:db:6a:d8:6f:4a:e2:27:57:77:92:7d:b9:33:de:7a:
         19:7d:f5:d2:6b:76:ec:7f:fb:51:ba:27:d6:e5:f4:3a:6d:e6:
         d7:26:9e:49:e5:d6:eb:fd:e9:86:f1:61:63:dd:60:61:b6:b2:
         df:44:a7:30:74:67:06:54:93:48:5d:32:71:78:b6:7b:69:6e:
         35:c3:a7:6f:b5:07:84:5d:02:f5:71:9a:c5:38:38:58:9c:05:
         74:a3:70:74:ad:a5:fb:08:fa:57:63:a5:5b:c4:78:b0:8d:de:
         40:64:c2:1a:44:28:4a:6b:9c:2a:2a:c0:3c:55:b7:ac:0e:03:
         4d:3e:6c:a6:b5:05:ca:8f:0d:45:71:7f:12:35:78:a3:af:8d:
         81:d3:b9:80:99:97:0f:27:8b:d1:cb:ca:b9:e2:ce:d3:a3:8b:
         3d:dd:e0:63:b1:20:29:10:15:18:e4:83:08:3c:40:8e:c4:bb:
         10:cb:75:9d:4b:1b:66:3b:aa:ef:3c:1c:92:d9:74:b0:c2:ac:
         fd:62:4c:bf:7c:0c:60:e3:ae:b7:3c:c0:ec:dc:f8:c3:20:d0:
         69:02:82:11:af:42:c1:3a:d6:03:8f:cf:40:8a:8d:53:f7:7a:
         e5:a4:8e:79:65:10:5b:3f:ab:0c:a7:cc:1f:76:49:ea:62:df:
         24:3f:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:15 2025 by rpki-client