Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
File:                     PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json)
Hash identifier:          6T6N0J+0kk06p2Fc6LjfupOwuOOl8Z6xnir5zZPfIYc=
Subject key identifier:   10:98:B0:73:43:C0:7C:C2:3A:20:79:A6:B2:21:8C:2A:1F:A7:5D:25
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Certificate issuer:       /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial:       0198D65FCED645ED27B4FFB4E1D0B3136288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 10:00:59 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:59 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:59 +0000
Files and hashes:         1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: F4pIqD2xb4ccmsBwYV/PABHmHGt0K2dsDqadLOgVMbA=)
                          2: nuDK-TC5cc4Dv5m-g_HwBrvB2yM.roa (hash: HAIc8rXtzi2UFMvUxwUOqrhRhKG5mpUAWpR1IBhhhmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:ce:d6:45:ed:27:b4:ff:b4:e1:d0:b3:13:62:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
        Validity
            Not Before: Aug 23 10:00:59 2025 GMT
            Not After : Aug 24 10:00:59 2025 GMT
        Subject: CN=1098b07343c07cc23a2079a6b2218c2a1fa75d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:5e:52:1d:58:a3:7f:e7:6f:b9:73:ea:51:
                    c9:9b:44:60:73:16:58:f2:ba:3b:18:11:5e:fd:d8:
                    86:de:fa:7d:87:70:5b:b0:ef:0b:44:d5:3e:54:3c:
                    52:e3:fd:7a:6e:5b:23:66:db:b0:38:b3:d2:ef:c8:
                    17:67:47:24:b8:93:6e:a4:8b:be:65:e4:6f:d2:0f:
                    7f:8c:08:47:93:6b:c8:7f:0b:99:57:a9:42:44:ea:
                    a4:7e:fd:d1:f8:79:c2:89:1c:d1:86:25:22:94:61:
                    ef:b4:c3:63:34:d1:d4:14:f7:60:53:14:86:7b:41:
                    4f:a9:be:38:81:a7:a8:ad:e7:52:3c:6c:6d:ce:d0:
                    e1:4b:a5:72:62:7d:04:0c:fc:e9:15:ba:56:37:16:
                    f3:71:9c:b9:29:8b:f6:f3:63:28:ed:c6:b4:40:aa:
                    81:30:3c:a7:93:81:fe:e9:60:83:f9:02:74:61:89:
                    f3:ce:e6:18:76:1e:fb:c0:33:d0:a3:38:32:97:29:
                    0f:7f:b1:fe:88:b3:af:d0:05:56:bf:b3:ca:2c:81:
                    45:d8:98:e2:b2:b2:ea:8f:2b:92:f6:a3:8d:8c:1e:
                    4a:7f:1b:1a:83:a5:dc:cc:40:1f:cc:fc:0a:9b:85:
                    36:37:63:f9:36:87:b9:84:13:3c:f3:b8:bf:12:37:
                    de:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:98:B0:73:43:C0:7C:C2:3A:20:79:A6:B2:21:8C:2A:1F:A7:5D:25
            X509v3 Authority Key Identifier:
                keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c9:2d:5e:85:e3:79:0e:66:2f:d1:86:b8:9d:3d:79:87:3d:
         a7:56:a7:c5:c0:73:2a:f2:15:b6:8e:d6:6a:9b:4c:8c:ef:c5:
         33:5e:e3:c4:6a:74:66:9e:b2:9e:fb:e0:cd:ad:19:bf:11:d9:
         46:61:39:b6:ae:90:4b:9e:94:45:2a:c0:0e:25:4f:14:7b:85:
         70:a1:a6:13:a8:c9:85:66:de:a0:77:4b:fd:52:e5:4e:af:31:
         f9:5c:69:3e:15:d3:b4:71:40:0e:fb:e7:df:d0:c1:1f:df:97:
         68:5c:ce:9d:12:99:ff:5b:75:79:dd:b0:46:30:fe:a0:ce:a0:
         2e:06:0f:9a:b8:7a:57:74:b1:cc:eb:34:4f:b9:21:de:4e:1c:
         45:a5:54:88:5f:55:a3:20:ad:70:8a:49:ec:29:9d:5c:f3:50:
         50:f9:f5:80:ef:23:0d:af:ae:67:1c:c2:be:73:ee:f8:2c:05:
         f7:fa:ec:8b:91:9a:7e:ab:f7:69:31:64:0f:42:a2:3c:2f:b4:
         91:fd:58:48:c5:f5:1d:ec:16:46:a7:5e:4f:7b:f4:74:ce:58:
         0d:be:6e:83:ed:8a:ce:aa:e6:8f:ff:a2:70:07:6b:56:10:ea:
         e4:2e:6b:ea:0a:fd:fe:cb:e0:e3:d4:8f:a0:06:37:a7:57:63:
         bf:d9:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:28 2025 by rpki-client