Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File:                     Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier:          V2S1j56M5ACY5NTOw8fK280bLiacxUqZhOM/KNzJuL8=
Subject key identifier:   9B:84:84:B7:1B:BA:D8:62:4E:D0:92:CC:E1:4F:EC:D0:52:30:8F:1D
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer:       /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial:       019892FF70D34CC788E26749CA2FF7205AC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number:          1626
Signing time:             Sun 10 Aug 2025 08:01:10 +0000
Manifest this update:     Sun 10 Aug 2025 08:01:10 +0000
Manifest next update:     Mon 11 Aug 2025 08:01:10 +0000
Files and hashes:         1: 3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa (hash: kD23fxg6HJol+5c+jQle3o8CP0BhvDm3gW0I2oTpUsE=)
                          2: 9ZGSbvVWGJA03vrSyQUEVarRr-4.roa (hash: cPvp9kLsR1g5wI6QgkJQ/4iEUD2cM7N5TL8rSHXBr1c=)
                          3: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: 7unWwfeYuU1Ya6jb1x6fvjOnJ/lsrLIhNkrSWmnFOQ4=)
                          4: k6_D03YidxIC349EjXRq0tAB-Qo.roa (hash: EeEY/m7OL+tVaal0Hy7U3tDs+glAoHmKchjSxGhakus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:ff:70:d3:4c:c7:88:e2:67:49:ca:2f:f7:20:5a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
        Validity
            Not Before: Aug 10 08:01:10 2025 GMT
            Not After : Aug 11 08:01:10 2025 GMT
        Subject: CN=9b8484b71bbad8624ed092cce14fecd052308f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:09:c2:63:d8:e7:84:74:38:9d:55:cb:9e:
                    08:cf:0e:ac:ba:a1:9e:11:4d:58:74:ee:0a:88:87:
                    c9:d9:fa:0f:5a:6d:86:de:67:9b:f7:89:de:ab:69:
                    0a:e0:07:ed:76:4a:41:de:30:89:9b:7e:8a:61:70:
                    6c:76:c8:44:af:96:b4:87:79:bb:6c:4e:0c:9f:9d:
                    7c:7a:27:20:7c:3b:3e:e4:ab:9e:94:89:24:b0:f3:
                    a6:c1:5e:bd:a6:a4:51:5a:5b:db:bc:29:56:84:b8:
                    a3:15:a2:df:ea:8f:34:1a:5d:dd:8e:03:be:95:c3:
                    39:b1:96:d7:de:62:d1:ac:f2:57:11:ca:93:6a:b4:
                    28:9c:0e:bc:bf:f5:1b:82:16:eb:dd:75:8b:2a:f4:
                    e2:d0:bd:c8:3d:b5:b5:37:52:d5:f8:30:ec:26:86:
                    ab:1b:82:0d:41:3d:15:59:49:1e:14:6f:0e:04:52:
                    f9:40:12:69:06:d2:04:c3:e6:28:9b:3b:04:4b:91:
                    a5:1d:3f:cb:ce:ce:bb:63:e6:5e:b3:9d:63:57:b4:
                    de:32:22:76:88:f2:a6:b5:a0:07:2d:38:22:fb:9b:
                    dc:85:1f:ec:ea:ba:b4:55:e7:f2:f0:1d:0c:dd:8d:
                    9c:35:75:63:28:5a:61:6d:53:06:f3:f4:c7:d6:9a:
                    ef:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:84:84:B7:1B:BA:D8:62:4E:D0:92:CC:E1:4F:EC:D0:52:30:8F:1D
            X509v3 Authority Key Identifier:
                keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:ef:fb:8c:d8:93:07:42:d1:93:63:a0:ec:9e:80:ad:19:
         87:ea:68:6c:5b:f6:14:02:4d:51:ab:18:69:12:bc:a6:4e:74:
         ce:13:76:db:ef:f7:05:6f:08:b9:45:74:68:a3:15:3b:b9:09:
         8d:44:ba:a7:84:76:3b:39:cf:d5:a4:eb:3f:87:29:58:39:78:
         97:dc:89:0d:6f:37:e7:fc:d3:9a:1c:8a:de:6c:7d:41:7f:a2:
         72:f0:cc:a2:6d:eb:35:03:cb:0f:24:7a:7a:39:ad:b1:b8:4e:
         8e:48:14:e3:d8:aa:0c:63:28:12:a0:dc:5d:cd:09:c5:bc:ca:
         e5:2a:72:5f:77:db:ab:c2:a7:10:64:3a:e9:40:9c:0e:91:1a:
         b3:b8:44:14:32:64:36:18:6d:16:a0:fc:11:14:0b:ce:98:f4:
         0f:44:4a:9f:6a:b5:c6:a7:15:f9:5d:7d:c6:2e:b2:ec:b6:30:
         77:ef:6d:37:9e:dd:ae:1f:46:3e:be:02:3f:b2:fe:7b:ec:0a:
         4c:5b:7b:ab:a2:8d:a0:96:de:a4:e2:85:d7:97:88:1b:ca:b6:
         9f:87:43:bd:03:67:b7:31:8f:53:8f:06:28:8e:c1:e5:04:11:
         61:b3:2d:1a:32:51:bf:d0:3a:43:9a:a9:f5:23:a5:cf:30:88:
         d3:96:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:00 2025 by rpki-client