Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
File:                     Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft (raw, json)
Hash identifier:          0z+Y6gwq/Ry2qAQeJwF4M3Q6vzlM3M7rUZoUGA4G5bY=
Subject key identifier:   CE:38:F0:D8:80:0D:53:C2:AF:86:C9:56:01:C4:FB:E9:FD:02:9A:08
Authority key identifier: 43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD
Certificate issuer:       /CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
Certificate serial:       0198D5BB9471581CD3F9A33CEF68A5242A76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
Manifest number:          1375
Signing time:             Sat 23 Aug 2025 07:01:36 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:36 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:36 +0000
Files and hashes:         1: Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl (hash: wbe9yiQFF1doWCqGzcinT4+hhPcWRQgyuaZFKT91UTs=)
                          2: rz-RdiM9IWT3IB5wGzMs1ZBSN0Y.roa (hash: o6qyEqxDzSGkgBN+te6/IqxauC6oKPYhjWorkJVF6Cw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:94:71:58:1c:d3:f9:a3:3c:ef:68:a5:24:2a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
        Validity
            Not Before: Aug 23 07:01:36 2025 GMT
            Not After : Aug 24 07:01:36 2025 GMT
        Subject: CN=ce38f0d8800d53c2af86c95601c4fbe9fd029a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:88:7f:c7:fe:c6:6f:e9:c2:bf:9e:19:ac:
                    70:c5:5f:52:b9:8f:40:69:a5:21:64:bb:37:57:f6:
                    2f:1c:cb:0c:5b:25:35:be:f0:e6:1e:48:57:fd:19:
                    c3:c7:67:63:cc:87:b4:85:6d:c8:ea:d8:96:0f:3a:
                    68:c5:a5:1e:a7:64:ec:24:4f:ea:23:a4:73:e3:3b:
                    79:1b:31:96:e1:68:3a:a8:38:a8:06:82:41:17:48:
                    09:86:d1:dc:46:69:4f:9c:68:75:59:43:6e:5a:e6:
                    b3:2a:03:d9:f4:d2:9a:fb:f6:0a:a8:8f:f3:7a:e1:
                    2c:f1:76:00:83:9d:bd:0b:f7:54:6e:b4:cc:bc:e3:
                    0f:25:4a:92:7d:56:59:cb:85:7a:44:70:bb:b4:b9:
                    a6:b6:70:af:b8:0a:fd:0e:54:cc:4d:56:b4:13:e2:
                    22:dc:42:cc:63:84:04:cc:5d:35:97:dd:6c:a2:20:
                    c1:15:fb:39:a5:26:e9:8f:0d:d0:31:0b:be:36:8c:
                    c4:cc:9d:9e:1c:ce:f9:0c:74:06:2a:ad:42:91:ac:
                    2f:6a:35:c7:63:b6:52:79:87:25:2e:55:64:f3:df:
                    eb:68:1e:73:64:5b:79:7a:bb:e9:ce:f6:0c:57:03:
                    84:76:85:33:f7:0c:b1:23:b9:c1:c0:c9:ef:16:93:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:38:F0:D8:80:0D:53:C2:AF:86:C9:56:01:C4:FB:E9:FD:02:9A:08
            X509v3 Authority Key Identifier:
                keyid:43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f0:60:94:ba:aa:f9:34:2b:e8:ad:66:a2:e2:e3:83:a0:3c:
         01:80:fd:31:76:69:a6:7f:b4:18:7f:56:71:be:f2:d7:0d:85:
         03:e0:0c:3d:50:70:23:da:a9:5d:7f:13:cb:f3:5a:d7:f4:65:
         24:e8:f3:76:88:3a:c8:98:bf:0a:4a:4d:0d:26:41:16:c5:81:
         89:15:27:30:08:92:c2:01:14:ad:c4:43:c6:c5:52:ef:03:bc:
         7d:1a:23:4b:42:2a:81:8f:ee:62:9d:c3:f9:0f:ce:94:41:df:
         6c:78:eb:8e:d4:2f:7f:52:ae:a6:9c:92:11:98:c6:df:d3:02:
         55:50:d0:4f:05:e1:d0:eb:da:ff:cd:f5:09:00:4c:db:54:c8:
         87:8d:50:3d:91:a5:cc:fb:51:2c:d8:3e:d5:fc:ac:37:d5:de:
         3c:c4:01:5c:2b:4b:fc:90:6a:de:4d:79:1b:0d:44:54:99:bd:
         01:fb:66:85:b3:e7:7a:56:28:72:da:d7:75:60:f3:b8:f7:1e:
         99:03:6d:38:5b:f6:4e:47:d0:f3:53:71:bd:cc:dd:35:39:01:
         71:3f:a3:57:f9:65:96:0b:d2:28:f6:a9:95:9c:d1:41:84:65:
         6d:55:00:96:5f:b9:0c:c0:b9:f8:12:9e:88:dd:b4:6d:db:d5:
         d1:cb:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:49 2025 by rpki-client