Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
File:                     Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft (raw, json)
Hash identifier:          X78VCvZ+GQzI0yjIGn8G7Nr7sTFVwFofPgPRvyUEcPs=
Subject key identifier:   3A:AE:42:B3:11:06:01:16:74:F8:03:D5:49:29:14:E2:6F:2A:21:03
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Certificate issuer:       /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial:       0198D5F177D1B45886E58C38C665FBE103DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
Manifest number:          0EF2
Signing time:             Sat 23 Aug 2025 08:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:28 +0000
Files and hashes:         1: FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa (hash: u+b9OZLTWgc4ylA+6a19u9K+8czzP5mhCM7NuK4dmF4=)
                          2: Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl (hash: XAWn0VfXor/rFMIp/79nPISfY2kFkPN/pH3po/sgepw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:77:d1:b4:58:86:e5:8c:38:c6:65:fb:e1:03:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
        Validity
            Not Before: Aug 23 08:00:28 2025 GMT
            Not After : Aug 24 08:00:28 2025 GMT
        Subject: CN=3aae42b31106011674f803d5492914e26f2a2103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:17:f6:73:df:09:e8:4f:e9:50:05:e6:ad:
                    27:e9:f3:77:4b:55:f1:a6:a6:09:c8:a9:c3:0b:6a:
                    bc:1f:06:6a:a8:97:db:cd:95:ac:05:f1:9e:5f:cf:
                    6a:c9:8f:ee:2d:bd:d3:2a:1a:bb:f0:0f:74:4a:30:
                    4c:9a:72:99:d7:46:ed:0e:02:4f:e0:03:14:1c:32:
                    02:a8:2a:41:cb:bd:37:5f:80:f1:dc:14:e9:37:7a:
                    3e:79:f0:36:e7:6b:a3:87:1f:03:c2:ae:46:2b:2f:
                    f9:1a:de:e5:06:09:f7:18:64:b3:82:e7:60:8d:11:
                    25:02:ae:fd:c6:2f:a1:3b:c0:e7:76:de:cf:05:85:
                    ef:a2:ce:64:5c:6a:c5:27:9c:d9:68:e5:4a:75:3b:
                    76:f6:e4:2b:57:51:ef:d9:10:ce:25:89:2d:e7:68:
                    b2:ac:8f:f7:77:b0:bf:e0:4f:3b:d3:20:99:fa:d4:
                    e8:2e:86:79:c0:91:28:36:b8:48:dc:b9:9b:a5:46:
                    ba:ca:25:00:fb:3d:43:11:74:f3:e4:a2:31:f8:76:
                    e5:48:41:fe:af:d2:28:2c:f4:6f:cd:e4:8a:8f:a7:
                    32:06:76:5c:57:a4:5f:a4:66:4e:14:e1:29:e3:fa:
                    bb:9a:e7:26:67:2e:60:b4:cd:b7:e4:85:a2:66:0b:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AE:42:B3:11:06:01:16:74:F8:03:D5:49:29:14:E2:6F:2A:21:03
            X509v3 Authority Key Identifier:
                keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:0e:96:7d:0a:c1:e3:40:59:f0:18:c7:75:68:ce:c5:eb:5c:
         bf:91:69:d0:84:04:95:df:1d:5d:15:ac:90:2c:c8:32:ed:61:
         8d:1b:57:99:b0:c8:3c:70:5d:52:ba:fe:47:4b:42:ef:6b:1f:
         2e:34:bd:2a:87:03:0b:99:22:b0:6d:47:a7:b8:55:80:c4:75:
         24:72:01:8f:59:0b:c7:3f:26:5c:10:5d:7f:52:d0:aa:c1:00:
         9e:96:47:a3:07:e2:6e:dd:29:1a:fa:df:69:d5:3e:de:e8:ba:
         7f:da:c1:32:8d:5c:60:d3:c7:b6:e8:4c:ea:7f:cd:13:50:17:
         e0:5f:d8:da:8c:a4:d4:cc:ad:ec:4d:5b:62:e2:7e:84:19:d3:
         fc:45:1c:54:a6:3a:d8:9d:e0:fa:b8:44:c8:34:cb:b5:e9:dd:
         cb:92:fa:c2:e8:07:9f:36:02:a2:80:12:e7:54:db:b8:38:88:
         35:5b:8c:55:18:34:86:04:f1:96:b4:38:a0:78:e9:7d:39:e1:
         c7:99:28:0a:65:f9:1c:17:e7:13:88:39:2f:4c:6a:49:df:99:
         50:af:ec:2b:65:b8:99:66:de:2e:c6:e0:a9:9e:d5:f9:e1:a2:
         72:2f:08:4f:88:7a:81:0d:49:ce:95:39:48:3c:67:25:c6:6c:
         84:aa:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:35:42 2025 by rpki-client