Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
File:                     PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json)
Hash identifier:          uEUYS1nR829VmqRvJtlJ52ax5IOfnIfAZyjp+SBSoWU=
Subject key identifier:   11:95:24:9F:72:E0:4D:4A:78:DF:86:81:C5:B5:4B:4F:03:D9:2A:20
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Certificate issuer:       /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial:       0198D70616872045A442A4B2D285F50D7AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
Manifest number:          15AA
Signing time:             Sat 23 Aug 2025 13:02:37 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:37 +0000
Files and hashes:         1: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: wkaYQrPNsV3tK0sP6ANwYrdRYBDrd1+INKiHboILUrQ=)
                          2: wgfEWoteV0ugJhJFFY5StCpYga4.roa (hash: Bu0QgGIHWGxscJbgnF2zr/rd8qdTFWvwHrlBzc8O9aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:16:87:20:45:a4:42:a4:b2:d2:85:f5:0d:7a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
        Validity
            Not Before: Aug 23 13:02:37 2025 GMT
            Not After : Aug 24 13:02:37 2025 GMT
        Subject: CN=1195249f72e04d4a78df8681c5b54b4f03d92a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:17:57:92:be:da:bb:9c:79:f1:3f:c0:c9:
                    a5:07:97:46:aa:d2:bc:3e:bf:0c:24:9a:b2:01:f8:
                    09:66:53:2e:47:ea:d0:af:cc:0e:28:7c:10:43:a8:
                    2c:56:f4:99:69:49:a5:49:24:94:1b:73:95:02:e5:
                    bf:aa:2b:f8:9d:a2:7a:cf:c5:59:79:2c:f7:1e:91:
                    a4:6c:ba:7d:d7:88:ce:33:5a:4b:5e:a9:1b:70:d3:
                    f1:70:59:1d:2e:49:d7:c5:6d:d6:6a:d5:be:e8:f7:
                    d2:61:75:d6:fd:a3:07:8a:63:9b:a3:68:2d:c3:55:
                    88:c4:33:ad:ed:08:2a:31:32:00:b7:1a:59:05:ed:
                    ec:d5:f8:68:d4:18:c1:1d:0a:2d:42:b8:fe:5b:00:
                    ee:41:3a:46:da:e4:bb:fd:95:c6:90:93:c1:6a:1f:
                    a0:1d:f7:7b:8a:c6:87:ee:4a:b8:27:9f:4a:65:58:
                    8f:17:fd:e9:d2:b5:55:fc:de:34:38:0b:ca:08:5d:
                    20:7e:d7:ac:80:73:bb:86:0a:cb:26:60:36:11:6b:
                    25:6f:07:d9:53:3d:07:0d:a0:b3:dd:66:18:84:be:
                    7c:db:79:96:d8:77:ea:c6:a4:66:ae:24:35:73:27:
                    47:ed:ab:11:28:23:6b:cf:48:07:71:c9:30:c8:5c:
                    7f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:95:24:9F:72:E0:4D:4A:78:DF:86:81:C5:B5:4B:4F:03:D9:2A:20
            X509v3 Authority Key Identifier:
                keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1e:45:59:6d:98:5e:3b:f2:d9:49:6c:3e:e3:fc:3b:b0:85:
         3d:1a:96:af:0d:fb:30:86:4c:76:36:37:5f:81:f5:ae:da:fd:
         9f:4c:06:ff:8c:85:78:6d:96:d3:af:c8:ae:86:28:38:0a:09:
         6c:12:22:c4:60:ef:e4:5b:a9:04:89:a5:0e:f6:d8:d5:1f:f2:
         35:7e:03:ad:63:46:15:0f:02:ea:75:9c:3c:dc:30:ea:47:54:
         02:73:42:34:7b:e9:1e:a9:47:77:ee:47:74:0e:7f:57:a0:f5:
         01:b3:2f:40:ea:f8:ee:37:a0:94:f6:ab:dc:e0:99:1c:ac:34:
         e0:7f:96:41:fb:9a:ba:b9:ac:cb:0f:f4:66:6d:23:05:89:24:
         5e:4d:b0:62:ea:56:c1:d5:23:13:bf:e8:0e:91:59:11:26:d1:
         67:3c:b1:4d:73:4a:b4:11:9f:ef:3d:c6:9d:10:af:92:14:b2:
         a6:82:1c:9b:81:fe:9d:d4:e0:02:8b:20:70:e2:ed:d8:9d:9f:
         33:85:0d:6b:b5:fd:a8:f9:f0:43:4e:da:17:2c:30:ad:92:d9:
         c8:f3:d6:2d:21:b7:61:87:a6:04:db:73:b9:d9:2b:d4:dd:97:
         ac:b6:bf:ea:1d:4d:1b:cd:fa:2f:6e:1c:70:ab:c4:a0:fd:25:
         8f:53:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:46:30 2025 by rpki-client