Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File:                     G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier:          /eSca9gU2n7mduiISIc4mGc5YQqT1otNmzividLbZ3A=
Subject key identifier:   A0:B3:0D:83:6B:7D:09:A9:95:67:90:78:F4:08:7A:00:79:D1:5C:67
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer:       /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial:       0198D7A8EBF5082930E59D0173AE99614AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number:          1363
Signing time:             Sat 23 Aug 2025 16:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:28 +0000
Files and hashes:         1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
                          2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: Yivuz4aXxevl3SibnZRYXEMGxcl630aYqdaXKl8bRrw=)
                          3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:eb:f5:08:29:30:e5:9d:01:73:ae:99:61:4a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
        Validity
            Not Before: Aug 23 16:00:28 2025 GMT
            Not After : Aug 24 16:00:28 2025 GMT
        Subject: CN=a0b30d836b7d09a995679078f4087a0079d15c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:c8:64:d7:b7:17:85:62:0b:ae:b5:6c:ad:
                    c0:a6:38:4c:9c:c3:48:73:0c:97:9b:0d:ba:7e:de:
                    f8:c7:bf:5c:a3:3e:46:6e:9f:c1:08:b3:ee:a5:70:
                    6a:a6:40:e2:d2:9e:eb:56:38:a2:1c:55:93:5c:8c:
                    7a:49:e2:73:2f:7c:6b:f5:af:76:da:2f:1a:4e:ba:
                    47:ae:db:9e:6b:b5:80:19:cc:d1:ec:3a:98:0c:36:
                    7f:06:2b:8b:a0:38:af:c2:55:e7:b5:9e:ae:be:4e:
                    47:58:b0:f3:8f:5a:f7:9a:93:82:2b:d0:56:71:1f:
                    33:2d:90:e2:45:b8:cc:d4:57:92:c5:69:dd:e3:7f:
                    75:b4:87:91:a7:5e:6c:ee:b3:bc:ba:3d:00:8b:9a:
                    54:82:87:eb:bc:4a:f0:e7:9b:43:c7:7a:fd:c3:eb:
                    b5:fd:7f:e2:e6:c2:9d:fe:8c:45:5b:76:05:1b:7c:
                    3e:ae:51:47:99:5d:08:77:80:ec:82:6a:68:f4:74:
                    8d:ca:30:4f:37:19:06:16:12:68:d5:74:b9:95:93:
                    d5:ba:5b:38:23:9b:d9:9f:66:e2:18:f4:bc:6e:c5:
                    12:8c:d3:43:6f:6e:0e:19:e3:99:1e:d4:f0:95:82:
                    0c:9f:b8:d7:7b:f4:19:1b:98:f7:52:68:09:1a:64:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B3:0D:83:6B:7D:09:A9:95:67:90:78:F4:08:7A:00:79:D1:5C:67
            X509v3 Authority Key Identifier:
                keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4a:9e:69:ed:d5:f3:81:c5:cd:1c:e9:d8:74:84:7d:be:37:
         dc:7c:1d:20:52:25:af:cc:f9:2f:74:fb:69:0f:0a:9a:fc:78:
         be:49:ed:53:af:56:d7:72:1e:01:21:7d:46:f6:9e:46:a1:e3:
         92:ff:81:db:38:8f:ec:0c:54:b5:4e:11:42:7e:1a:21:98:75:
         03:00:4c:7c:eb:53:8f:2b:16:92:b1:29:83:fa:b9:c6:e1:c2:
         5f:b5:dc:29:93:de:d8:78:e2:8b:c5:d3:9e:24:e0:35:8a:1d:
         94:85:21:a0:46:bb:6a:6d:45:7f:0f:be:aa:4b:1d:3f:f2:29:
         79:cd:d4:c9:fe:cf:eb:ef:6f:30:ed:15:ec:3a:49:5b:57:15:
         3a:6e:c6:a9:e7:a8:3b:07:ff:e4:a4:6e:3a:7f:24:89:06:da:
         50:9e:07:d3:dc:f4:af:c6:16:4a:cc:80:81:11:37:a2:96:9c:
         c0:69:35:44:6e:eb:69:6b:b3:12:8d:4b:81:7d:d2:33:85:c8:
         52:d8:8a:24:26:a9:c9:ae:4c:54:98:67:59:ed:59:c4:98:21:
         fc:61:fb:be:66:f6:8d:4c:a3:0b:15:68:2c:79:07:bc:89:ad:
         b2:2e:ff:8d:64:c3:9b:f3:08:f1:3a:7a:7b:30:df:46:83:db:
         af:42:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:47 2025 by rpki-client