Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
File:                     RGFYx1seMgOyK1g8wYTD9UiLJdY.mft (raw, json)
Hash identifier:          fFg0HPMjr3H8VjqPxcY5VJpR2l9h3z4GwUNrWxeNrfw=
Subject key identifier:   F2:98:91:96:1E:0B:AA:9A:FA:FB:9F:A4:7C:E5:32:25:C2:BD:1B:1B
Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6
Certificate issuer:       /CN=446158c75b1e3203b22b583cc184c3f5488b25d6
Certificate serial:       0198D54E18CBFE50ACF21843ED6E31026F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
Manifest number:          1416
Signing time:             Sat 23 Aug 2025 05:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:01 +0000
Files and hashes:         1: RGFYx1seMgOyK1g8wYTD9UiLJdY.crl (hash: bSCsq5VAzQWhPa86q+rPITvchRbw430DvR8x8JO4yYw=)
                          2: VIvZu8tQokm1xiej3HARVMmJcks.roa (hash: ZzmGdbDE4kWOnJhlJzMP8vBrXKF4L54dsaKlIHnEfEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:18:cb:fe:50:ac:f2:18:43:ed:6e:31:02:6f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6
        Validity
            Not Before: Aug 23 05:02:01 2025 GMT
            Not After : Aug 24 05:02:01 2025 GMT
        Subject: CN=f29891961e0baa9afafb9fa47ce53225c2bd1b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:6c:b4:b9:93:8c:7b:1a:53:56:ec:db:0a:
                    5a:cd:4c:c1:a3:a9:09:9d:54:f4:93:59:7b:36:a1:
                    4a:09:e2:45:af:44:e8:7b:fd:11:6e:b6:77:18:99:
                    2c:2c:f2:18:6a:cf:f9:64:b3:fc:ea:e6:04:0b:4e:
                    d9:0f:cd:91:f4:a6:e6:0e:25:d0:b1:d1:70:b7:f9:
                    9a:bd:78:9f:24:b1:8b:85:40:88:49:48:b5:05:d8:
                    56:c2:17:5d:61:df:5c:71:bf:01:06:44:1e:76:cd:
                    73:9c:a3:01:1c:24:b6:17:b9:de:8f:66:8a:a2:7b:
                    84:3b:1a:9b:35:f2:82:36:03:80:d9:29:2b:b0:8c:
                    20:09:5b:33:cc:9d:1e:66:7f:5b:99:ba:73:d1:c9:
                    f8:80:29:82:07:77:15:ea:67:65:42:a2:ab:82:6c:
                    09:64:a7:12:eb:ca:78:78:5d:6e:e7:42:99:53:f9:
                    23:65:2c:c2:d0:36:29:f5:b0:4d:88:b0:e9:06:42:
                    ff:5d:31:48:7b:68:12:7f:5e:fb:1f:c8:bb:c7:e1:
                    8a:51:96:38:74:d7:57:32:f3:ad:09:b6:69:33:5f:
                    73:2a:e7:21:f3:a4:31:85:39:69:8c:92:c2:9d:11:
                    b1:57:f9:92:60:39:56:6a:25:9a:b2:74:c1:27:0a:
                    00:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:98:91:96:1E:0B:AA:9A:FA:FB:9F:A4:7C:E5:32:25:C2:BD:1B:1B
            X509v3 Authority Key Identifier:
                keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:54:44:d3:70:54:3e:a2:80:40:23:01:56:1e:85:a7:a7:14:
         24:b5:c6:37:1f:87:91:1d:07:54:8c:5d:5f:e4:be:8e:9e:0d:
         85:d2:b2:7f:29:62:03:fb:a8:95:cc:73:e3:aa:af:53:10:60:
         23:8e:e9:6b:6a:c0:1e:a3:d8:c2:d5:b9:67:7c:19:65:81:71:
         34:88:94:b0:db:95:00:75:f3:76:31:43:9e:5e:2c:b0:20:4a:
         60:a6:a4:38:44:4c:b2:b2:ae:ea:38:dc:50:88:7d:ab:9c:fe:
         f2:0e:e9:8a:d1:0c:ea:16:53:42:9b:70:ad:36:d9:62:7f:c8:
         f4:8a:94:e4:ed:24:62:28:3a:af:83:a1:16:14:c3:69:82:c0:
         dc:3a:03:23:02:4b:d8:30:ec:4a:5e:89:ab:54:58:b1:af:ed:
         83:f8:f7:8b:ce:0c:27:0f:f9:6b:8a:18:ae:d2:f0:95:32:5d:
         5f:db:c3:c7:6b:a9:0c:a4:b5:ea:e9:7b:08:bd:8b:78:ed:d0:
         c5:4e:9e:d5:82:8e:1e:a4:f1:ff:db:af:05:b5:84:95:23:d1:
         d1:de:b6:11:fe:1c:a4:2d:78:d4:27:47:3b:17:3a:23:84:03:
         36:c9:ef:3c:22:33:26:ea:65:65:56:cd:7a:ff:67:96:c4:03:
         63:3f:23:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:21 2025 by rpki-client