Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
File:                     63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft (raw, json)
Hash identifier:          qDfMQJ9Z+4VlntG2GydDWo5pF5h5qRUjiIhk0N7aP6Y=
Subject key identifier:   02:B8:FA:AD:AB:E4:A1:78:14:44:7E:3B:00:BF:E3:E8:9A:87:40:96
Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
Certificate issuer:       /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Certificate serial:       0198D65FDDA0B614DCBEFD193B9B7000638C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
Manifest number:          09AA
Signing time:             Sat 23 Aug 2025 10:01:03 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:03 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:03 +0000
Files and hashes:         1: 63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl (hash: VnAYIQ3KNKiHAJNY8RBFpbRV8i12R88peJHlvkl7vMs=)
                          2: GgwfFTO4uP8S6Zfl4qD7wrkk97Q.roa (hash: F3vmPojHcPZ/pLNRoH2QfGVNUxhfBZ4t6IZ3+YyXKWU=)
                          3: _JRrp8FLIzN3Wcs3_-BVtmFxo2Q.roa (hash: Q8m6C2FVj5mzjX13rNX4ocgoM6UgNDM4e2TXd5eI9uA=)
                          4: cTqqZ8EZL5CVbn9iDxm1gMobbtQ.roa (hash: q8ilyeI7HJCy0KwqUBGDpRhrf43OmwTjYcPx/gS2klY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:dd:a0:b6:14:dc:be:fd:19:3b:9b:70:00:63:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
        Validity
            Not Before: Aug 23 10:01:03 2025 GMT
            Not After : Aug 24 10:01:03 2025 GMT
        Subject: CN=02b8faadabe4a17814447e3b00bfe3e89a874096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:c1:5c:4f:2b:ce:46:95:12:a2:65:9a:85:
                    99:2a:35:f8:56:67:9a:41:25:61:e1:82:ce:da:ee:
                    2b:87:3d:95:06:1f:45:ec:7a:fb:e7:d0:f6:f9:cd:
                    eb:e0:ac:d8:e8:e3:f7:60:52:61:d8:e8:67:8c:e0:
                    24:45:6a:2a:eb:bd:9c:9c:6a:2b:6e:43:6d:6f:33:
                    2f:19:3a:4b:ff:f9:90:8f:40:36:ae:d7:bb:28:69:
                    35:51:88:de:03:86:ba:cc:7f:33:c1:4e:6b:27:d9:
                    13:32:b5:ee:9c:04:8d:91:3a:ad:53:03:35:58:27:
                    2c:7a:d7:71:9b:6b:92:3e:79:10:e0:b1:6e:04:7f:
                    c8:78:21:42:6d:1f:bc:ad:b8:79:36:f1:2e:3a:be:
                    fd:bb:38:7a:30:f1:7d:af:f9:a0:73:83:0a:48:fb:
                    99:b9:04:a0:a1:67:fd:b0:54:69:9d:eb:e6:e5:7e:
                    92:6e:99:c5:90:f8:72:49:e2:55:0c:a2:81:7c:d6:
                    c1:0c:74:93:07:07:c7:e0:cd:ea:e2:70:38:cf:cb:
                    ef:fb:35:70:92:5f:2b:2e:64:45:4a:e9:84:bc:ef:
                    46:4d:3b:09:50:a5:be:61:82:55:d1:d1:8c:91:5d:
                    8e:21:42:5a:b6:f3:39:a6:49:33:3f:64:2f:ea:f1:
                    26:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B8:FA:AD:AB:E4:A1:78:14:44:7E:3B:00:BF:E3:E8:9A:87:40:96
            X509v3 Authority Key Identifier:
                keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9a:07:40:39:10:78:3f:ae:b2:0d:37:16:b8:c3:8c:6d:eb:
         af:e3:30:cc:5d:ad:d1:b1:72:4f:b8:98:09:23:ad:f5:5d:dd:
         5e:43:c8:3d:4d:ce:64:20:14:88:55:f2:20:f5:d9:48:07:e9:
         d8:3a:c7:e1:bd:29:4a:f1:11:cb:fd:c9:3c:fa:fc:b0:11:a1:
         3d:14:4e:26:51:a4:7c:e4:53:07:c3:ac:bc:98:78:28:ef:55:
         21:de:94:68:88:30:fb:49:50:3f:68:2e:fc:3f:66:3d:8e:f1:
         0a:a2:9e:30:9a:f6:8e:d1:cf:bb:ad:4f:bd:51:95:dc:c9:bd:
         ac:af:8e:f4:42:01:70:75:64:60:bc:14:ec:dd:01:c9:e7:0d:
         6b:65:0e:b3:b5:b6:4f:b3:f3:53:36:0b:ab:7b:61:b1:a3:04:
         31:2c:b1:a3:d1:05:01:1a:a8:51:7c:b0:04:5f:34:7c:3c:0d:
         10:2a:f8:7c:3f:df:1d:8b:bb:f7:dc:ba:b1:96:8c:67:19:6d:
         7f:41:de:87:24:a7:f4:27:b9:47:f7:33:d7:da:ac:08:ae:7d:
         e0:ff:0d:82:f5:ce:6b:a9:79:a0:df:81:e3:08:b5:88:a7:72:
         28:df:72:bd:de:e7:27:a1:d9:e8:18:7e:b7:01:b6:4c:49:03:
         b1:55:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:39 2025 by rpki-client