Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File:                     PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier:          wl6hHbF++epFIENQbz2Qr3XQ9sAFcIwYQtMpOgxMzPY=
Subject key identifier:   95:D8:14:93:80:63:49:D5:B2:96:F2:D6:B9:1D:41:6C:A9:B6:DC:28
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer:       /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial:       0198D5836E198B5341B75424015BCD5B8472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number:          11B2
Signing time:             Sat 23 Aug 2025 06:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:17 +0000
Files and hashes:         1: 1-dSijOlomtrsqkND-2jGvkzEh1s.roa (hash: vAMtZ2jKMP2IiV0cN+Yk3wrsh8M5v/wTw365APu16Sc=)
                          2: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: gUTUVUrcP6LcFxdV95GcE/bLp5D7nVZMugEgVrMfMEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:6e:19:8b:53:41:b7:54:24:01:5b:cd:5b:84:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
        Validity
            Not Before: Aug 23 06:00:17 2025 GMT
            Not After : Aug 24 06:00:17 2025 GMT
        Subject: CN=95d81493806349d5b296f2d6b91d416ca9b6dc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:2d:45:07:a5:a2:3a:2a:da:2c:6f:4a:ff:
                    a3:70:55:fb:95:54:ca:6e:62:73:44:5a:aa:13:33:
                    4c:be:dc:44:12:04:00:a5:e2:6e:07:c8:a1:34:61:
                    44:96:8d:8a:e8:ed:de:06:ab:45:90:f8:2d:02:37:
                    a8:07:59:b6:75:b2:60:fc:a9:d5:8b:a1:de:f5:a5:
                    6f:7c:74:8f:d5:a9:69:40:19:fb:6f:36:18:28:d6:
                    0c:7c:2d:09:a9:07:36:fa:75:db:61:8b:b0:f6:76:
                    f7:c5:52:5e:16:2c:b2:b4:5a:5c:fb:f4:68:69:aa:
                    1a:37:ce:08:dd:41:55:81:ff:9f:9b:ee:57:d0:82:
                    80:7a:ec:ab:39:04:7a:b2:b7:c3:1f:eb:b4:b7:9e:
                    22:0a:0b:b9:e4:18:2b:02:d4:a2:7c:cd:34:a2:4c:
                    9f:a1:2a:68:e0:76:12:ff:23:6c:a0:b3:49:a9:2c:
                    ef:c3:8f:f5:d0:91:c8:a6:60:01:d0:12:7c:e4:6b:
                    98:24:aa:c9:b7:66:ec:08:ed:f5:24:f2:52:e0:86:
                    aa:19:36:76:3b:5b:14:2c:f7:ed:c9:2a:5b:e1:f7:
                    5b:2b:dd:da:75:72:43:f6:80:9b:a9:80:46:75:f3:
                    3b:76:87:8c:8f:ee:a2:8e:9f:67:86:41:6c:4e:76:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D8:14:93:80:63:49:D5:B2:96:F2:D6:B9:1D:41:6C:A9:B6:DC:28
            X509v3 Authority Key Identifier:
                keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5f:68:ee:e4:18:50:8f:56:23:aa:9c:35:c2:08:43:4f:18:
         b1:1a:94:a7:c8:14:03:02:ba:c2:75:60:98:eb:77:59:8e:8d:
         15:94:07:48:f5:d0:bb:e7:b8:84:ce:9d:56:46:d3:1c:6f:79:
         91:55:cc:c0:3f:a3:b4:db:f8:37:d5:2a:45:85:5c:63:1d:c4:
         ea:43:ab:5d:27:2d:4b:b0:f1:bf:80:47:3f:a3:f8:ed:a6:f8:
         f9:ca:ca:b7:1d:79:cc:29:a4:99:2e:bc:35:e7:50:25:05:16:
         3a:f5:2f:7e:3e:3e:ac:ab:f3:16:3b:f9:0a:47:93:df:36:0b:
         73:36:d9:df:ff:50:4e:ad:b2:22:34:70:72:ef:74:b9:3d:af:
         ca:d6:19:aa:1d:d1:87:4c:81:5f:7b:b6:8c:50:2a:00:b1:28:
         66:fb:3c:e5:2c:e1:36:52:89:13:dd:5c:be:4b:b2:ea:5f:c5:
         ea:e3:de:4a:82:82:d8:bb:75:fd:68:f6:2b:96:23:b0:cc:d7:
         2d:89:8e:bd:95:e9:d3:da:f1:c0:ab:d4:03:62:0c:ab:f8:cb:
         d5:15:5c:9a:9c:f0:39:56:f6:11:93:d7:27:25:96:57:1b:c4:
         f3:ab:14:eb:2b:f7:e6:c4:26:29:fa:93:2c:7c:d2:43:21:75:
         dd:51:df:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:33 2025 by rpki-client