Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
File:                     pABDs-E67Tl_iTLPXRP_T0qv5ro.mft (raw, json)
Hash identifier:          5nQam+nwnIvzRZUkO+/6ZarDo1PgeaclbKpbBGMqIvM=
Subject key identifier:   47:B7:E7:F9:AD:E4:28:87:F0:8A:58:88:01:4A:2F:D1:00:A4:A3:98
Authority key identifier: A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA
Certificate issuer:       /CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
Certificate serial:       019879AD604BB9CF4A161EAFFD5BF2C7A161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
Manifest number:          08D6
Signing time:             Tue 05 Aug 2025 10:01:02 +0000
Manifest this update:     Tue 05 Aug 2025 10:01:02 +0000
Manifest next update:     Wed 06 Aug 2025 10:01:02 +0000
Files and hashes:         1: 6PmEXqzCqtOkV5rlVnjN7lD4y7o.roa (hash: oeYIl7mC76NEmwPAocr8euhDeieJStNOycGYHO+qVzg=)
                          2: pABDs-E67Tl_iTLPXRP_T0qv5ro.crl (hash: eqKuyqUw6YC5PtElYDPSNINzEKgzas9mKag4EuUcN1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ad:60:4b:b9:cf:4a:16:1e:af:fd:5b:f2:c7:a1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
        Validity
            Not Before: Aug  5 10:01:02 2025 GMT
            Not After : Aug  6 10:01:02 2025 GMT
        Subject: CN=47b7e7f9ade42887f08a5888014a2fd100a4a398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:6d:b7:14:d3:78:d8:e7:7c:7a:de:1f:43:
                    48:30:7b:e6:29:00:7b:8f:16:04:24:17:4c:86:55:
                    a1:61:e4:ed:12:91:35:a9:60:5d:03:31:c9:19:23:
                    1f:9b:6f:81:7e:d6:71:1e:b2:2c:01:08:43:5d:1b:
                    4a:e4:2b:63:2f:c8:9f:8c:5f:05:1f:14:d8:8c:75:
                    cf:bf:f9:fc:b2:bc:c9:82:49:61:6c:fa:f9:2c:da:
                    58:94:84:0a:00:e0:80:7c:f4:65:f6:c5:7f:45:a7:
                    b9:57:b3:52:20:39:4a:a0:11:31:e8:da:c9:b1:dc:
                    95:d9:b3:49:50:4b:78:dc:01:63:a9:ec:97:28:fb:
                    c6:a5:53:89:ef:bd:3f:0c:cc:61:c8:65:25:f3:55:
                    5d:04:98:c8:ef:38:4d:a3:03:f5:a4:56:99:ee:47:
                    c5:ff:44:e8:a4:57:9a:bf:d8:73:78:ba:1e:a6:69:
                    c0:f3:bc:36:c0:c4:26:83:c0:9b:23:c0:1f:93:ad:
                    b1:b7:25:8e:f6:53:61:87:97:a0:7e:1a:12:08:c6:
                    95:52:ca:a8:de:67:8e:7b:10:e3:60:3e:db:88:9f:
                    32:c6:8f:8b:63:37:5d:8b:14:e4:9c:4f:e4:14:b3:
                    7c:32:3d:34:13:0a:ef:0a:1e:73:e1:7f:54:d8:ca:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B7:E7:F9:AD:E4:28:87:F0:8A:58:88:01:4A:2F:D1:00:A4:A3:98
            X509v3 Authority Key Identifier:
                keyid:A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:03:84:69:ec:9e:aa:47:9b:8d:af:d1:85:cc:30:a3:08:50:
         7e:c0:23:92:ed:a9:08:f9:a7:d4:fa:37:1a:7f:b9:0b:c3:22:
         0c:ea:56:46:a8:4e:9e:67:de:35:a4:11:87:7d:d5:f5:33:fa:
         ad:42:70:d4:3c:d6:53:78:f9:6a:e8:80:a4:95:0c:94:90:1f:
         19:2c:d2:5a:9d:99:a1:ac:51:3c:46:9f:ae:ee:92:00:97:0d:
         22:57:dc:4b:0a:8c:f5:0b:62:f0:be:52:71:ef:b3:ee:c1:25:
         d4:be:f1:c1:6c:c0:5c:fe:3a:ae:18:ba:d1:02:51:82:35:68:
         9a:5d:bb:bb:8f:da:1d:35:b1:62:e6:85:dd:3c:05:a0:e6:20:
         54:7d:01:60:97:d4:37:07:30:ed:34:d4:68:5f:5f:39:e0:39:
         41:64:8d:45:65:82:06:2c:c8:17:14:a1:8d:f5:cc:ed:30:75:
         f3:d7:2f:96:a2:5f:d9:b4:50:c2:e6:c1:2e:94:73:66:12:d2:
         96:d4:09:00:5d:2c:63:38:da:5d:fd:38:d9:f8:f5:eb:fc:56:
         67:41:2a:25:9d:9f:4b:4a:97:58:e8:0c:3e:5a:e7:ed:c9:d8:
         a3:01:44:cf:1d:38:1b:ad:39:15:db:44:81:62:c5:7f:2e:41:
         a7:97:95:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:59:11 2025 by rpki-client