Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File:                     pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier:          bvD5sBfaz8K5BcVTBiTRV3teGL03uHq61e0JBlmPVyY=
Subject key identifier:   11:44:D4:2C:1A:51:BC:38:30:91:58:51:10:BC:E7:BF:89:E0:D8:87
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer:       /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial:       0198D4A7D991CE4E6FFC41180A64A71122D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number:          092B
Signing time:             Sat 23 Aug 2025 02:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:26 +0000
Files and hashes:         1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=)
                          2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: g4AavSbTQxDFkABYvWmciQkIjnmBFvGZ5GG6O04rC54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:d9:91:ce:4e:6f:fc:41:18:0a:64:a7:11:22:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
        Validity
            Not Before: Aug 23 02:00:26 2025 GMT
            Not After : Aug 24 02:00:26 2025 GMT
        Subject: CN=1144d42c1a51bc383091585110bce7bf89e0d887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:bb:db:df:0d:c6:ac:b3:a7:e1:72:cd:98:
                    31:ce:f4:55:7d:b0:44:85:a9:8e:a9:8d:3d:e3:93:
                    b7:ac:ed:62:91:2c:54:a1:f7:98:2a:80:85:44:b9:
                    1a:04:83:d0:d5:af:6c:3f:1c:23:89:e6:82:d1:63:
                    34:2c:a5:de:0a:9d:4b:9e:4e:9c:d2:af:68:5e:c5:
                    3b:46:c8:a5:eb:b2:fb:55:b5:6b:0b:80:38:1f:1d:
                    69:3a:46:63:8f:bc:27:48:86:dd:4a:27:c8:f9:4e:
                    ea:99:8c:6c:53:bf:aa:99:c2:c6:cb:6f:9d:83:e7:
                    fc:f6:ac:69:54:fa:68:7d:10:ae:01:e7:a6:fa:da:
                    b1:60:85:d2:3c:5d:3b:7c:23:ed:67:8c:a3:96:b5:
                    68:14:0c:92:f4:c4:a4:e5:e7:f5:35:b2:70:5a:b9:
                    b3:f7:c6:da:35:4d:13:7f:ae:d8:a9:8c:d4:68:a4:
                    2f:c2:66:a8:40:0b:a3:dd:5f:f0:b1:08:fa:c3:4c:
                    36:a4:8c:77:90:2a:04:35:97:d5:72:34:38:d3:b4:
                    9b:3c:de:a7:dc:57:1c:1b:d6:79:f4:4d:32:94:f3:
                    91:d3:b1:af:81:0e:cc:96:dd:16:6e:56:03:c5:e6:
                    2c:c0:7c:dc:10:51:c1:51:93:6a:ef:14:0c:12:60:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:44:D4:2C:1A:51:BC:38:30:91:58:51:10:BC:E7:BF:89:E0:D8:87
            X509v3 Authority Key Identifier:
                keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:52:a2:e3:63:2b:4d:6d:0a:af:84:03:18:d5:3c:e6:d7:6c:
         15:2a:43:ec:7f:45:59:d4:e5:dc:25:cd:eb:79:fe:78:9a:9e:
         5c:9a:6c:a9:9c:5a:54:6b:5a:7c:0c:2b:2a:d9:c4:fd:b8:da:
         d5:e3:8a:5e:36:08:89:f2:88:ac:c4:9b:8e:72:c2:ba:e0:fe:
         74:21:b6:aa:36:03:c2:ef:ab:a6:f7:cf:d4:b3:c1:76:d2:ae:
         3a:19:9c:c1:32:a0:e5:54:42:0a:45:85:4f:a9:f9:fc:76:da:
         12:02:7a:4f:db:7d:3a:89:ff:bc:0a:d1:ae:31:f8:51:e4:65:
         6b:70:48:8f:0e:cb:f6:15:6e:c2:5f:ab:72:16:85:12:9a:c8:
         69:89:99:35:33:d6:6b:f9:02:10:d9:5d:63:8d:55:cb:4c:96:
         a9:c8:a7:fe:71:26:a6:6c:06:51:78:98:c9:5b:f8:2a:51:55:
         a3:0d:02:53:b6:9b:07:5d:33:83:1c:1d:20:5b:6d:28:87:93:
         02:3d:80:4f:6f:78:43:16:d0:67:7b:36:f9:af:c8:28:b8:79:
         df:08:77:a6:20:4f:27:7f:78:3a:79:fb:9a:5a:36:a2:ec:71:
         9f:94:a1:67:c3:9e:14:d2:53:28:2a:0c:52:42:45:ae:0a:7a:
         fe:c1:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:59 2025 by rpki-client