Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File:                     I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier:          FQhFpY5E47d9Du0k4QKJx4GlvNDx9RdMsmlV+xZRceo=
Subject key identifier:   9D:86:9F:AC:60:3E:5E:58:C5:D1:1E:51:1A:7F:3F:23:5A:6A:F1:AB
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer:       /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial:       0198D54E36AE832B246571080054A7BCD0CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number:          1092
Signing time:             Sat 23 Aug 2025 05:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:09 +0000
Files and hashes:         1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=)
                          2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: 9r9E/UXLd6n8rZ63/bcDlWKYzZ9JpQP77Gt3JW/Kx+4=)
                          3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:36:ae:83:2b:24:65:71:08:00:54:a7:bc:d0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
        Validity
            Not Before: Aug 23 05:02:09 2025 GMT
            Not After : Aug 24 05:02:09 2025 GMT
        Subject: CN=9d869fac603e5e58c5d11e511a7f3f235a6af1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:b7:a2:81:b0:9d:d3:ed:8a:69:f3:1d:a7:
                    ba:60:79:cf:51:fc:84:ba:f6:ce:d5:f5:1a:5d:25:
                    f2:2f:95:c8:55:cf:e4:12:75:55:e5:ed:71:7e:96:
                    f4:e2:bc:c3:ce:e3:9e:21:22:cb:03:6f:a9:e2:4a:
                    09:02:c7:80:45:e7:83:ce:07:a6:77:d7:a6:6d:6f:
                    7c:37:92:a4:4a:92:9f:67:fc:57:90:d3:5d:c4:80:
                    45:21:c6:d7:6a:b6:c0:65:2f:48:2a:10:c4:63:ef:
                    cc:17:34:a4:7e:2e:77:d8:4e:c8:6f:11:1e:2a:7e:
                    c0:a0:1b:a7:f2:13:73:3d:d9:6d:b9:2e:e3:c2:f0:
                    35:7b:08:90:a1:29:f4:6e:7f:9d:95:25:5e:b5:a4:
                    1f:84:d2:83:56:d9:6e:f9:dd:96:0c:13:92:9d:79:
                    e8:91:c4:c5:e7:96:52:4e:e7:eb:72:2d:25:ff:ac:
                    fc:bb:3b:7b:88:56:fb:fe:11:1e:13:a9:53:44:2e:
                    2d:3f:33:f4:53:a2:13:7b:a6:fc:79:0f:10:e5:c9:
                    07:93:e5:0a:fb:1a:59:fb:ba:21:74:83:18:b3:3e:
                    17:3c:06:a5:1c:09:7f:38:28:00:1f:05:57:8b:b7:
                    88:a0:82:7a:af:9c:4c:47:ee:4c:e9:36:1f:15:59:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:86:9F:AC:60:3E:5E:58:C5:D1:1E:51:1A:7F:3F:23:5A:6A:F1:AB
            X509v3 Authority Key Identifier:
                keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:6e:6b:cb:95:47:9a:19:ac:94:32:e9:e0:68:1b:95:0b:a4:
         7b:29:b3:1f:74:85:09:48:75:38:6b:03:aa:d4:73:2b:dd:bd:
         c9:e2:6d:7a:be:fd:3e:5f:56:46:3a:83:19:5c:2d:69:57:00:
         00:7b:ca:2e:37:d0:90:76:6b:ae:2d:34:91:fd:ac:6c:62:71:
         ad:79:cd:de:9b:fa:99:3f:02:29:e1:8b:7b:a0:c3:16:b5:d4:
         be:66:f8:b1:a8:ff:72:8c:1d:92:a1:73:68:57:bf:e9:f6:0d:
         9e:9d:b6:25:cb:46:de:6b:f9:87:f2:bf:8b:b4:6c:ed:cf:98:
         87:a3:96:e4:d3:69:7e:33:ad:a1:02:e0:34:4a:18:23:d8:57:
         f6:ab:30:bb:40:71:94:04:eb:30:5d:74:f6:78:51:6a:d8:e5:
         bc:b2:8a:04:da:5b:7f:2c:fc:58:e2:51:db:09:b9:d4:ef:b8:
         aa:d0:d4:37:31:d4:d5:d4:32:da:44:09:0c:f8:a4:39:2f:6f:
         c0:6e:61:57:80:ee:2d:7b:af:0d:65:46:c2:d0:e0:d6:be:6e:
         f3:d7:1a:76:08:5d:88:57:3d:40:ae:b9:a7:64:6f:10:30:94:
         c7:ff:50:6d:b0:70:f4:bf:ab:8a:cb:1c:69:43:f4:00:22:00:
         dc:49:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:45 2025 by rpki-client