Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File:                     PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier:          FzVW3aNQa5dRclID8QOVFNYoQkzQ2tJoQ/cJBz+X1Oo=
Subject key identifier:   D8:E3:57:D8:95:7D:90:A9:B0:1A:DF:BA:D9:D6:B8:03:81:2D:18:38
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer:       /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial:       0198D5BC085AC449377B064F72AA6A1B04DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number:          0A8C
Signing time:             Sat 23 Aug 2025 07:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:06 +0000
Files and hashes:         1: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: w2SClaqsOedGepeUjDm7USgtn2UdWpW4bNw8zv7IV28=)
                          2: flDyEgY09JcTncHiiRnZ44dc3Jg.roa (hash: U/d1Btmo0ndLftNS6W3aEjJNMxknGgzWNSoSOFVtfm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:08:5a:c4:49:37:7b:06:4f:72:aa:6a:1b:04:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
        Validity
            Not Before: Aug 23 07:02:06 2025 GMT
            Not After : Aug 24 07:02:06 2025 GMT
        Subject: CN=d8e357d8957d90a9b01adfbad9d6b803812d1838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:71:5d:92:7c:63:8a:4b:d3:f7:0f:3f:9f:
                    93:fa:06:2b:7b:2f:d3:bf:1a:2c:54:6f:ca:bc:54:
                    86:26:af:c2:25:5a:0b:47:68:75:8b:b6:52:ad:2b:
                    49:2a:a6:ce:2e:fd:d1:5b:9f:b4:32:81:70:7c:06:
                    e4:8d:01:58:55:e6:8e:35:d3:f7:e0:59:a6:b8:ea:
                    1f:7d:c4:03:2e:b3:21:2c:7f:14:ef:c9:75:1a:80:
                    27:ec:4f:b4:b8:f5:aa:0f:c1:a1:35:1d:bf:eb:19:
                    22:b9:91:f4:65:fb:9e:88:58:fc:81:58:2f:d7:33:
                    b5:40:c9:ab:12:e9:5d:26:37:27:1e:34:05:ae:ba:
                    37:93:6e:19:ca:c7:18:9f:34:94:de:00:00:77:5c:
                    d0:ee:de:ce:c5:01:bf:34:70:16:67:56:ea:e9:a0:
                    18:14:ee:ca:a6:09:3c:e9:61:ca:1e:13:14:eb:3d:
                    31:c5:26:fb:f6:3f:09:cf:13:d2:93:c5:f5:c3:a8:
                    e9:96:a3:21:dd:36:73:68:89:d6:73:17:3d:5b:68:
                    76:cb:86:ca:82:4e:3a:eb:c4:02:46:5b:42:13:57:
                    f5:c5:af:b2:83:df:81:f5:80:53:0b:75:83:5d:83:
                    12:5e:05:e6:b6:ae:8c:50:6c:d1:a2:8c:04:40:bb:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E3:57:D8:95:7D:90:A9:B0:1A:DF:BA:D9:D6:B8:03:81:2D:18:38
            X509v3 Authority Key Identifier:
                keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:26:2d:52:30:f1:e5:63:93:da:de:8b:2f:ad:95:63:c1:91:
         70:ba:7e:e8:ff:dc:b3:2f:ac:7a:91:10:32:24:3d:b6:53:b0:
         20:9e:40:04:2c:0f:ad:bf:5c:05:73:68:a7:da:cf:cd:5f:09:
         1b:43:b0:2b:d8:1e:ea:74:a3:77:80:99:37:9a:f7:eb:27:3d:
         d9:3b:eb:5b:b7:18:49:0c:40:83:15:de:59:8d:a8:69:02:b2:
         ec:f5:c3:b0:10:33:3f:60:61:78:69:c9:fd:18:df:f9:5a:d4:
         a5:e2:88:73:04:57:53:eb:80:51:a8:3d:7a:12:fa:21:11:92:
         b7:db:6c:69:25:87:a9:ab:12:30:0a:19:33:de:c4:73:fb:62:
         25:2f:04:b0:fe:6c:dc:97:a2:12:31:7c:b4:78:53:fb:52:c6:
         75:e6:60:df:22:54:d2:9b:6f:ca:cb:7d:98:75:bd:72:dc:59:
         f0:1f:cd:ec:3a:3e:ec:a7:e3:85:20:84:62:1b:36:41:89:36:
         06:af:b2:9f:4c:96:9c:88:f7:26:d9:57:6d:06:32:ad:f3:85:
         ef:00:2b:7b:7e:6d:3f:b9:20:83:4a:f5:e6:a1:56:b5:c3:cc:
         d1:3a:6e:11:05:b0:18:38:5d:8b:ef:15:c0:51:92:9f:68:40:
         72:92:73:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:46 2025 by rpki-client