Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
File:                     pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft (raw, json)
Hash identifier:          NwWrCIayKozpIJOBfAEdn0Y29s/MHv1gQG1/kM/LHTQ=
Subject key identifier:   24:A3:D9:A5:B4:F1:1E:93:4E:E9:C1:DA:22:43:C8:13:94:CA:70:33
Authority key identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41
Certificate issuer:       /CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
Certificate serial:       0198D4E08A5D970A572139E1A2B1B0B75952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
Manifest number:          147D
Signing time:             Sat 23 Aug 2025 03:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:21 +0000
Files and hashes:         1: pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl (hash: WUpoAJMS3m43GjC+ForNQ56PodZUzfS6VwnP1HsJ8p4=)
                          2: vzmyNrlx12Of6nkhjpCUrNuMnE0.roa (hash: GZnGfQJ22BwvGawBRyPMAw4FcsQFgdQkm7oclrkMSK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:8a:5d:97:0a:57:21:39:e1:a2:b1:b0:b7:59:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
        Validity
            Not Before: Aug 23 03:02:21 2025 GMT
            Not After : Aug 24 03:02:21 2025 GMT
        Subject: CN=24a3d9a5b4f11e934ee9c1da2243c81394ca7033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:eb:87:ef:1f:d4:74:1f:50:2d:55:81:70:60:
                    cb:49:b6:0f:0c:31:4c:7d:7d:c7:8c:8c:8c:c4:df:
                    be:c8:6d:cf:86:e1:00:1b:ec:df:20:df:4c:07:80:
                    31:b9:80:7d:44:46:51:df:30:7c:c4:f0:18:2c:e6:
                    94:1f:ae:d7:ec:49:eb:c3:b3:ca:34:a5:0f:91:e3:
                    91:3b:b7:6b:06:ae:d1:f8:26:54:37:7a:12:6a:8e:
                    9f:21:65:18:25:e4:2b:53:d2:d4:07:c8:7e:46:2d:
                    68:a1:b8:a6:2d:8c:77:74:99:bf:34:46:d5:bb:6f:
                    90:4a:34:3e:d8:ee:10:9b:ef:07:f5:d2:58:e9:92:
                    74:55:23:64:30:90:fc:c5:f9:00:a4:c1:aa:bf:a9:
                    11:f1:a1:e0:56:8a:4b:24:7d:e0:ad:11:64:96:03:
                    37:6d:6a:2c:03:35:a3:e8:fc:4d:63:80:cf:29:08:
                    6d:5e:47:d7:d4:67:e5:e8:16:02:e1:4f:da:6b:59:
                    13:26:2e:3b:9f:b3:68:6a:50:50:fa:57:dd:35:7c:
                    2d:83:96:52:5b:14:c9:bd:94:e2:e1:89:19:bf:57:
                    5c:9e:84:4c:71:08:c9:01:9a:26:91:f6:77:15:d0:
                    6c:2f:07:1e:75:09:6a:7c:08:9d:09:62:00:13:e8:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A3:D9:A5:B4:F1:1E:93:4E:E9:C1:DA:22:43:C8:13:94:CA:70:33
            X509v3 Authority Key Identifier:
                keyid:A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0f:2e:fc:0d:14:fb:67:4a:8a:3b:de:70:04:4a:3d:cf:1e:
         d3:8f:47:a7:1f:1c:b1:99:9d:81:d2:bc:39:d9:3f:80:a2:9e:
         3f:1a:53:05:96:d6:b3:2b:42:38:87:b5:ad:b5:9d:89:15:d2:
         b8:c4:6a:41:ba:51:b4:2f:fc:82:d6:94:88:bc:d5:02:07:8f:
         57:37:1d:1f:4f:7d:06:0a:da:26:8f:5c:02:ad:26:45:93:20:
         b1:00:14:98:86:e7:37:01:ae:9c:13:fe:d8:ac:32:78:41:be:
         62:90:c8:1b:b9:1f:ad:34:84:68:ce:d6:51:82:78:d0:46:54:
         1e:72:f1:0d:b3:39:eb:59:61:2b:d5:66:09:1b:69:1d:7e:88:
         2b:c4:60:29:c5:4d:85:8b:62:92:29:62:61:2c:1a:ad:f7:60:
         3e:bb:46:a8:b4:00:d6:f3:22:5b:85:bb:37:ce:e3:74:ea:ce:
         fb:86:67:ed:2a:52:35:39:11:fa:20:99:39:4d:6c:b7:08:36:
         3b:6d:a8:79:26:eb:b2:77:48:c5:fd:17:5c:18:b0:eb:14:50:
         7a:91:ca:75:e4:d4:68:95:68:bc:ab:66:d7:23:4d:2e:c5:4d:
         1f:0c:7c:87:07:4d:82:eb:40:5b:06:22:48:de:6d:dc:10:ae:
         d1:22:c8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:52 2025 by rpki-client