Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
File:                     PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft (raw, json)
Hash identifier:          juSsV3b2H8SNF9xyUFkSJlo6322sYKI1Vqp7MfVw73Q=
Subject key identifier:   C9:7A:78:CD:26:5E:DD:52:69:EC:FE:BC:EF:C5:36:FB:69:EB:41:F8
Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
Certificate issuer:       /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Certificate serial:       019849D2E64AB27D8DA5B1960E3AD71CB2B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
Manifest number:          0F46
Signing time:             Sun 27 Jul 2025 03:00:14 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:14 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:14 +0000
Files and hashes:         1: PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl (hash: 5jL6njbEcGQjTJcB7TNz7n0MUsXbL2/2cJsEnjvLN+U=)
                          2: he1zzqscDQVrqbAH6ruuBRGptHQ.roa (hash: pIEmG6D6JQGwEUn6Yp/QlQoXb08gkZ0Iha980hmaQQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:e6:4a:b2:7d:8d:a5:b1:96:0e:3a:d7:1c:b2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
        Validity
            Not Before: Jul 27 03:00:14 2025 GMT
            Not After : Jul 28 03:00:14 2025 GMT
        Subject: CN=c97a78cd265edd5269ecfebcefc536fb69eb41f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bd:7e:59:8c:0a:55:d0:c0:c9:40:4c:21:0b:
                    e4:9d:91:d6:fa:a7:b2:88:8d:8d:ae:c2:fa:5d:a7:
                    3a:a2:4d:4a:6a:02:bb:ce:50:22:41:4a:89:2b:ab:
                    b2:26:d5:c0:64:53:4e:52:67:0b:87:ab:9b:60:a7:
                    c0:1d:93:1f:62:d5:1e:b5:61:0e:00:d0:cf:07:28:
                    19:74:7b:80:3c:df:c8:1b:e8:f1:6f:4e:91:fc:b9:
                    2b:8c:41:3e:18:db:42:fa:20:47:90:7a:4d:f1:7a:
                    b9:37:00:ec:cc:37:03:51:a0:43:79:d8:df:ce:c7:
                    70:c5:d1:7b:bd:33:a4:8d:d7:9b:6b:8f:4a:10:bc:
                    74:49:69:0f:20:4e:3e:65:16:e7:51:cd:3a:00:64:
                    57:6a:00:7b:36:06:a2:9a:ad:c8:26:5b:a3:77:5e:
                    db:75:52:98:c4:f7:60:5c:97:dd:51:18:df:0e:37:
                    50:b8:08:fd:f7:24:89:da:0d:f0:ef:90:27:53:71:
                    0b:ac:5c:f9:e2:bb:a7:62:63:a0:4c:08:78:f1:1d:
                    0e:ec:70:b4:29:38:0e:a9:7f:1c:9e:1d:e5:32:39:
                    b6:d9:1a:3c:33:f7:a4:b0:09:da:a4:7d:e9:0e:25:
                    9e:29:f4:13:6a:8a:25:f1:6b:93:36:dd:d5:07:8d:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7A:78:CD:26:5E:DD:52:69:EC:FE:BC:EF:C5:36:FB:69:EB:41:F8
            X509v3 Authority Key Identifier:
                keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:92:e5:fd:81:56:ee:7e:28:3b:96:9b:00:19:e0:a2:61:
         43:72:9d:e4:14:a4:eb:c5:72:d2:b4:de:b2:1c:b5:17:ca:8b:
         c4:e8:87:75:da:1a:88:1a:63:ca:dd:f7:10:69:d8:bf:ce:79:
         2b:58:39:b3:23:bb:71:b6:36:ba:c6:c7:73:99:82:e7:11:bb:
         cf:c5:5a:7c:8b:23:64:92:e1:94:9f:c0:92:1f:fc:77:4c:d4:
         72:30:f9:64:a0:bb:9d:a5:bf:ef:13:c5:0c:b6:06:53:ee:66:
         3b:0c:5a:75:df:d4:d4:67:c5:9c:e1:15:49:c9:12:fd:04:01:
         0c:da:da:3f:5c:7a:73:c3:f9:21:c0:3a:0e:08:ac:ec:67:c0:
         c2:ed:9c:4e:34:e4:e2:ac:ce:46:fb:4f:c3:3f:43:7f:f5:48:
         dd:8f:14:a9:e0:f6:5f:f8:7c:33:09:4c:72:11:aa:95:16:c9:
         66:3f:ef:e5:9c:ba:7a:34:af:2f:3a:af:10:e0:93:cc:07:e7:
         2f:ca:e0:03:fc:28:76:e8:18:49:06:95:94:1d:79:cd:fa:5a:
         1b:73:2a:12:72:1f:c6:d2:ac:22:c3:e7:8b:a8:42:55:a6:c6:
         35:86:5b:08:bd:2f:1d:af:99:c8:ee:89:92:69:23:a1:90:08:
         1d:2f:71:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:08 2025 by rpki-client