Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
File:                     MRhMnotqpAfA1z7QugYwdfYxTjY.mft (raw, json)
Hash identifier:          KOjvTr/5rBnSgGn7JBQSk5fzXPvb+XS+ol/e2WUZbMA=
Subject key identifier:   D1:64:0C:16:83:E8:13:73:86:31:59:6A:DA:A8:FF:11:CE:E6:0F:4F
Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36
Certificate issuer:       /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
Certificate serial:       0198D583CE3A684857527F13D40310A0F104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
Manifest number:          071F
Signing time:             Sat 23 Aug 2025 06:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:41 +0000
Files and hashes:         1: M16uuK8RBAhq-G4iUMFVGeS4VOA.roa (hash: Tzmv8XvI8c70nplaF0O7on0dN4ghnMF0KoTaadCmRAo=)
                          2: MRhMnotqpAfA1z7QugYwdfYxTjY.crl (hash: 7/mj8IFjLldab7MsG5EkbLyt+6IMINkDFnygmsMkOBI=)
                          3: j0wVGA_XYNpaj0gdPVnYetQ4kdo.roa (hash: LDoymRkSd4Uoyu5Lf7qh9Z/0YCixabChwL/74B3fLbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:ce:3a:68:48:57:52:7f:13:d4:03:10:a0:f1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36
        Validity
            Not Before: Aug 23 06:00:41 2025 GMT
            Not After : Aug 24 06:00:41 2025 GMT
        Subject: CN=d1640c1683e813738631596adaa8ff11cee60f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:53:f6:13:a4:0e:f2:4c:0a:06:55:30:70:
                    31:7e:d5:44:22:61:b5:29:fb:cb:22:00:07:b6:34:
                    89:0d:2a:9c:6e:1d:a5:99:85:74:78:6b:fa:3d:29:
                    d1:00:7b:f1:ac:47:00:a5:9c:85:a8:de:40:84:0a:
                    16:f9:ef:ad:8c:f4:66:bf:4d:83:ab:56:d5:3b:15:
                    29:b3:ec:9b:61:b3:a2:26:0d:3d:54:f2:84:e3:e3:
                    30:4c:8e:1f:3d:65:6f:fb:37:c9:0b:84:7c:82:b2:
                    37:3b:44:51:28:5b:5e:5c:1c:89:1a:d4:2d:ef:07:
                    e1:fb:50:ce:fa:c9:56:b0:3a:e6:a5:9d:2d:f5:35:
                    22:d3:37:76:cd:4a:cb:8b:9a:70:8c:a9:0e:b9:ce:
                    5a:01:3d:cf:c4:3b:16:e6:ea:1b:e4:31:ec:fb:9f:
                    05:9a:5d:f6:52:df:dc:c6:24:75:d5:e9:32:8a:81:
                    56:4e:ee:7d:02:75:81:2e:22:b2:48:d1:6a:8b:44:
                    0d:5c:90:29:08:70:25:6a:9e:1f:0f:a4:67:9a:b7:
                    00:e5:89:39:3f:73:2d:cc:84:8b:e7:ca:1a:cd:23:
                    ac:4b:89:0d:46:60:e5:7b:f1:9d:28:dc:b6:e7:09:
                    93:9a:74:8a:0f:74:da:79:ce:aa:40:4f:00:ae:0f:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:64:0C:16:83:E8:13:73:86:31:59:6A:DA:A8:FF:11:CE:E6:0F:4F
            X509v3 Authority Key Identifier:
                keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:81:8f:e6:8b:f4:42:31:1a:e6:d4:fc:83:37:e0:99:51:38:
         ba:eb:fc:ac:77:9d:15:0d:2a:ec:4c:72:52:3d:74:b9:ff:95:
         0c:6e:8c:cd:d1:93:8f:c0:48:fd:07:be:1f:88:a5:d2:70:6c:
         fe:a0:1c:f1:3d:40:ba:6e:d8:4c:36:d9:42:0e:24:b6:6b:2e:
         2e:3f:ec:4d:af:84:0b:cd:bd:3a:11:92:ae:d5:b6:95:b3:81:
         c6:ff:a9:3a:34:ac:96:19:d7:fd:b2:43:e8:91:93:7d:e2:5f:
         3f:1d:f3:f1:ee:ec:01:03:ee:74:2a:fb:6a:94:7c:18:7b:1c:
         0e:3c:00:86:c5:d0:b0:c8:95:42:0b:02:f8:dc:72:10:dc:f7:
         72:96:8d:db:b1:2a:98:a0:b5:d5:20:48:d5:3b:50:d0:78:e5:
         26:1a:01:21:c3:54:ec:6a:ce:f4:3f:4c:69:91:42:9e:58:17:
         8e:3e:f4:72:75:ec:65:b5:de:8c:15:1d:64:72:8c:19:fe:da:
         34:59:d7:4b:54:12:6b:71:98:23:31:a3:93:92:eb:da:20:0e:
         fa:ea:55:79:ab:08:7d:4a:5a:00:fa:76:5a:9e:50:90:bb:8f:
         bd:f6:14:d5:56:5b:08:a8:b7:85:6f:ef:db:67:57:c0:9d:81:
         56:e0:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:30 2025 by rpki-client