Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File:                     PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier:          nNgR3/nWkmgp+NgWWXgjUcZ+PSB0pqFO5AYsIpRfu9o=
Subject key identifier:   C3:7F:65:CA:0B:5D:D5:AA:EF:01:32:E2:B3:E9:C3:6C:A8:3C:AF:F9
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer:       /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial:       01988BB3F054E62D633D4266A2AD1D1A8356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number:          13F4
Signing time:             Fri 08 Aug 2025 22:01:22 +0000
Manifest this update:     Fri 08 Aug 2025 22:01:22 +0000
Manifest next update:     Sat 09 Aug 2025 22:01:22 +0000
Files and hashes:         1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=)
                          2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=)
                          3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=)
                          4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: Sx+1HQKEIQ92lYC34wvqFXVCIqCr44UvovI/U/xtF/w=)
                          5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:f0:54:e6:2d:63:3d:42:66:a2:ad:1d:1a:83:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
        Validity
            Not Before: Aug  8 22:01:22 2025 GMT
            Not After : Aug  9 22:01:22 2025 GMT
        Subject: CN=c37f65ca0b5dd5aaef0132e2b3e9c36ca83caff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:54:9a:7b:f0:3d:9c:31:e7:7f:1e:13:b0:
                    64:d4:46:c1:37:27:8c:dd:53:56:f2:6e:0b:da:de:
                    e9:55:6e:9e:f0:45:51:fb:3e:02:cc:d3:60:97:88:
                    f6:23:71:d1:fd:ce:49:35:f7:bf:6c:08:8c:d7:ab:
                    cc:36:a1:2f:03:e4:85:86:c1:c4:dc:47:f5:9e:53:
                    be:4e:31:92:d0:a8:67:c7:2f:1b:5c:5c:ed:f7:e5:
                    18:f1:9b:97:22:9d:0e:0e:04:a3:01:c8:47:be:1f:
                    a6:3f:50:26:e8:b2:ae:92:98:15:84:41:f6:0e:7e:
                    36:51:b3:39:07:03:fc:eb:9d:96:a8:b1:0d:9d:8c:
                    ea:76:25:84:8f:6e:33:8a:9f:36:1e:18:bd:10:61:
                    bd:66:ca:58:0c:c6:56:63:a5:83:63:c7:76:78:a7:
                    5a:56:8f:7b:f5:15:2a:ed:5e:e6:4d:e9:25:cb:cc:
                    2c:a0:a6:d7:f8:24:7e:71:c8:dc:89:ba:c0:ab:91:
                    fb:b3:c0:81:d9:c3:d6:6b:25:ef:7f:17:26:cd:88:
                    c4:a7:f1:53:16:36:98:bf:11:0e:0b:8b:a3:07:fd:
                    02:53:8d:db:7f:29:36:e2:61:05:13:68:d7:88:34:
                    11:58:2b:42:3e:6a:b2:99:39:2d:56:85:6a:b0:bf:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7F:65:CA:0B:5D:D5:AA:EF:01:32:E2:B3:E9:C3:6C:A8:3C:AF:F9
            X509v3 Authority Key Identifier:
                keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:3b:82:cc:8b:51:75:e1:8e:c9:74:4a:69:a1:43:cf:b1:da:
         a0:39:1e:61:f9:81:52:d9:5f:b0:43:0e:8c:03:ed:34:6a:94:
         22:8c:48:e2:39:a7:11:cc:04:98:5c:10:54:23:79:47:e0:ff:
         36:56:67:1a:c7:a7:c3:46:f3:31:c3:a4:7c:5e:c0:a8:11:1a:
         d6:af:2e:e8:33:07:c2:72:b7:30:8b:0e:4f:9f:73:e7:12:0f:
         de:e6:bf:87:f5:07:b7:0b:19:12:63:aa:76:5d:73:2c:b8:c9:
         99:a4:70:0b:3e:33:ee:ab:4f:07:17:8c:5f:5d:4b:c9:7e:8e:
         c9:96:86:4a:2a:38:48:4d:23:06:99:8d:07:4f:b3:d3:1b:04:
         7d:0f:2e:3c:c7:4d:df:c5:7a:c6:35:34:22:52:69:0a:50:4f:
         b3:7b:7b:38:6a:2b:83:44:38:6b:e0:f4:06:23:0b:89:c5:5a:
         99:24:73:50:e8:1c:b5:79:f1:5a:9d:27:1a:b5:15:2d:f9:37:
         fd:2c:61:25:0f:d7:84:c1:e4:bb:6a:9b:ee:02:57:d7:13:41:
         5d:0b:9a:31:9d:8a:12:ed:45:94:65:8c:ef:10:78:b4:4a:24:
         fe:7d:b2:02:ba:83:c2:49:b4:0d:8e:e4:9a:3e:f8:a8:3d:36:
         cb:0e:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:00 2025 by rpki-client