Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          UbX18ZOOYIEwKUwUPbswQJl+FJlyiMpLZR4r7PKcmic=
Subject key identifier:   1E:E7:85:FC:62:2E:D6:0B:4C:51:DC:43:4F:57:D0:4D:C4:73:12:38
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       0198D54E65A28F61530648C29D444246755E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          0EB8
Signing time:             Sat 23 Aug 2025 05:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:21 +0000
Files and hashes:         1: NFuZfl53-8KYTLVCa1Hv_etfQ9k.roa (hash: mKJy52sXoia7oCRphyiyMklvY+QAOAh6np8WR+mJ8DQ=)
                          2: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: NKwGiHCY1KgQWfms/D7Rb3FY6kAkwE+vTDJFlnCmpU0=)
                          3: iOS4ElaxvQeRHxYqYTv9ArvMOF0.roa (hash: bD+y12vYe0rJphDbgeizPQmjlToeySPQDb7cfEEdLrg=)
                          4: pOxKs9dWhUdQCvSLYTnAr4vpa7U.roa (hash: /5GRlXnM3rNmijk0WyBlasj7lnCycK3nTmymAKQJFjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:65:a2:8f:61:53:06:48:c2:9d:44:42:46:75:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Aug 23 05:02:21 2025 GMT
            Not After : Aug 24 05:02:21 2025 GMT
        Subject: CN=1ee785fc622ed60b4c51dc434f57d04dc4731238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:69:86:03:de:ae:2e:30:e2:9b:c1:8e:8d:
                    61:be:e4:3f:04:33:75:5c:d0:2b:c2:ff:20:fc:98:
                    6a:41:e1:e3:b9:6c:36:b3:2e:c8:4d:27:2e:a8:4b:
                    ef:c2:4c:95:a6:fc:19:69:7f:88:6f:44:b5:f9:07:
                    86:a1:0f:39:e0:9e:14:8c:31:a6:a8:f7:06:0c:fd:
                    2f:72:15:62:26:3f:f0:c5:86:2e:4b:01:e4:67:0e:
                    c1:d5:a1:ba:90:0e:82:52:2c:fb:a8:0e:ef:36:44:
                    f3:76:12:14:7b:e2:72:32:5e:96:ae:d3:7c:4e:3b:
                    d1:67:01:4a:f9:88:80:9e:e4:9c:da:fb:d8:1f:1e:
                    c5:37:2d:d9:81:d3:6d:3f:d2:43:cf:c0:73:8d:a6:
                    c4:ac:1d:2d:a3:99:dc:f0:1a:c5:7c:43:6a:81:6a:
                    46:8d:53:75:48:1c:74:27:9a:0f:61:c0:41:23:31:
                    3c:08:78:07:57:1f:44:6f:f3:e3:e5:97:39:b0:3d:
                    b9:89:ba:fc:fc:15:c3:ec:05:66:ec:1c:08:5c:e5:
                    51:ba:ee:dd:84:74:bb:bc:24:8d:63:80:aa:bf:ca:
                    0b:37:bc:6d:69:cd:f0:8d:c5:b1:52:6e:58:5d:33:
                    5a:e0:fe:32:89:f2:a7:36:c6:21:b7:ff:d5:8e:f2:
                    16:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E7:85:FC:62:2E:D6:0B:4C:51:DC:43:4F:57:D0:4D:C4:73:12:38
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:33:b7:39:74:9e:3e:c9:70:59:ae:56:6e:1b:e6:39:02:23:
         43:b2:0c:85:7c:d4:8e:73:9a:49:33:b1:a6:55:f7:4f:67:bd:
         d6:82:90:49:44:70:70:04:15:ce:51:3b:dd:1e:ee:85:d6:e3:
         40:bf:90:96:c6:1e:32:5a:27:46:23:27:1d:e2:a7:f9:cc:87:
         6e:c6:74:b3:eb:0c:b2:15:ef:15:01:6f:88:ca:9d:c0:75:10:
         ed:c8:91:63:e5:af:64:46:8a:26:9a:f5:d0:55:1d:2a:0d:08:
         7a:bc:5c:2d:73:e1:7a:63:66:e9:3b:d6:6f:70:1d:bd:87:10:
         f2:7c:18:4e:b0:9b:ce:0f:e6:0a:a1:bb:5a:5c:73:21:2a:0a:
         b0:03:ed:f7:85:54:0f:eb:e6:00:c3:94:e9:47:33:79:b6:ca:
         db:90:e6:03:40:48:67:66:28:2d:3b:d8:d4:fa:07:33:c2:44:
         13:2a:58:ec:b3:bc:a6:b1:69:d8:3a:74:c5:79:dd:98:5f:b0:
         3a:43:27:5d:45:bb:3d:78:de:9c:b6:a4:c4:d1:0f:cc:34:24:
         1d:6a:33:a6:b1:ed:2c:ca:69:3c:41:0b:18:bf:c4:5e:ca:1f:
         60:36:a6:2f:55:44:3a:4b:9f:00:03:e0:b9:0c:a2:8f:52:33:
         1f:b5:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:59 2025 by rpki-client