Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
File:                     PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json)
Hash identifier:          rceAHSm5ek1MCSWNo3TLdCUKzZh/em2EPY1gd0sIoT8=
Subject key identifier:   AC:A8:57:81:3B:65:31:DF:00:DF:F4:8A:10:97:BE:6D:6B:BB:B5:95
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Certificate issuer:       /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial:       01988054C2BE11C702050B2C5CC0315E277C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
Manifest number:          0278
Signing time:             Wed 06 Aug 2025 17:01:35 +0000
Manifest this update:     Wed 06 Aug 2025 17:01:35 +0000
Manifest next update:     Thu 07 Aug 2025 17:01:35 +0000
Files and hashes:         1: 0zozhddFGxlaDU0eMcPGzCbmd6I.roa (hash: HhrjUsFCH402W4XdhuJKvzUEm96xMJ7A0tUrjiNFw6Y=)
                          2: 2z44fAwQyyEeWoKCF_G5EjvRE_Q.roa (hash: Z34LIfgBtYIlenX8BP2t8IUqfPpsJULSyBoNS38aJWk=)
                          3: 4kquCz-i6kJDkS1O2XQAUk_agCI.roa (hash: Pez2ubHTLSNld28U0wPkDbmTvFBCVvXm37XAiS5Y0fA=)
                          4: FukUNQ-1MuiT_YZ8AK4IiNn3ZEM.roa (hash: Q+TDgTJT6+GCL8Icb4N9FEYd+k8ybFyashs6L8F6jRA=)
                          5: Ih96IDuDaMSdBEjycgfBHMlpv1k.roa (hash: gzRNZYScETmPIIaSnlA3ny9nEyJmD80+p4ZodHIyvdw=)
                          6: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: UyroZGds0L+RUXBxXJiWPGP5zKK1VijnhjmXtCur9Jo=)
                          7: fDTEunNvzlH5X-k5xdeAmWjVRig.roa (hash: kSsYzCwppDZTwjMBzSM9jNvsq5Yv3fwitPhSPp+j0to=)
                          8: s8x3Zl1NTIQSd2VaNW3r7mX9Qt0.roa (hash: 955pA2YQRo69WOfGT4zy28ccgCxBC3J2614wD9x3OY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:c2:be:11:c7:02:05:0b:2c:5c:c0:31:5e:27:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
        Validity
            Not Before: Aug  6 17:01:35 2025 GMT
            Not After : Aug  7 17:01:35 2025 GMT
        Subject: CN=aca857813b6531df00dff48a1097be6d6bbbb595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:32:90:a4:d8:ac:da:55:86:f2:46:e9:d2:
                    3c:97:c8:6f:22:b2:97:c2:98:61:19:12:cb:14:87:
                    df:bb:df:03:7b:96:2d:56:74:26:da:63:a6:51:13:
                    a9:8a:96:6f:f0:eb:5b:41:ff:af:2f:90:c9:e9:c0:
                    be:6e:03:d0:f9:a3:c6:99:d9:ea:9b:80:cf:a0:be:
                    07:83:b1:76:fa:40:c3:95:37:ef:d6:df:78:f1:f1:
                    da:ca:e1:6b:a0:5d:15:95:6a:4c:7b:96:66:bb:9a:
                    4e:00:06:5d:fb:a5:bc:da:c3:0f:44:e3:42:60:57:
                    dc:6b:71:ef:df:a7:aa:60:54:6e:17:3f:6a:36:3f:
                    89:64:57:8e:25:c0:45:ca:7a:42:dc:86:86:bd:49:
                    84:d4:1c:a7:a7:17:ca:1b:66:ca:cd:80:c5:18:6e:
                    ac:c5:46:26:73:72:7a:d7:20:f8:45:12:65:80:d7:
                    f6:11:07:69:11:ad:70:e3:a3:2a:e7:75:3d:d6:d9:
                    f5:39:fc:c9:eb:23:1b:13:a1:b9:9e:83:68:4f:d5:
                    3c:08:b9:c7:04:81:87:a9:d8:93:65:71:c0:5e:43:
                    b6:9a:80:e4:3b:a7:3a:d9:b7:12:9e:2d:d2:59:57:
                    9e:67:50:0b:f9:25:de:c7:c9:fd:88:d4:fb:49:d5:
                    21:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A8:57:81:3B:65:31:DF:00:DF:F4:8A:10:97:BE:6D:6B:BB:B5:95
            X509v3 Authority Key Identifier:
                keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:31:af:44:e7:7b:89:9d:50:9c:f7:8f:43:3b:c1:e1:0f:3f:
         3e:ef:3a:79:8d:fb:8b:b5:1a:b6:8e:83:e8:84:36:57:84:38:
         4d:15:5d:60:43:87:fc:7e:06:5e:2a:f3:4b:b4:35:e2:3f:9a:
         06:49:9f:ae:b8:cf:40:65:4a:fe:9b:08:88:3e:2d:31:57:64:
         20:1b:56:37:3d:3a:b9:ca:4f:b4:bc:74:c8:9c:75:30:52:f1:
         0a:6c:ce:fe:b5:c1:7b:f1:2c:08:bc:b2:69:e0:51:22:d8:4e:
         3c:f0:ba:56:80:c0:69:18:21:60:af:ea:91:a4:1c:cd:40:99:
         d3:ad:c7:8d:5f:6c:a0:eb:13:c4:8a:66:fa:06:36:b0:0d:09:
         8e:10:fc:07:16:b9:a9:f6:71:b8:71:90:90:df:4e:10:4e:8c:
         22:ba:b0:53:76:6b:a9:cf:bb:27:20:db:88:4a:79:7c:5a:df:
         93:33:6d:1d:65:50:f7:e5:dc:95:f2:ed:57:3d:58:df:cd:9a:
         84:ff:55:fe:c1:19:43:95:9f:fc:2f:cf:c2:60:06:37:a9:eb:
         43:3b:87:28:a5:d6:cf:e4:6a:cb:28:a9:0e:f9:2b:d1:99:6e:
         34:61:61:fc:83:3a:50:2c:f5:fe:33:b5:3f:8f:d5:58:c3:38:
         17:c4:f6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:26 2025 by rpki-client