Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File:                     PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier:          vePbMNGlhk7Tx2q/O+eL3bx+v/TQnq+Zjz5t1Q8xkfk=
Subject key identifier:   AD:CF:31:9B:B4:D5:9B:C5:8D:B6:DB:28:F5:03:3A:AD:2A:8D:B3:8B
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer:       /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial:       01987CAE08CA499336C874112057BA5FF80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number:          089E
Signing time:             Wed 06 Aug 2025 00:00:36 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:36 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:36 +0000
Files and hashes:         1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=)
                          2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: YtL9zoyCV5bhf9uBY8PDldASZZdPLElhMnjZtan8Oo0=)
                          3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:08:ca:49:93:36:c8:74:11:20:57:ba:5f:f8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
        Validity
            Not Before: Aug  6 00:00:36 2025 GMT
            Not After : Aug  7 00:00:36 2025 GMT
        Subject: CN=adcf319bb4d59bc58db6db28f5033aad2a8db38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:28:6e:fe:57:d2:c7:df:13:87:ce:d0:76:
                    69:16:be:32:18:9e:45:b2:26:47:f5:5f:e8:17:19:
                    8b:d4:ce:6e:a3:64:91:c8:67:23:89:cc:6d:b4:86:
                    d3:ba:06:45:52:01:38:05:c5:31:04:23:44:04:6e:
                    62:b3:02:2b:ad:6e:73:59:57:43:10:12:1d:b4:48:
                    aa:1c:37:1b:7f:c1:6f:7e:05:a7:dd:c0:a5:42:f1:
                    7f:65:9a:d0:a2:0d:cb:81:60:b4:5d:0f:23:c3:a9:
                    c5:83:6c:85:c7:5a:2c:dc:69:0d:43:b4:5f:db:e8:
                    98:c4:1f:f5:4d:04:93:4b:7e:44:53:03:e7:8c:28:
                    b8:9d:26:53:ef:50:2f:e4:d3:6a:09:5f:89:11:be:
                    05:90:70:c6:67:0c:da:3d:81:c8:06:15:5d:a5:cb:
                    fc:b6:9e:ee:76:e8:25:2f:17:e2:16:bb:32:c3:73:
                    73:0b:fd:0a:26:19:72:6e:df:42:b3:25:68:bd:6a:
                    bc:36:f4:89:c8:83:7a:8d:ac:a0:db:58:f0:02:61:
                    94:18:b6:d2:f3:82:5b:c4:91:96:8b:68:1c:94:1b:
                    01:f9:cd:2e:ad:95:88:3c:a8:9d:a3:e7:2b:be:bd:
                    42:bc:bb:76:2a:8f:93:8c:fb:0d:f4:0a:29:5a:31:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CF:31:9B:B4:D5:9B:C5:8D:B6:DB:28:F5:03:3A:AD:2A:8D:B3:8B
            X509v3 Authority Key Identifier:
                keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:2e:b3:e8:58:ea:50:be:97:65:44:6d:d4:72:cb:5d:46:
         ab:62:25:bb:fe:2d:8f:35:2a:71:99:88:11:dd:c9:6f:e4:0f:
         8f:6f:20:e0:fb:ab:49:28:85:43:a4:c5:1e:91:12:89:6c:4b:
         1b:98:43:2e:5e:b7:40:e5:e8:2e:3d:65:3c:11:cc:4f:55:c2:
         80:d0:1a:7a:31:15:76:5e:06:ec:ba:65:5c:63:ca:0b:d3:1d:
         05:ec:a7:c5:a5:49:c5:c3:d1:b9:9f:87:4d:e8:3b:fd:3b:45:
         13:6c:5a:4e:3b:9f:22:4a:2f:9e:83:fb:0d:a9:6b:36:48:0c:
         3c:e5:6a:b9:29:2d:b6:f8:90:89:d1:ef:07:24:b4:11:fe:f9:
         b8:0d:32:53:83:5e:a2:75:b6:e5:86:02:f9:2f:03:2c:50:dd:
         d4:61:24:71:dd:76:b4:1f:a0:b3:a1:5a:e2:23:ec:cc:bb:5d:
         34:e9:8a:20:da:30:90:30:6e:d8:05:a5:73:8a:55:11:15:60:
         8b:bd:cc:aa:4d:b2:50:d7:a1:07:c7:91:34:8b:f7:f0:16:34:
         5a:2b:c7:39:ac:e5:0f:98:43:6b:98:3c:01:49:dc:65:de:de:
         ba:10:b5:f9:44:97:09:5a:a2:e7:a5:86:19:c8:08:df:c4:6f:
         1a:85:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:12:48 2025 by rpki-client