Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
File:                     PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft (raw, json)
Hash identifier:          44dEM+qMsJkZ8D5dCm7UmetIZgaRPF0HuokUUjePhUY=
Subject key identifier:   D2:F0:DB:22:13:05:CB:0A:CF:A7:47:26:CC:AD:EA:C1:D4:3E:6F:0C
Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
Certificate issuer:       /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Certificate serial:       0198D4E0B1925C26498778B6B09CEC485FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
Manifest number:          0F8E
Signing time:             Sat 23 Aug 2025 03:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:31 +0000
Files and hashes:         1: PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl (hash: Hp+/h7HqI/RuG2Vh10ztqY5FHySfwFgHfJlBPMhShtI=)
                          2: he1zzqscDQVrqbAH6ruuBRGptHQ.roa (hash: pIEmG6D6JQGwEUn6Yp/QlQoXb08gkZ0Iha980hmaQQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:b1:92:5c:26:49:87:78:b6:b0:9c:ec:48:5f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
        Validity
            Not Before: Aug 23 03:02:31 2025 GMT
            Not After : Aug 24 03:02:31 2025 GMT
        Subject: CN=d2f0db221305cb0acfa74726ccadeac1d43e6f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:13:aa:99:08:5b:6f:d9:46:cf:2e:f4:c0:
                    40:5a:0f:99:89:ae:c8:3e:f2:d7:de:1c:c0:da:d1:
                    82:a3:af:08:09:70:db:17:4d:a3:a9:f4:cf:35:34:
                    f7:18:20:66:10:de:a9:f8:e6:e1:3a:d9:3e:c2:42:
                    a0:ec:5e:bb:1f:a0:10:49:e0:2b:52:05:e0:16:a6:
                    a3:48:03:5c:a8:65:c8:a8:f2:7d:08:88:a6:47:68:
                    ca:7b:0b:9e:4c:6e:25:66:64:51:05:02:a0:7d:65:
                    ef:42:e3:82:77:ce:c9:1b:a3:d0:db:33:e1:5f:22:
                    7d:82:23:c4:6e:d6:13:b0:0d:65:84:31:29:8e:12:
                    30:fb:f5:4d:8c:eb:7f:13:ad:d3:3d:f3:61:6f:21:
                    67:1b:21:62:79:03:45:e9:80:db:f1:3a:6b:8e:6e:
                    07:ff:09:00:30:ee:bd:a9:57:83:03:7a:53:ed:51:
                    c1:6f:44:4f:35:18:1c:3c:ee:c2:df:72:62:4f:56:
                    15:a1:02:80:e0:43:f4:62:39:d3:e9:df:83:7d:fc:
                    fa:16:12:af:b3:38:92:05:80:61:12:08:af:66:a9:
                    70:69:34:f7:5e:fb:8c:ee:5f:18:00:41:e8:3c:dd:
                    7a:57:2b:1b:9c:fe:c2:37:57:46:78:4a:b7:15:29:
                    60:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F0:DB:22:13:05:CB:0A:CF:A7:47:26:CC:AD:EA:C1:D4:3E:6F:0C
            X509v3 Authority Key Identifier:
                keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5f:25:e7:e8:6f:b9:4c:1a:93:f3:71:af:32:61:ff:44:21:
         f3:98:69:92:95:d4:61:24:c8:d0:90:5d:cd:0c:0b:68:5e:a7:
         18:97:9e:ab:87:41:fc:8c:8c:40:8f:5b:d4:be:5b:63:8c:24:
         99:ee:f4:3a:13:41:98:c1:da:11:6e:69:47:4d:df:41:cd:9f:
         83:42:2f:c0:1f:e6:d2:3e:47:26:40:96:fb:0f:53:24:80:e8:
         15:c3:fb:92:dc:f9:04:cb:07:31:f7:d5:6f:16:0a:5f:82:5d:
         62:10:c6:c2:e0:81:53:4c:b5:3b:70:9f:3f:65:dc:37:5f:ac:
         61:95:db:43:37:1b:b0:50:9e:cc:ef:93:62:e4:37:29:12:b2:
         55:f6:04:9b:08:a2:1d:bc:e1:3a:01:32:11:d9:b1:c0:2c:c4:
         b5:92:19:7b:b4:5d:de:f4:a2:38:19:37:34:8d:21:4c:68:46:
         b3:9c:e3:8f:bc:6c:74:0b:b5:38:b9:e8:55:0a:e9:8f:d5:62:
         36:7a:2b:be:75:e3:75:61:49:be:1a:ed:9e:c3:f2:a2:e9:59:
         5a:17:c5:45:71:2c:6a:ac:fd:1c:ec:44:70:65:9c:c4:f1:9b:
         2b:b4:0f:20:ec:2d:22:8a:70:19:cd:ff:15:4b:f8:c2:dc:9a:
         d6:1a:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:33 2025 by rpki-client