Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
File:                     pFIjl-wNFJkgGvD6nqKgS31c-mo.mft (raw, json)
Hash identifier:          XvUuzd0mEvwE1mFK7vdzxtugWwDFlQQLynpZ2AF0Rfk=
Subject key identifier:   76:1E:D4:74:E4:C7:79:E0:1D:DE:58:6F:C3:E9:11:35:98:BD:F9:E2
Authority key identifier: A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A
Certificate issuer:       /CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
Certificate serial:       019880F96EEA68C5A2C9EB98C076956BE417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
Manifest number:          0306
Signing time:             Wed 06 Aug 2025 20:01:27 +0000
Manifest this update:     Wed 06 Aug 2025 20:01:27 +0000
Manifest next update:     Thu 07 Aug 2025 20:01:27 +0000
Files and hashes:         1: T73zcHs6Ep_CKwJnLjzUI2Lqk64.roa (hash: Q3Y+VkwX2oMhKJhHjrJ53ij+knYpPf4svYxgdosIZGQ=)
                          2: pFIjl-wNFJkgGvD6nqKgS31c-mo.crl (hash: /DGUyG42gD3HyJHzkDaBLX9lfzbp1wq4F3iv2y1bE24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f9:6e:ea:68:c5:a2:c9:eb:98:c0:76:95:6b:e4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4522397ec0d1499201af0fa9ea2a04b7d5cfa6a
        Validity
            Not Before: Aug  6 20:01:27 2025 GMT
            Not After : Aug  7 20:01:27 2025 GMT
        Subject: CN=761ed474e4c779e01dde586fc3e9113598bdf9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b4:95:55:d4:c6:c2:0a:82:38:9b:0e:7e:c9:
                    da:7a:53:04:f1:44:1e:23:65:e9:cd:58:4f:2b:23:
                    6e:5b:e1:a9:9e:7c:61:cc:cd:25:35:0c:1d:23:72:
                    79:1c:9b:1e:82:5e:8f:b1:5d:63:c3:bd:73:02:84:
                    f2:11:14:0f:21:8c:2b:3d:f8:30:7f:eb:e3:4d:98:
                    62:9c:1c:b0:17:2b:d2:c7:e1:30:9d:2e:d7:91:5e:
                    1b:54:52:32:eb:c8:82:76:c3:5c:ac:2c:38:94:a7:
                    d2:e3:26:8d:f5:f4:b5:cc:9c:2b:62:ca:66:ae:24:
                    44:8c:39:28:2e:50:bc:4f:dd:26:08:f8:d9:80:4d:
                    ac:05:60:28:f6:65:12:f5:ef:71:6b:38:c2:64:40:
                    f1:5c:1b:c6:61:03:af:40:f4:75:c5:bc:78:7f:4c:
                    41:3e:13:eb:8f:a3:cb:e3:10:dc:42:17:b5:5d:e2:
                    20:d5:e8:ec:61:61:3f:b9:3e:94:e8:04:94:30:59:
                    13:ed:0f:7a:53:98:c8:50:b3:ac:4c:e9:49:7d:b4:
                    b0:c6:19:89:d6:36:62:76:db:be:b6:ad:4f:63:bb:
                    a4:0c:bc:f8:22:60:de:ff:7f:0a:a2:6f:ed:3c:29:
                    d8:d0:f0:ac:ba:4f:a3:70:05:cd:3d:70:3b:78:e0:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1E:D4:74:E4:C7:79:E0:1D:DE:58:6F:C3:E9:11:35:98:BD:F9:E2
            X509v3 Authority Key Identifier:
                keyid:A4:52:23:97:EC:0D:14:99:20:1A:F0:FA:9E:A2:A0:4B:7D:5C:FA:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFIjl-wNFJkgGvD6nqKgS31c-mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f692df-ff67-4655-8d88-fec04c495502/1/pFIjl-wNFJkgGvD6nqKgS31c-mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a2:61:7c:93:b9:68:d3:95:20:fb:06:4a:35:2f:39:c1:dc:
         b7:c5:77:cc:01:6c:2c:10:dd:25:30:08:48:09:15:c0:ee:45:
         0c:d8:a2:b0:33:41:b5:9a:6b:3d:92:f1:ba:73:74:26:a1:00:
         65:02:21:52:2a:46:4d:a5:9c:12:05:65:30:f4:0d:28:bd:eb:
         50:e4:e5:23:22:2b:f3:61:74:91:0b:75:b4:f2:a2:a6:8d:d2:
         52:8d:17:3c:fd:64:c6:ea:9f:10:4e:1b:12:ab:b3:ba:0a:02:
         c4:6b:25:5e:bc:cc:5b:1d:0c:10:8f:1b:d8:c0:cd:fc:3c:b8:
         5d:ea:e1:6e:59:20:13:11:58:0e:46:d8:ee:02:84:b2:01:bf:
         d6:e0:63:58:58:70:c6:80:d1:4f:ec:cb:b2:c6:94:e0:4f:70:
         b3:57:fa:de:b6:39:98:b1:47:3c:ec:2e:a3:e1:58:6a:d6:40:
         29:12:1a:ec:6a:8b:45:df:bf:0a:70:fc:01:24:a3:67:62:f6:
         a6:ef:a7:c2:65:a4:eb:33:e5:0d:10:fe:a6:bc:0f:cc:19:d6:
         02:89:87:34:ee:db:9a:20:71:2d:28:75:5b:4b:c7:1b:ec:59:
         45:2c:f2:6d:da:ce:3f:05:6b:ab:58:52:4c:aa:c9:2c:d2:70:
         eb:e0:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:02 2025 by rpki-client