Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File:                     i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier:          q0uIhVGBF4wWNLIX2qkyihMlG3ItJ1XnQTRB2gfQjc0=
Subject key identifier:   09:98:64:64:F6:E2:17:24:93:10:9B:9C:26:83:2E:AB:DE:B6:1D:12
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer:       /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial:       0198D5F18F29108CE73619B42499934A7AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number:          050D
Signing time:             Sat 23 Aug 2025 08:00:34 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:34 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:34 +0000
Files and hashes:         1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
                          2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: 9peRN2l1KgO6Hty4h59Ewo30Q+/Hr89+OvkhSqKvtXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:8f:29:10:8c:e7:36:19:b4:24:99:93:4a:7a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
        Validity
            Not Before: Aug 23 08:00:34 2025 GMT
            Not After : Aug 24 08:00:34 2025 GMT
        Subject: CN=09986464f6e2172493109b9c26832eabdeb61d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:95:f6:9c:5c:bb:4c:37:95:00:ef:60:0b:
                    d1:71:a2:51:b2:9a:b6:1f:57:1e:9f:00:ec:1a:5e:
                    da:f1:73:7e:2d:9f:a0:bf:b5:b3:82:44:50:00:88:
                    45:43:be:05:1f:5a:a6:2d:26:e5:14:59:7f:de:3e:
                    66:37:3b:2a:58:6e:c0:72:cf:29:5e:50:5d:4f:dd:
                    4d:e6:b5:f7:f7:83:03:c5:f1:72:2f:8f:21:ec:bb:
                    ce:08:d8:9c:2b:4a:7f:f9:d2:99:be:38:60:14:17:
                    23:2d:82:67:d3:e4:e8:2e:49:6f:34:e2:41:e5:f5:
                    40:f6:05:5c:dc:db:3f:20:7f:cf:66:1e:3b:ac:f0:
                    7a:fa:e1:57:47:6e:c2:8f:33:aa:44:61:a3:e3:a8:
                    91:2e:7b:ae:97:92:b6:47:09:5b:7c:5b:cd:3e:ee:
                    ab:e5:af:3a:e2:64:18:6c:10:66:3e:0a:45:09:43:
                    97:8b:9f:e2:4c:54:0a:6e:a8:1e:45:07:aa:6c:d5:
                    3f:73:88:fa:d1:d6:6c:86:62:56:da:12:0e:ad:34:
                    0d:da:3b:63:f9:b5:f2:76:8f:89:d5:f3:05:5a:93:
                    b7:24:11:2e:ac:96:8d:67:26:91:6e:64:c3:b0:95:
                    55:a5:56:21:88:f2:61:32:e2:56:17:9b:54:7e:f5:
                    98:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:98:64:64:F6:E2:17:24:93:10:9B:9C:26:83:2E:AB:DE:B6:1D:12
            X509v3 Authority Key Identifier:
                keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:bf:de:95:b4:82:d7:d8:03:ed:c6:1c:7c:54:7d:e1:e6:dc:
         53:47:1c:0e:42:b8:4a:62:f6:f4:fe:ba:b5:5a:80:e9:77:48:
         7f:f1:de:1c:70:57:15:a6:ec:7a:b3:82:74:57:55:51:82:de:
         05:e1:70:69:c5:64:fd:68:60:66:fd:8b:99:65:0e:10:3d:9e:
         d8:ad:7a:97:f6:c0:10:12:32:b4:43:6e:f4:7d:5f:80:dd:0a:
         33:64:5f:8b:ce:c7:b9:fd:fa:a9:5c:5b:a6:18:9e:d3:2f:ea:
         34:db:99:3b:00:76:5f:01:0d:09:ec:a8:f9:f5:cf:90:99:57:
         77:e9:a0:3e:55:10:98:5c:f1:25:1b:d7:7a:0a:5f:27:2e:69:
         ad:aa:66:75:b2:98:a9:4e:fd:be:7d:90:4d:9f:68:07:13:35:
         d8:19:5f:9a:0e:d6:b0:ef:51:61:28:af:e5:19:ac:56:46:8f:
         da:8f:61:35:90:63:3b:d7:63:7e:c0:bb:91:25:09:91:30:64:
         8e:e5:ec:8d:05:02:c8:8f:5e:85:a0:ef:89:e5:43:71:40:56:
         ed:b1:a8:e1:d6:09:09:39:23:aa:21:57:b9:9b:29:9a:8a:25:
         0e:92:fc:70:c7:0e:84:cd:4b:3c:54:96:51:2d:48:d5:60:18:
         ad:a7:30:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:21 2025 by rpki-client