Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
File:                     pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft (raw, json)
Hash identifier:          9yLmdPSvGy9fqwdBJa+GMeOGup6emj43yx+7EYGCSJg=
Subject key identifier:   0F:BB:C4:16:90:00:4D:83:F3:7E:51:56:35:C8:89:D1:AA:E4:81:24
Authority key identifier: A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
Certificate issuer:       /CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Certificate serial:       0198D4E0B0746E55D672876B1A2F456AC2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
Manifest number:          0A15
Signing time:             Sat 23 Aug 2025 03:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:31 +0000
Files and hashes:         1: L_XmzwrYuu-3rRY_iMRM0yQHIg4.roa (hash: RmMXdLfBhblx+m1KktkkN/nQ0YOW2Tp0s4LZY86DblA=)
                          2: pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl (hash: 0LOADKCGvL66ZxiqK+YdoP3xWKkADoZKK+aOGagI3jY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:b0:74:6e:55:d6:72:87:6b:1a:2f:45:6a:c2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
        Validity
            Not Before: Aug 23 03:02:31 2025 GMT
            Not After : Aug 24 03:02:31 2025 GMT
        Subject: CN=0fbbc41690004d83f37e515635c889d1aae48124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:02:99:e5:2a:41:6c:29:82:f7:8c:7b:07:
                    32:54:a4:47:77:fc:23:80:ee:4b:6f:56:58:da:fe:
                    6b:a4:9a:bb:97:f6:32:3d:7a:58:fe:27:20:43:d0:
                    b7:61:c6:7c:10:d8:24:66:e4:00:8f:ba:4a:86:8c:
                    18:58:70:da:03:f1:2e:2b:5d:14:83:79:6c:03:54:
                    53:cc:24:1a:db:61:c6:cd:4a:8f:c1:6f:e9:83:69:
                    b9:46:f3:e5:40:e5:ef:d1:9b:ae:62:e5:af:cc:9a:
                    7f:f5:05:ae:67:f0:02:32:4e:ec:ba:94:8e:bd:67:
                    7c:d1:63:7d:c2:8b:9e:51:e6:a3:9b:f5:e6:28:d8:
                    87:64:50:86:9a:51:6a:a8:6b:41:95:f1:07:4e:1e:
                    3e:77:16:8e:6b:d1:46:4a:0b:e0:fd:d4:06:a8:db:
                    1c:a6:aa:35:5e:4d:fa:aa:68:62:48:ca:6b:4c:bd:
                    da:3b:42:4b:48:e6:07:6c:11:c3:d1:7c:73:a4:7c:
                    1c:72:fe:f6:be:09:22:47:20:18:d4:ac:d5:70:95:
                    ed:ac:c5:2e:13:12:9c:b9:81:36:57:a0:e5:05:d2:
                    2c:5a:5e:e7:99:61:37:da:0f:61:ca:f4:a2:ef:53:
                    42:38:33:1b:a9:9b:74:61:80:21:60:2d:90:a5:18:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BB:C4:16:90:00:4D:83:F3:7E:51:56:35:C8:89:D1:AA:E4:81:24
            X509v3 Authority Key Identifier:
                keyid:A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ee:51:98:b7:2a:4b:5e:a5:a3:63:bf:b5:6d:9a:6d:25:9f:
         f1:9f:3d:30:7c:07:0e:4c:b8:ce:78:22:bd:31:15:f7:1e:59:
         4e:6a:d9:c7:d2:12:f6:0b:ac:63:2b:cc:9a:92:59:e0:fa:86:
         ef:4d:46:d1:d5:89:4c:9c:d8:cd:7b:4a:e2:27:0d:09:96:34:
         95:91:4c:c8:70:2a:09:e2:31:99:bd:9c:33:88:e6:57:3a:42:
         99:b7:75:74:77:71:a2:6a:7d:b0:2c:6e:46:2d:2c:a5:f6:ab:
         99:d6:2a:d4:3a:ca:b3:13:2a:42:33:f7:e0:f8:7f:5b:ce:32:
         cb:ea:45:68:9d:8b:9d:33:56:ae:e7:fb:9c:34:f4:2a:0e:d6:
         f5:78:8c:a5:07:24:74:95:02:34:f8:f8:d9:41:79:43:64:d5:
         40:9b:9a:6a:52:85:a6:6f:d5:6e:8a:a2:22:82:4d:0f:8b:48:
         22:e7:44:ed:ee:ae:c5:fa:b4:ff:6a:ff:8a:4e:08:ca:05:af:
         db:8e:dc:d2:cf:00:b4:7b:9c:50:17:c0:b9:76:df:40:c4:8c:
         80:fd:5a:31:ae:d1:e6:dc:25:71:a0:37:23:0d:76:51:5b:a0:
         62:71:14:42:64:6f:50:61:c8:99:a0:41:a2:b3:74:11:8b:da:
         47:39:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:21 2025 by rpki-client