Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File:                     P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier:          01c/AMFpNAv3q7zq97iKo1TOBH6Nz9XTcdV82nb3RlM=
Subject key identifier:   05:DB:65:12:4E:D1:16:26:88:E1:76:20:70:E6:43:64:F7:C6:38:9E
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer:       /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial:       01988CFECAABA875D554BD867515E5FD82F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number:          13B5
Signing time:             Sat 09 Aug 2025 04:02:44 +0000
Manifest this update:     Sat 09 Aug 2025 04:02:44 +0000
Manifest next update:     Sun 10 Aug 2025 04:02:44 +0000
Files and hashes:         1: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: xQqMe0GRjLaFWmbhbzeHrIUtBf6m9CdxuQ3mafHUq/o=)
                          2: Q0NTavEWJ5qlzhM0Gok-q7D_kpE.roa (hash: 38GOGOOApNFSuUu3tueeEDSFag3IGEHi/vwKyUqguXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fe:ca:ab:a8:75:d5:54:bd:86:75:15:e5:fd:82:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
        Validity
            Not Before: Aug  9 04:02:44 2025 GMT
            Not After : Aug 10 04:02:44 2025 GMT
        Subject: CN=05db65124ed1162688e1762070e64364f7c6389e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:12:fc:70:c1:31:10:00:46:dc:1e:5f:44:
                    ae:fc:9b:6d:c7:8d:e8:99:17:a0:75:c5:0e:48:49:
                    3a:60:95:f6:2c:c3:40:a4:60:d0:a8:23:15:22:f2:
                    08:78:ed:08:7f:58:d4:ae:c9:f5:d6:34:92:3b:f0:
                    fe:a7:46:c0:69:c3:b2:12:77:4e:a1:30:b7:30:20:
                    ed:38:d8:b5:8c:db:64:03:26:81:fb:8d:c5:33:6b:
                    f4:eb:b5:ff:d1:7a:f9:61:b8:37:5a:c3:c4:f3:3a:
                    10:6e:a7:4a:53:d2:7f:e1:a2:f8:7c:fb:69:e0:84:
                    9d:3a:34:d5:d4:fd:26:de:21:42:0d:83:3f:5f:42:
                    59:d9:25:11:2a:11:cb:b8:37:94:7f:bb:e6:a5:52:
                    d6:81:7d:46:59:1e:3e:b9:00:1d:7d:7a:83:50:c6:
                    01:60:3f:e8:d8:52:a4:c0:09:08:f3:19:80:46:a6:
                    51:8a:3f:df:5e:38:7b:93:c0:a8:8a:97:7e:8d:18:
                    52:89:bf:8e:a3:b0:ee:5b:18:9b:9d:52:82:fe:bf:
                    52:20:ef:9a:ce:06:78:b8:5d:ff:30:9e:07:f3:11:
                    94:a7:7c:f9:9c:c4:14:39:61:ac:70:ce:76:7e:13:
                    a4:f9:1e:7f:8a:62:09:16:ee:f2:28:4c:7c:74:e9:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:65:12:4E:D1:16:26:88:E1:76:20:70:E6:43:64:F7:C6:38:9E
            X509v3 Authority Key Identifier:
                keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:03:d5:84:20:c9:3b:0b:6c:8c:8a:a1:03:75:cc:7e:c6:
         0b:4e:a3:3a:06:d0:bd:ac:77:fe:a4:a3:75:fc:d4:f2:0f:24:
         ef:3c:53:f0:0f:57:40:a5:dc:c0:73:1e:e5:74:93:b0:df:b2:
         56:a7:ec:b7:40:a0:07:bb:df:e2:2a:43:64:f4:18:33:25:80:
         00:51:ba:79:7d:21:8a:0e:52:4a:ea:a4:26:df:5c:a2:30:30:
         aa:bf:59:ab:19:a4:27:65:f5:bf:af:d3:1f:1b:a3:3f:b8:5c:
         ff:d5:7e:df:00:2e:41:63:40:d5:d8:d0:79:6d:bc:97:7c:c5:
         dc:6f:24:4f:d5:0c:5a:c5:7a:84:29:53:08:c8:ea:7f:a0:3c:
         0e:70:7b:1b:6d:79:fc:99:92:ae:0c:4c:9e:ec:52:b5:a9:b7:
         b8:78:c1:f5:93:fc:f2:cc:ae:26:f2:a4:4d:8e:0a:aa:5d:1f:
         9e:34:5e:5f:91:d8:5c:a8:4f:db:6e:dc:99:3f:0c:c1:98:87:
         b1:4f:c3:96:6f:c6:6a:d5:5d:11:08:89:c1:0f:a9:5d:85:c6:
         53:1b:45:60:6e:ec:64:6e:cc:de:2c:74:9b:0e:a5:84:8f:59:
         1e:00:3d:21:de:df:4c:82:54:50:14:97:23:fa:a0:09:3e:47:
         0a:51:4d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:28 2025 by rpki-client