Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File:                     PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier:          /et8wAHJUX8BxQO605Yh5/IAjEr3WvqwcMOIbvp5vMM=
Subject key identifier:   5A:19:1A:7A:10:EC:AC:C8:66:55:04:95:4D:0A:77:52:16:2D:85:7D
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer:       /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial:       0198D4E07C92C5A2B150A2A6F2871C7FEFB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number:          07FF
Signing time:             Sat 23 Aug 2025 03:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:18 +0000
Files and hashes:         1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: mkDuifCEBD7MnHOhx0Xn5kkkt9pC3IW9fVfU1r7VRCg=)
                          2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:7c:92:c5:a2:b1:50:a2:a6:f2:87:1c:7f:ef:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
        Validity
            Not Before: Aug 23 03:02:18 2025 GMT
            Not After : Aug 24 03:02:18 2025 GMT
        Subject: CN=5a191a7a10ecacc8665504954d0a7752162d857d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:50:14:d2:35:37:c3:62:a4:1d:76:db:e4:
                    a3:38:1a:3d:23:64:ee:56:d8:72:8d:bb:c7:f0:c6:
                    9f:8e:91:26:71:60:4a:52:df:b4:6c:2a:9a:0e:1c:
                    95:3a:b2:54:76:4d:34:08:c3:4c:47:0d:14:2f:ee:
                    05:3c:5c:d7:00:51:59:b1:72:bc:44:b3:30:9b:ff:
                    80:28:67:6f:00:5e:33:3b:24:7d:b7:f3:ac:8c:da:
                    12:00:12:1e:33:5f:18:9f:2e:0a:4e:b6:fc:f6:6d:
                    be:5c:bd:bc:22:48:12:e9:14:be:94:3c:10:3d:2c:
                    65:b4:e3:cf:e2:00:ca:26:81:1d:70:dc:9f:0a:6a:
                    09:98:53:ae:ab:d7:be:9c:1c:74:73:6e:41:58:68:
                    60:8b:f2:32:06:e2:ae:f1:00:7a:94:91:8a:b0:5d:
                    ec:eb:1c:56:c1:6e:9f:c7:7e:16:f5:1c:09:85:1b:
                    43:93:c4:19:f2:19:eb:1e:72:de:36:98:96:ba:27:
                    13:c4:73:83:fd:19:a9:a7:1c:fe:14:ca:42:d8:58:
                    1c:29:4e:d1:ff:67:07:73:ad:90:73:34:06:ab:ad:
                    30:bb:49:aa:b3:9d:b1:0a:c5:da:00:6b:7c:5b:40:
                    0d:19:ec:d7:a4:7d:7f:c8:40:bd:83:da:f5:1f:0c:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:19:1A:7A:10:EC:AC:C8:66:55:04:95:4D:0A:77:52:16:2D:85:7D
            X509v3 Authority Key Identifier:
                keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:3c:6b:ec:f2:61:8a:6c:11:9d:62:54:db:32:18:3a:fd:81:
         0a:a7:b1:58:08:e8:8a:63:b9:57:41:29:e0:62:25:2b:c4:58:
         c9:dd:55:28:0d:b3:9f:fc:88:d6:4c:03:e1:fc:4b:bf:86:68:
         01:08:f0:6a:38:c0:f1:02:59:36:a7:db:53:c7:c1:f8:4f:6b:
         3a:2f:87:53:58:be:2c:50:ce:b8:f2:c3:95:cf:ad:ec:ef:9b:
         0a:56:c4:52:51:cd:62:5c:3b:5e:2a:58:62:d6:0a:fa:34:5a:
         a0:9c:5e:82:bc:09:64:df:eb:82:b0:bb:9a:62:35:51:ed:c3:
         d0:0a:57:fb:c9:6e:3e:12:6b:af:e2:d0:d6:95:e7:83:38:d0:
         65:e0:e9:4f:ac:b5:be:1a:7a:45:6f:98:e4:86:6e:30:08:80:
         06:a0:d2:1f:88:a3:01:6d:d8:54:8b:3e:c5:67:12:2d:cb:c1:
         5b:65:54:8c:bd:77:1f:80:95:ce:6a:16:58:ea:88:b2:fe:58:
         7e:cb:61:ef:67:83:6a:cc:84:86:c2:95:a5:b5:42:da:e7:e3:
         a9:54:7b:5f:69:ac:8b:5d:ac:e6:31:9e:19:18:8f:aa:3a:c9:
         8c:d6:2a:de:c2:26:0e:76:a3:9f:d6:ee:b4:66:22:a6:69:a3:
         10:91:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:01 2025 by rpki-client