Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
File:                     pSNBhTlzXL2bC6PCeew1V9cmJlo.mft (raw, json)
Hash identifier:          G5DXlVRnbDfPRiSUeBK3818S0YYqhjIxsv0RXy3eUT8=
Subject key identifier:   98:3D:E4:A2:FF:8E:82:AE:58:53:F8:61:EC:0C:FE:CD:EE:E4:E9:C3
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Certificate issuer:       /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial:       019873746AA2FBA9BECCEEF7C320AA5EDBBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
Manifest number:          13CD
Signing time:             Mon 04 Aug 2025 05:01:05 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:05 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:05 +0000
Files and hashes:         1: 8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa (hash: Ub5Ka+iibeNMtT5d651FP9y1wedTUH3xQXSWP3OHFL0=)
                          2: pSNBhTlzXL2bC6PCeew1V9cmJlo.crl (hash: h/LoS8n3qKkyId43dhkWzmoReIvRSsl5VgoQ3rNEpoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:6a:a2:fb:a9:be:cc:ee:f7:c3:20:aa:5e:db:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
        Validity
            Not Before: Aug  4 05:01:05 2025 GMT
            Not After : Aug  5 05:01:05 2025 GMT
        Subject: CN=983de4a2ff8e82ae5853f861ec0cfecdeee4e9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a6:bc:06:b3:8d:90:5a:a5:9b:46:86:01:76:
                    63:79:64:dc:72:55:37:c4:8e:04:78:54:85:55:af:
                    49:46:bf:d8:35:10:0c:46:f3:87:bf:d1:39:52:48:
                    03:5b:35:ef:f1:6c:84:da:bd:bd:17:e0:ff:c6:77:
                    f5:77:1d:6c:cd:51:fb:26:79:ab:a4:5a:a8:c3:8c:
                    e1:9b:75:cb:97:58:a7:dd:3e:85:1a:a6:49:a0:16:
                    be:24:74:f4:24:e9:21:6a:61:47:a5:03:30:35:dd:
                    60:70:58:ef:68:30:a4:92:6f:9a:95:45:80:6f:4b:
                    a8:aa:6c:9a:8c:e6:58:4f:2c:eb:7f:7b:b6:1f:b0:
                    27:75:61:53:ea:42:e9:8a:02:5b:57:4b:30:a1:32:
                    a9:0d:ec:7c:d6:04:83:e8:bc:7b:cb:d7:06:c2:26:
                    24:65:55:21:84:10:aa:97:e8:ff:01:79:30:b2:d5:
                    44:e0:6e:ad:9e:8b:cf:10:de:40:c5:5d:62:0d:d4:
                    44:0e:4c:a8:8e:d7:e7:6d:ce:40:06:7d:be:6c:7c:
                    38:3f:b9:dc:17:73:b6:91:6d:9f:b3:47:d9:b5:1d:
                    01:2f:52:f4:9f:0d:8f:f4:84:cf:78:08:f5:46:96:
                    27:46:c0:f5:cb:e8:c8:1b:67:fd:9c:5a:84:0f:6d:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3D:E4:A2:FF:8E:82:AE:58:53:F8:61:EC:0C:FE:CD:EE:E4:E9:C3
            X509v3 Authority Key Identifier:
                keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:97:cd:68:eb:03:fa:14:df:1c:59:04:0b:46:67:15:0d:fa:
         df:40:16:9c:8e:22:14:11:0d:41:af:2e:b5:9c:c7:da:35:53:
         60:3d:95:30:9c:b5:1c:89:6c:57:f8:a4:b4:35:5c:c4:8d:aa:
         5e:e3:81:a8:9b:4a:4f:e9:2b:4a:fb:2c:0a:f5:9b:7a:95:c8:
         14:39:28:9e:92:4c:a4:92:1f:61:8d:46:61:60:e1:79:e7:fa:
         de:a0:a0:68:ec:7b:f8:48:9d:32:5d:59:76:f8:0b:a0:13:4c:
         e4:f2:f0:a2:3f:78:67:4e:f3:00:38:49:07:58:6d:47:0c:5a:
         1d:db:fb:f6:29:37:de:f0:8e:70:65:0b:59:1b:b3:2f:7c:fa:
         c3:7f:70:c1:ee:23:da:a0:82:30:3b:3b:e8:52:49:d3:2b:45:
         f7:59:fd:cc:3b:03:5a:33:65:e1:6e:a0:21:fc:fb:ac:5f:4c:
         94:e2:6a:49:fa:c3:94:4d:e2:7a:8f:a1:55:cf:a3:fe:33:a3:
         36:db:24:1a:18:ad:0c:ea:34:95:d8:1e:76:08:88:9b:70:2c:
         67:32:c6:2b:9b:8c:7a:13:cd:ed:79:3e:e1:95:54:d8:2b:92:
         a9:9e:8b:3d:71:50:06:08:84:da:f2:4e:cf:d9:ab:41:56:29:
         17:69:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:00 2025 by rpki-client