Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File:                     PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier:          aE9m+wc+4VyyezeeicojNGapIbUFxSDxm9+qEgsifsU=
Subject key identifier:   D1:C0:CA:2B:10:D7:96:BD:92:12:37:B0:23:6B:A6:C7:19:0A:BD:C6
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer:       /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial:       0198D4740BFF67B0325142EFBB7C50177C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number:          07BB
Signing time:             Sat 23 Aug 2025 01:03:51 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:51 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:51 +0000
Files and hashes:         1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=)
                          2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: vfwjDNWRLk0a5eN1tL0t78aoYF1d6M5GxNRHUHwxH6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:0b:ff:67:b0:32:51:42:ef:bb:7c:50:17:7c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
        Validity
            Not Before: Aug 23 01:03:51 2025 GMT
            Not After : Aug 24 01:03:51 2025 GMT
        Subject: CN=d1c0ca2b10d796bd921237b0236ba6c7190abdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:2e:80:a2:94:6e:76:f2:90:3a:fe:79:84:
                    78:29:0d:a8:3f:f4:d7:b2:23:89:22:a8:f2:45:a9:
                    e3:8a:45:15:09:e3:0e:2c:76:45:cc:b9:d2:ba:95:
                    6f:32:94:10:55:a6:d1:e8:a1:92:bc:4f:f9:b4:91:
                    bf:c8:7a:ab:9c:9a:15:fc:8e:e2:a2:e2:fb:94:ae:
                    1a:df:80:b8:fd:23:c3:03:1f:f0:c2:31:e8:dc:e5:
                    b2:89:45:e3:3c:b3:79:4b:93:7d:10:9f:d4:d6:19:
                    40:42:25:cb:cf:3e:fa:3d:4e:63:a3:2e:96:7a:99:
                    7a:e8:27:f9:94:55:6f:96:4f:b0:c4:47:e3:63:de:
                    21:99:af:d1:a8:ae:98:e9:39:3b:2c:ec:76:4d:78:
                    2b:e7:cd:5f:e3:4f:fb:8b:cf:5a:a2:e8:9d:50:f9:
                    04:a0:0f:71:bb:18:bd:b7:df:92:ff:8a:4e:c8:01:
                    1b:c5:a8:91:87:f3:7a:6f:d2:c6:31:7f:8a:8c:95:
                    ca:4d:82:99:0d:de:e4:87:04:c7:d5:b7:29:c8:b7:
                    34:a7:50:bc:21:95:fe:63:5d:d0:d7:80:33:65:59:
                    42:64:14:64:e1:18:35:d1:41:71:7c:5f:49:d4:0e:
                    ef:76:cc:3e:8a:06:56:2e:52:f2:db:e9:9b:0b:26:
                    30:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C0:CA:2B:10:D7:96:BD:92:12:37:B0:23:6B:A6:C7:19:0A:BD:C6
            X509v3 Authority Key Identifier:
                keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fb:17:f7:e8:51:78:51:52:3c:03:74:37:d3:a3:ec:f1:b3:
         a8:76:ec:93:f3:53:f8:13:5d:6a:4c:64:55:60:07:12:e9:20:
         7f:42:63:83:16:80:2a:3a:89:e2:f5:fd:ca:32:b4:51:bc:af:
         a0:ff:2c:b1:34:11:4d:37:3e:9e:bb:f9:e5:17:9a:5c:43:37:
         08:4d:81:11:b0:48:8e:7d:65:3b:0e:fb:ac:e6:57:26:bc:de:
         1c:8c:a6:06:b6:80:07:a1:ca:b1:06:ea:d2:9d:c2:56:4f:08:
         08:da:27:13:7e:de:a9:4a:57:c9:49:9a:2c:e2:e4:cb:22:97:
         b4:37:2c:92:bc:de:bd:a2:8a:35:a9:28:f1:bd:3f:d8:05:f1:
         45:3e:f2:eb:7d:d7:14:75:8c:d7:b2:e0:aa:43:c8:fd:54:7d:
         5d:96:85:93:2b:fa:4a:1d:d0:59:75:93:dc:e2:12:57:d0:63:
         11:af:a4:65:1b:6c:c3:9c:27:e2:67:58:c8:c6:e5:0e:4c:55:
         7a:5a:93:3a:1c:b6:5d:00:28:2a:11:59:16:90:36:19:6e:83:
         de:f4:a4:02:d3:ee:78:97:b9:c5:8e:f5:77:01:ea:ec:65:c9:
         4c:1c:11:f5:67:f5:6a:f9:04:91:01:43:b0:41:62:22:73:e8:
         87:68:ee:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:34 2025 by rpki-client