Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File:                     PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier:          CeAH0n6w/NXyDTqe/t4+99GQltMhHvliWR9tBpuR7Bc=
Subject key identifier:   89:0B:00:41:F3:25:04:AD:E8:74:D9:CC:13:D9:0A:21:69:17:85:6F
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer:       /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial:       019896A6085E80B8C15EDD50340AB687DD2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number:          028A
Signing time:             Mon 11 Aug 2025 01:02:00 +0000
Manifest this update:     Mon 11 Aug 2025 01:02:00 +0000
Manifest next update:     Tue 12 Aug 2025 01:02:00 +0000
Files and hashes:         1: KWPAsF0vFOD6kPsFU3LMV-L0lSI.roa (hash: VQvFUbsDDfVrBdoP9kicGC0pG5uJaNDDod3tQ4qnm70=)
                          2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: AZdOvQqe40RZMODG9POrd14wlGnrpZ85/a2QROc5Mok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a6:08:5e:80:b8:c1:5e:dd:50:34:0a:b6:87:dd:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
        Validity
            Not Before: Aug 11 01:02:00 2025 GMT
            Not After : Aug 12 01:02:00 2025 GMT
        Subject: CN=890b0041f32504ade874d9cc13d90a216917856f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:57:cd:17:c4:e7:a1:ad:74:1a:fa:6d:3c:
                    00:02:b1:79:89:88:7d:33:1a:b8:4c:36:e8:68:f0:
                    05:ad:52:3b:c0:e0:9c:d7:5d:24:b2:29:2d:e7:25:
                    f7:1a:f4:1b:4b:d7:fe:10:5d:f0:b4:fd:89:ea:a9:
                    04:cb:0d:1f:3f:3f:1d:b3:61:8c:93:d4:f9:27:f2:
                    84:bb:4b:22:60:e0:8a:24:72:a4:2b:da:89:fb:5b:
                    9b:66:bd:9a:82:be:00:bd:1c:fd:62:b9:97:69:93:
                    2f:3d:e8:eb:0e:55:bf:2a:47:24:c5:ba:c3:31:8d:
                    9f:6f:90:40:67:7e:83:c3:20:c0:a5:fc:c7:18:cc:
                    de:f8:01:d8:29:5d:3d:e6:11:85:a8:84:bd:4e:f2:
                    fd:33:0b:27:9b:44:57:aa:47:9b:6a:2a:80:1b:ca:
                    51:38:0f:4f:44:e0:5e:ed:32:ad:a3:3a:1c:6c:3e:
                    e0:0d:25:6b:4e:86:b2:91:86:cf:97:76:b8:f9:ad:
                    b5:29:1a:ba:47:89:66:7b:4f:3b:6d:43:0a:12:16:
                    03:95:59:98:fd:b8:e5:56:b4:25:32:b1:b4:ce:d3:
                    e8:7c:9e:e5:5b:58:d5:9c:94:6f:0f:06:1c:f3:d7:
                    b4:d7:3e:1b:08:f6:4d:65:06:48:d6:4c:3e:36:05:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0B:00:41:F3:25:04:AD:E8:74:D9:CC:13:D9:0A:21:69:17:85:6F
            X509v3 Authority Key Identifier:
                keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:17:a9:a8:34:3b:1e:4d:f5:44:03:cc:49:9f:d2:9b:41:4a:
         17:fa:c1:c8:0b:76:23:e6:38:b2:5c:13:04:34:0b:4a:9f:da:
         2a:b2:f2:70:6e:3b:5c:bd:e6:e2:a1:04:93:bd:89:3f:26:21:
         22:ab:81:95:36:5c:d7:11:b9:ed:77:be:31:54:db:9b:f5:44:
         7d:4a:40:7d:30:dd:bc:47:14:8b:93:8c:37:7b:3a:b5:da:b7:
         91:9e:f3:d6:3a:3c:37:2d:e8:7e:32:37:a2:7f:a7:8d:87:5f:
         46:fc:99:4c:71:fe:5f:99:fc:89:35:86:b5:28:e1:8a:59:5a:
         12:01:85:61:2f:8d:b2:ae:d9:54:81:b5:54:e3:0b:4c:51:58:
         a1:5a:a1:62:06:13:8c:90:78:09:26:d1:94:b5:4c:3e:f9:68:
         6b:65:7d:78:5f:07:fd:bb:2a:29:35:43:7b:0e:df:85:73:2c:
         60:9f:91:9d:6a:a1:62:ab:7b:af:24:3f:05:f6:a0:c4:11:d5:
         ed:ba:86:4d:ff:fd:9e:ad:a9:5a:ff:13:07:82:3b:54:ca:a8:
         2b:92:f8:d9:7c:f8:9d:72:d2:2b:a2:a8:f7:17:4f:ec:55:e3:
         e3:90:c6:7d:37:c9:bb:97:4b:da:a9:62:8e:81:4a:5b:cc:f3:
         e2:cf:43:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:44:00 2025 by rpki-client