Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          70idbofuKBAocoTo++FfBbQoPjF0V0JNjKBNH7zvZsg=
Subject key identifier:   A7:6F:11:9E:21:62:94:8F:EF:3A:A7:08:62:1D:12:26:98:85:42:54
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       01987DF7E3B6A7600038F1CCEF42F8EF257F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          10DB
Signing time:             Wed 06 Aug 2025 06:00:54 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:54 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:54 +0000
Files and hashes:         1: 1qkc6Y9jXUF8IhL-xIP9OmQuRxQ.roa (hash: FyT7i1iA2UYuQa2unCvmYr0/izQdX0gwOaXqE1QmUDA=)
                          2: 4pndJR5YmydmS9JXz_iQx8ck7j0.roa (hash: Z1im/UM2UzYVlqGcYguPnrUORp/DmOYEtnYcSLNDNIU=)
                          3: 790_0aC0pIVxZhv7VxK50ulYRQA.roa (hash: Omml7Q0FvpnQPClJTkXnFHAOdNcYGcFxuVbnF3UpV4k=)
                          4: 7TRbsGhzrO0599svAEtwSgPzAhc.roa (hash: W3VT9OquRIsAh2qTrbG0g8QkGqxQgHgPGhS6fP34/Qo=)
                          5: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: n8BsL5Lt8B30E5LPIU1m/bM4DAOhMWLmf3tgkEf+SeM=)
                          6: rq9aneEoVWHNrooCWNRA9paJqvA.roa (hash: yfPP93JQllNK5aLLASi/RUmEtM270jETA3o9ZRbSPvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:e3:b6:a7:60:00:38:f1:cc:ef:42:f8:ef:25:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: Aug  6 06:00:54 2025 GMT
            Not After : Aug  7 06:00:54 2025 GMT
        Subject: CN=a76f119e2162948fef3aa708621d122698854254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:67:16:da:66:48:44:91:5e:66:9e:0a:f4:
                    84:34:56:3c:90:34:34:fc:df:32:9c:e3:51:a7:3c:
                    e3:15:b6:25:ba:ea:a5:6c:0c:d8:6e:0b:9a:d8:a6:
                    c6:1d:7b:ca:63:78:86:3a:c6:41:c4:3f:fe:fa:b0:
                    6d:a4:f2:6b:f7:77:08:6f:76:90:4a:0d:6c:1f:4d:
                    9f:99:e7:04:94:a2:8e:b1:bd:ca:6e:f3:8c:44:a9:
                    ea:7d:0b:1b:6d:56:07:84:4d:13:b5:7a:20:9f:03:
                    68:fe:01:70:c0:98:85:6b:fe:85:59:41:a0:61:9a:
                    cb:99:06:7c:b9:f6:6f:32:37:19:1c:51:be:83:e9:
                    ed:29:d7:41:29:4e:1c:a3:08:65:2f:af:1a:1e:4a:
                    d6:35:e6:d8:3c:4a:9d:d5:f0:92:a3:ae:91:6f:5b:
                    3e:85:8b:03:90:ff:98:b6:6d:e6:da:e5:5e:7a:48:
                    50:4d:67:e7:f7:d3:c7:dd:ed:44:03:8b:a6:d7:89:
                    76:82:16:8b:1c:f6:b0:f8:e3:13:70:d1:04:5e:68:
                    f1:51:ac:14:42:0b:75:98:90:0c:0e:4d:12:35:8b:
                    03:94:51:35:3b:d2:70:35:07:8c:5b:54:5a:f6:39:
                    b5:f1:fd:d7:64:a7:37:9d:4a:61:fb:40:21:b2:33:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6F:11:9E:21:62:94:8F:EF:3A:A7:08:62:1D:12:26:98:85:42:54
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ae:da:46:70:76:cd:7c:f7:82:f3:6f:26:c0:f8:11:4e:0d:
         a3:7b:55:64:85:91:cd:ba:00:2c:53:fa:a4:bf:81:67:1d:af:
         1a:9c:34:ed:bb:fe:9c:bd:fd:39:3c:a0:aa:d5:1d:26:e6:d4:
         7d:61:28:9d:f1:b5:98:65:59:fa:6b:79:f9:99:38:59:12:ab:
         a0:28:5f:e1:f1:db:8f:c8:eb:63:62:11:f0:a5:5f:5e:6b:1b:
         c5:c4:eb:e8:0b:ae:23:21:b7:81:d3:9d:6c:97:05:f7:f3:8b:
         9e:b0:25:3f:4a:d3:22:2d:ac:31:28:d9:2a:93:fc:55:bf:d4:
         10:d5:d2:0f:a0:be:48:b3:e3:c2:17:01:7e:f0:cb:2d:94:70:
         11:a4:fc:09:bc:fe:33:00:32:de:51:5f:91:a8:ed:b5:02:33:
         2b:79:e0:30:4c:4c:e0:5e:98:61:56:ac:e4:25:ec:f6:52:bf:
         4c:de:a7:13:77:58:43:a0:b2:ef:00:93:9e:8d:0b:8b:47:4a:
         d4:68:8e:6e:8e:78:a2:49:01:74:74:9f:c8:49:57:26:c6:8f:
         5f:97:77:f7:87:71:b4:dd:c2:bf:dd:43:93:f0:8d:fb:44:93:
         6e:0f:29:0f:a0:e7:4a:78:c5:9e:ba:f6:52:9a:c7:63:8e:ed:
         a1:21:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:00:53 2025 by rpki-client