Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
File:                     pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json)
Hash identifier:          eQ3etdg5QBQHwax+JSfXkILzhbcSxgdc8RuBG5P1dzU=
Subject key identifier:   C1:7E:3F:63:6A:C1:06:07:7E:AC:AF:7D:AC:30:59:C4:A6:31:09:2E
Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
Certificate issuer:       /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Certificate serial:       01988B0E940E4801E8DDAF94FA8638F816FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
Manifest number:          0EC7
Signing time:             Fri 08 Aug 2025 19:00:44 +0000
Manifest this update:     Fri 08 Aug 2025 19:00:44 +0000
Manifest next update:     Sat 09 Aug 2025 19:00:44 +0000
Files and hashes:         1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: 10YiJOmU3eK0xE/+Rz4bDPzqdfIeCLH67EO8DTavjzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:94:0e:48:01:e8:dd:af:94:fa:86:38:f8:16:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
        Validity
            Not Before: Aug  8 19:00:44 2025 GMT
            Not After : Aug  9 19:00:44 2025 GMT
        Subject: CN=c17e3f636ac106077eacaf7dac3059c4a631092e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:f8:2f:6c:e1:cd:c9:6b:62:6f:02:22:b2:
                    52:73:19:41:93:77:0a:ac:ab:4c:fa:d9:58:78:76:
                    1e:93:ee:79:0b:c5:c8:91:bc:80:da:c7:8e:a6:f5:
                    b1:41:ca:93:a7:ac:7f:9a:43:10:09:7c:14:85:63:
                    81:9a:a5:ad:a9:3e:f9:05:a0:c9:37:64:ec:be:27:
                    a1:75:f1:c8:3f:76:5c:a1:69:e1:a5:0b:1b:ad:de:
                    f4:43:ca:9c:70:dd:2d:d6:bf:2e:95:ac:bd:3c:d1:
                    d3:fc:d0:e9:d0:c5:f0:29:a4:ed:d1:9e:85:e5:0b:
                    eb:49:2e:b6:83:dd:3e:d8:9a:18:0e:4d:39:f3:94:
                    b4:af:12:1b:43:a3:0f:74:43:b0:1c:29:11:be:1a:
                    9a:3b:0f:fd:3b:4f:29:91:fc:91:c6:60:08:41:d1:
                    31:a7:d8:03:3a:dd:d3:b5:60:1b:4b:55:ef:88:59:
                    8f:a1:bb:11:13:c7:67:7a:15:72:9b:10:e9:b1:a1:
                    01:e5:55:46:e3:8b:97:58:ef:52:31:34:ab:ce:42:
                    96:f8:6d:a3:a6:85:c8:e5:8a:8e:a1:94:78:f6:72:
                    53:e5:c5:ad:74:29:ab:b6:a6:77:ef:44:4e:ce:ad:
                    f3:9d:0e:3e:6d:ba:9f:b3:9a:f9:d3:e4:f0:bb:1f:
                    9c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7E:3F:63:6A:C1:06:07:7E:AC:AF:7D:AC:30:59:C4:A6:31:09:2E
            X509v3 Authority Key Identifier:
                keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ee:00:31:a4:7c:16:74:aa:e6:a7:7f:8c:17:8d:2f:ee:ec:
         f2:a8:95:00:53:50:f6:b2:c9:49:e3:44:07:2a:d9:dc:6c:e4:
         42:88:e8:78:65:ec:68:45:92:24:9d:c7:df:3b:a7:66:d4:5f:
         46:05:41:10:3e:99:6a:55:1a:90:87:38:ee:75:62:d3:1c:19:
         89:79:e8:58:2b:01:82:57:da:50:41:8c:ea:22:fe:1d:86:b7:
         d0:d1:77:71:8b:15:6c:49:2d:d2:2f:85:58:b3:60:51:e2:c8:
         28:6c:f9:4d:79:e6:c9:a8:4d:fe:93:d6:72:bf:6b:16:7a:de:
         67:c9:f5:8a:ce:65:0f:88:de:fb:13:8b:03:b5:b9:f7:b6:d5:
         fc:5b:57:5e:ee:51:54:06:3a:35:d8:df:8a:ec:87:b9:76:8f:
         5a:ee:b5:f6:c7:d8:be:b0:54:c1:3d:98:6f:0c:83:a9:4d:b8:
         ff:ea:38:a4:d1:b3:e9:8a:de:06:cf:2a:84:53:d1:7f:5e:b2:
         5c:64:27:2f:b3:73:b7:67:7b:a7:5b:72:86:b6:86:b2:44:da:
         25:f6:da:c1:b2:8c:7c:29:77:e9:ca:c0:a6:9a:d8:29:76:9c:
         a5:51:ef:dc:92:a2:17:48:c4:27:0e:c4:d3:1c:c3:3a:8d:ed:
         a6:c9:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:31 2025 by rpki-client