Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
File:                     pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft (raw, json)
Hash identifier:          3bB4PcihpRGINYuKciKTBkiKYGOLWkeNTU2YahekNrA=
Subject key identifier:   53:71:2A:A0:1B:4F:C3:E1:D6:B3:11:47:BA:01:83:6A:D9:24:81:D4
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Certificate issuer:       /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial:       019889FC23CBEB02CCC5425D11F7B3EC819C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
Manifest number:          15
Signing time:             Fri 08 Aug 2025 14:00:59 +0000
Manifest this update:     Fri 08 Aug 2025 14:00:59 +0000
Manifest next update:     Sat 09 Aug 2025 14:00:59 +0000
Files and hashes:         1: Da4NL5ou2Ng6yl8t-CCdMuLCewQ.roa (hash: w8OukO5+kU54dtVhEXa7iFOMv+PZYBgOzEl0TR/qCD0=)
                          2: MR_f-x3g7wcjluP2eCx_et2XgAo.roa (hash: bnbauqYg41qtiywoh5HUkv8me54R7s04AvQU8Lpnw6o=)
                          3: P5sDSR0HZnHki4I0AlMWpThVrhE.roa (hash: e88MDF3UQ11sNY2bgPKcHFav86x/WiIPqzESbe9NCCs=)
                          4: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl (hash: Ttyxo0wZ0jPOV9O9dDYKueuesegCCrUf4dxjcSOR3y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:fc:23:cb:eb:02:cc:c5:42:5d:11:f7:b3:ec:81:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
        Validity
            Not Before: Aug  8 14:00:59 2025 GMT
            Not After : Aug  9 14:00:59 2025 GMT
        Subject: CN=53712aa01b4fc3e1d6b31147ba01836ad92481d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:6a:0b:14:a8:42:af:5f:9d:11:b5:6e:78:
                    84:7f:a0:d9:f0:fc:c0:07:74:e0:7c:96:35:32:9c:
                    bc:4e:4b:94:af:72:5a:af:d8:2c:53:02:83:63:86:
                    15:f9:63:09:0c:f2:54:4d:7e:69:7e:42:7a:a0:51:
                    73:f7:c4:9b:b2:22:1c:4a:2a:a4:6c:5e:76:a9:5b:
                    e9:de:b3:90:4e:cc:ab:73:49:23:b5:af:93:82:92:
                    6e:db:36:e6:fd:c4:f9:c9:5b:a1:b5:7b:bf:14:47:
                    54:a7:74:e4:21:ff:b6:d0:c9:48:11:ec:a8:44:4e:
                    83:72:92:72:a2:ee:ab:74:82:4a:b7:19:9b:69:0e:
                    c7:32:8f:cd:7c:43:94:a4:db:cc:44:bc:7e:23:da:
                    38:cb:d3:92:0c:fa:b2:01:ba:da:82:31:7a:b7:08:
                    09:01:f8:3a:2a:3f:65:26:aa:91:d0:19:99:06:43:
                    0a:63:62:b9:97:7b:4a:15:55:a5:3a:a7:2e:0b:cf:
                    35:e8:76:ad:89:2b:71:7d:07:6d:d8:35:7e:c1:33:
                    6d:e0:21:7b:32:97:9e:6c:21:02:99:3f:a2:88:fc:
                    fb:80:1e:54:59:29:31:3b:0a:57:5e:8b:5c:fd:b0:
                    3e:29:64:b7:96:1c:d9:6c:91:34:bc:99:7f:30:5e:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:71:2A:A0:1B:4F:C3:E1:D6:B3:11:47:BA:01:83:6A:D9:24:81:D4
            X509v3 Authority Key Identifier:
                keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:56:0a:e2:9c:70:86:ea:c1:2f:9b:06:5d:26:50:b3:44:
         b5:39:38:15:a9:ec:23:b6:9f:31:2e:7a:b2:0a:c4:d0:72:1f:
         64:a8:98:0e:61:88:bb:b7:21:e5:c9:df:34:54:be:90:09:04:
         26:cf:96:c1:7b:c1:c3:5c:1a:ee:f6:2e:96:67:01:0e:0c:74:
         00:75:7b:9d:f6:57:44:2a:55:b4:cd:16:17:cd:f9:ff:52:bd:
         01:28:3d:d6:93:b9:ab:ef:67:70:22:69:46:81:26:b1:98:99:
         ba:2e:c5:9d:4b:68:4d:ad:89:c5:6e:a5:67:17:3c:75:39:7e:
         37:ff:0b:24:d6:96:cd:ac:80:25:21:3e:83:1f:98:64:ca:f0:
         38:97:70:69:48:15:a3:f0:0c:5c:39:59:a6:8e:d1:2f:ba:2b:
         a2:81:ac:d4:a6:2f:a0:dc:5e:ff:c7:cf:e4:c2:88:79:07:5e:
         53:f4:40:ba:81:8a:68:ff:e1:dc:05:2b:ec:1f:36:7e:6d:5d:
         01:cb:1d:5f:b2:a9:42:f6:07:08:8b:0d:51:27:ea:99:77:02:
         46:b7:dd:c6:02:c1:88:6c:5e:8d:f7:a5:05:29:12:db:c2:d0:
         5a:16:d1:24:c5:13:e8:1a:cc:e7:44:43:7c:d9:b7:47:77:1c:
         57:ee:18:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:45:42 2025 by rpki-client