Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
File:                     Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft (raw, json)
Hash identifier:          Yrtq5yDaxMVxqM/TYtICFJDr1LNx131GRz1QqqFLB4A=
Subject key identifier:   96:4D:81:32:06:86:48:B8:A5:E5:6B:0A:EC:75:58:81:13:87:06:13
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Certificate issuer:       /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial:       01988EEC743A5A8A256D7ACA541CD8774F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
Manifest number:          124C
Signing time:             Sat 09 Aug 2025 13:01:57 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:57 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:57 +0000
Files and hashes:         1: Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl (hash: 21cKbzLbVbiSb5fm62TxGV4LkpT1pi5V27ZRlnfyDKY=)
                          2: TvTxBLGF9a81RGikK2pVw5Qclrk.roa (hash: Swsi8hcudUdP4trO5kArswNQiDBcmbNtUjmXbEXUd0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:74:3a:5a:8a:25:6d:7a:ca:54:1c:d8:77:4f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
        Validity
            Not Before: Aug  9 13:01:57 2025 GMT
            Not After : Aug 10 13:01:57 2025 GMT
        Subject: CN=964d8132068648b8a5e56b0aec75588113870613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:08:6e:f1:fa:fd:60:95:52:26:b9:ea:5b:
                    d1:82:bd:a4:41:1a:ca:bb:09:26:16:df:8a:a3:e9:
                    7a:13:04:ca:a2:72:33:c3:f5:c4:ab:89:fc:b7:c0:
                    61:e4:77:b5:d3:ca:9e:60:f1:63:d4:5b:8b:15:aa:
                    1c:d7:c2:7c:e4:7f:98:64:30:4f:6b:77:5b:04:9c:
                    f0:37:aa:5a:48:24:df:2a:48:33:15:32:54:cf:42:
                    10:69:62:30:08:09:83:e3:9d:5a:d7:be:93:97:a2:
                    94:43:76:f2:9b:e7:12:94:b1:76:bf:f6:cf:14:7c:
                    03:b4:2b:24:9f:a1:af:97:48:3d:2d:ea:ea:4f:eb:
                    58:a1:2f:c0:f0:20:3f:1e:fc:40:d2:39:20:29:0d:
                    06:1c:35:2b:ad:28:13:2f:19:7c:2e:de:78:a8:aa:
                    d3:e4:53:7d:51:c4:17:9b:1b:bf:bd:2b:d3:1f:d1:
                    e0:f7:6a:70:e8:d8:4f:c9:22:4a:d0:0f:4b:c9:3e:
                    2f:a1:88:d0:5a:03:62:0f:58:5d:25:62:f1:63:eb:
                    74:5d:9a:ce:2e:98:aa:1b:7c:e2:4c:bd:b5:c5:3d:
                    62:b4:d3:f4:a8:15:b9:98:79:bd:30:4c:74:d7:0b:
                    2f:88:7c:4a:57:1f:b2:55:f0:a1:0e:00:aa:a0:6d:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4D:81:32:06:86:48:B8:A5:E5:6B:0A:EC:75:58:81:13:87:06:13
            X509v3 Authority Key Identifier:
                keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e4:42:fb:04:cf:db:ae:78:47:58:50:b7:d1:ca:f0:78:98:
         1a:9c:89:b6:50:d4:5e:13:a4:44:de:d6:5e:3a:d7:a6:d2:a2:
         0a:75:ce:b7:49:35:d0:df:00:e8:7a:31:bf:80:03:2e:b7:96:
         46:71:34:56:b5:57:34:19:97:4d:b1:8d:b7:76:39:42:c5:56:
         31:70:d7:d1:01:0d:0d:e3:4c:f8:78:33:e2:f6:2d:b1:bf:46:
         5a:71:33:ed:77:3f:30:74:82:15:ef:58:49:aa:d6:d9:21:d8:
         16:e8:43:21:7d:bc:0c:ca:c6:4b:dc:cc:47:83:b1:b4:06:91:
         7a:20:ce:60:eb:ef:b3:df:60:49:c9:77:28:cd:7e:07:fb:c9:
         86:48:1d:27:07:b2:62:13:4c:7b:6d:ce:06:15:d5:46:76:f3:
         08:2d:ad:0b:cb:8c:03:6a:c7:72:df:64:2f:13:6b:22:49:58:
         73:33:62:79:09:eb:43:ba:20:3b:b1:3b:ad:42:27:09:f9:d7:
         69:6f:f6:63:fe:7b:a1:9d:7d:27:36:f5:eb:d6:36:6b:06:28:
         d5:67:13:1f:69:83:a8:0b:21:12:21:e4:32:81:54:69:7b:1c:
         68:92:03:fc:59:9d:3e:c8:68:2b:ba:9d:c7:03:9e:91:8a:db:
         1d:85:f3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:04 2025 by rpki-client