Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File:                     P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier:          69Z0QRSb9JUqnHpWozE2SWrn4acwbWQnYmnVjzzb0Iw=
Subject key identifier:   97:CD:D5:B0:83:E0:8D:FE:85:DE:F3:84:17:88:B3:C4:53:70:84:46
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer:       /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial:       01989FDF103C319740C98586CC7731780014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number:          162E
Signing time:             Tue 12 Aug 2025 20:00:52 +0000
Manifest this update:     Tue 12 Aug 2025 20:00:52 +0000
Manifest next update:     Wed 13 Aug 2025 20:00:52 +0000
Files and hashes:         1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: naYMlfp95YV77erzhTZo5hpzQDhngEJrc/G7FHm5CyA=)
                          2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:df:10:3c:31:97:40:c9:85:86:cc:77:31:78:00:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
        Validity
            Not Before: Aug 12 20:00:52 2025 GMT
            Not After : Aug 13 20:00:52 2025 GMT
        Subject: CN=97cdd5b083e08dfe85def3841788b3c453708446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:84:77:e7:22:05:63:d4:cd:d0:22:35:14:
                    97:77:04:47:06:ee:06:c5:a6:68:4d:74:88:83:d5:
                    f6:6f:77:19:b4:e4:fc:1a:2e:f3:a2:a2:82:dd:ee:
                    ca:2d:26:da:1e:9c:62:b9:b6:ce:b0:ea:f0:08:72:
                    9a:c8:f7:53:bb:16:43:e6:db:fb:29:3b:0b:a2:b1:
                    4c:3a:1c:55:25:9a:ad:a6:70:c0:76:ea:73:d1:20:
                    92:d7:97:74:32:f4:20:21:fa:10:be:c8:fc:2e:ee:
                    13:56:26:39:ac:c9:60:07:3f:b8:c7:f4:a3:ab:ab:
                    c3:aa:b1:d9:6e:ab:31:69:55:15:a6:94:c0:fa:6a:
                    e0:c1:d0:2d:b7:65:cc:22:88:d4:fb:60:f9:f6:2d:
                    b1:5c:6b:2e:75:5a:f6:df:60:c5:63:4d:a4:6e:8a:
                    c0:c0:f3:92:07:5f:a8:b8:15:a9:ce:bf:01:ae:19:
                    27:b6:b5:e8:54:d4:a4:d6:a7:ad:5e:36:2f:66:b6:
                    94:84:31:04:30:fd:40:1a:33:08:fd:b1:e0:b7:d5:
                    b3:81:a0:91:3e:5b:7d:0d:28:dd:45:08:67:0a:e6:
                    9f:90:3b:58:16:aa:02:a2:30:99:08:f0:6e:5b:ce:
                    4b:0e:e1:47:15:b4:f3:be:f3:2f:0c:09:e4:c1:b6:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CD:D5:B0:83:E0:8D:FE:85:DE:F3:84:17:88:B3:C4:53:70:84:46
            X509v3 Authority Key Identifier:
                keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:21:7d:06:26:48:81:ce:7e:9c:04:f2:47:2a:57:9a:fe:
         35:8d:86:eb:8e:2c:9f:aa:0b:d6:c2:7d:36:26:12:78:3c:13:
         25:f4:9d:95:4b:04:2a:2d:c2:a0:d0:fe:ba:d5:fa:58:62:ff:
         09:30:35:44:c6:5c:59:b4:59:13:52:1e:36:e0:3c:81:c8:3d:
         9c:05:2b:4a:ef:65:44:9d:f7:f8:5a:02:2b:64:1d:5a:20:0d:
         1d:d2:e8:8f:af:9e:bb:88:f4:a7:96:84:1e:7e:24:e9:fd:20:
         56:f7:f4:59:f9:37:00:31:c6:4f:a4:71:b4:6b:af:5a:45:74:
         80:44:93:e5:51:f4:e9:79:7b:4f:33:52:fc:6d:a8:91:2a:ca:
         2b:58:db:66:5c:4c:ae:0b:30:09:54:df:1f:b4:1c:96:5e:40:
         57:c2:52:b4:04:56:84:7a:e8:35:61:21:15:ae:43:78:d3:ad:
         75:8b:02:48:e7:45:2a:47:55:6c:59:0e:b3:11:0e:13:ba:e2:
         5a:f7:ce:b6:79:95:f2:89:e8:d8:de:4d:eb:f9:cf:5d:a3:fa:
         4c:35:df:8e:cb:bb:86:50:0f:38:31:f6:14:42:7d:19:8b:8c:
         fa:30:c4:e3:a0:73:db:f2:1d:51:12:6b:d5:73:ab:4d:2a:df:
         9e:78:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:06 2025 by rpki-client