Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
File:                     qMbudsTo2UYU4IJQX_6MmRokr4o.mft (raw, json)
Hash identifier:          mrTV3MdTE9ix0UfDeRs8h//swc65W2S4WxzX79RDaK8=
Subject key identifier:   F6:54:8A:2F:12:0A:CB:22:43:8C:75:7A:C2:CC:9B:24:54:0B:61:BF
Authority key identifier: A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
Certificate issuer:       /CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Certificate serial:       0198D7057C83A2FDE9FD47BF219F1BFB1A7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
Manifest number:          12AF
Signing time:             Sat 23 Aug 2025 13:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 13:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 13:01:57 +0000
Files and hashes:         1: WTYKu26kIWjOTIQNkx9XhusumzA.roa (hash: jdR1zGE/VerZVpVMdByTcrJDOg5A7+iJoxqGyTD0+wQ=)
                          2: qMbudsTo2UYU4IJQX_6MmRokr4o.crl (hash: UXjKaUOgb/Sv814rjQCdtYbXsWMg5LVcTeGA6ly8MwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:7c:83:a2:fd:e9:fd:47:bf:21:9f:1b:fb:1a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
        Validity
            Not Before: Aug 23 13:01:57 2025 GMT
            Not After : Aug 24 13:01:57 2025 GMT
        Subject: CN=f6548a2f120acb22438c757ac2cc9b24540b61bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e9:fa:38:7a:a9:2d:f9:64:2a:a7:fa:c6:2f:
                    0e:07:f0:7b:ac:d4:09:21:4a:0e:bf:b6:93:d2:e1:
                    05:cc:37:0e:d6:a7:5b:82:70:2d:c1:4b:41:2f:ff:
                    84:44:32:b8:7a:31:46:b9:35:9c:31:1e:75:44:52:
                    09:38:be:7e:29:42:6e:53:ed:48:96:39:6b:ac:24:
                    05:04:d3:0a:f4:db:5e:bb:c9:ff:a0:65:2f:29:df:
                    4e:4b:de:99:f9:38:24:8b:92:64:e3:4d:eb:8b:7b:
                    bc:96:53:5b:d9:3d:3d:3f:a8:1e:5e:c4:2e:50:34:
                    51:0b:c7:e3:15:61:49:bf:9f:74:c9:3f:a5:d8:86:
                    34:e8:53:f2:83:b6:2f:ad:8e:84:9e:76:9c:75:f2:
                    7d:78:c2:5c:6f:ec:51:9c:03:b2:33:bb:25:69:14:
                    c3:f7:87:1e:f3:e8:bc:d3:b7:7d:14:46:8e:1f:cc:
                    83:b6:5f:51:8f:b1:0e:ce:39:5b:6e:7a:86:6b:fd:
                    d1:5c:18:26:95:fd:1c:0d:da:00:d8:4c:51:2a:cd:
                    54:33:c8:4b:6d:17:2f:3b:cc:83:7a:21:69:f0:aa:
                    0d:16:6d:0f:34:7f:7d:cb:6b:55:76:39:03:43:d7:
                    83:f4:e1:9c:46:3f:28:cf:4d:30:a4:fe:f3:6b:54:
                    04:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:54:8A:2F:12:0A:CB:22:43:8C:75:7A:C2:CC:9B:24:54:0B:61:BF
            X509v3 Authority Key Identifier:
                keyid:A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3e:05:15:1d:8a:84:2a:ec:49:e2:55:63:50:5f:97:3d:ae:
         e2:4a:6e:b5:d0:70:82:1e:78:40:99:9a:dc:e7:39:7f:13:59:
         72:6a:fe:f3:6a:6a:45:c3:74:27:3e:b0:52:90:fd:49:1f:9e:
         7a:8c:ac:37:56:f5:62:a6:7b:42:f6:68:07:0e:7c:96:2c:1e:
         cf:67:db:1c:83:ca:ed:c2:6d:ab:f6:97:b1:c2:c6:36:0d:8f:
         f0:b5:ee:a5:bf:34:21:d1:41:2c:c7:42:6d:16:4e:bd:28:2b:
         9b:b7:02:e4:10:d7:1a:54:9a:f7:1f:f3:a9:73:89:dd:50:34:
         69:2d:9e:c2:62:ea:a1:22:20:5c:dc:d0:d7:f0:06:11:6f:9d:
         ca:c9:1a:71:60:76:c0:21:b6:64:5f:63:39:20:66:4b:43:e7:
         d1:b3:29:74:de:c4:e7:9f:26:36:72:ec:20:0e:09:5b:f0:b1:
         e8:60:96:07:88:6e:af:d8:de:90:3b:35:3c:ff:09:f7:8f:04:
         81:0b:d1:47:0f:d7:e0:b8:6f:ad:fa:0b:fd:35:4e:c9:64:48:
         ed:91:6d:10:69:6d:bf:3d:94:e5:1c:5d:32:93:1d:50:23:ed:
         7e:4e:84:33:3c:47:f6:01:30:9a:c5:58:1d:60:0b:df:83:89:
         82:c8:ef:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:28:12 2025 by rpki-client