Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File:                     D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier:          evq3bFqsWmkcZvbnGuSBYGYOD6qXYyQTZV0RUcjObBA=
Subject key identifier:   B3:61:6A:4B:37:05:68:B4:24:AE:82:B3:4D:08:2B:7E:74:AF:E8:89
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer:       /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial:       0198D65F2120D3925D48BAC7659D7CEC3EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number:          089F
Signing time:             Sat 23 Aug 2025 10:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:15 +0000
Files and hashes:         1: 6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa (hash: m6tO4ROtbLwqmMtYoGkRxelczMRQ44EOZBvyjQVDxjY=)
                          2: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: hg3v6sN8Tp2ImBuNo7ztnlj7PFncNdtRkjlgS4k9OxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:21:20:d3:92:5d:48:ba:c7:65:9d:7c:ec:3e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
        Validity
            Not Before: Aug 23 10:00:15 2025 GMT
            Not After : Aug 24 10:00:15 2025 GMT
        Subject: CN=b3616a4b370568b424ae82b34d082b7e74afe889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:fa:bc:ef:d7:4a:68:1d:98:6e:91:5e:50:
                    87:0d:91:e2:44:ec:cf:cc:10:14:2e:08:d9:68:ca:
                    33:0c:ab:4c:da:42:44:80:78:0e:39:a9:c3:c5:91:
                    1e:b6:f5:f6:30:97:10:73:ac:b1:7f:0b:58:68:8a:
                    07:2b:9a:02:c2:0e:5c:70:37:5c:9b:64:98:d1:51:
                    be:d2:c6:f1:4c:20:a0:d2:15:0e:cd:08:f6:30:d8:
                    59:c5:0c:8a:3e:5e:6d:0d:26:61:23:19:68:87:f6:
                    11:30:2d:43:42:eb:39:ef:fa:da:5f:c5:0c:29:ba:
                    0c:4d:ab:73:87:8e:52:44:04:54:a2:68:22:fb:61:
                    09:57:8b:e5:68:8f:40:c0:dc:92:f7:9c:a3:e3:7f:
                    af:d3:cd:34:55:60:14:52:dc:17:16:88:b8:34:79:
                    97:fc:e3:d7:1e:b7:e1:7c:81:59:96:a2:4e:f3:3e:
                    a3:e1:7c:94:6e:64:90:3e:53:32:7e:d2:40:4a:aa:
                    19:48:01:a8:e9:ec:03:50:1f:64:e6:df:aa:67:de:
                    03:78:ac:ec:e4:17:0d:27:9c:b3:46:1b:e8:2a:3e:
                    28:ea:be:78:5e:42:5e:fe:9c:a2:47:a4:72:a4:64:
                    01:40:69:59:d0:e6:96:30:67:c1:8f:26:90:2c:75:
                    92:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:61:6A:4B:37:05:68:B4:24:AE:82:B3:4D:08:2B:7E:74:AF:E8:89
            X509v3 Authority Key Identifier:
                keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:71:ec:7f:7f:b0:4a:d1:80:d4:34:62:20:d5:0e:ce:1c:b3:
         27:d8:fd:17:cd:92:19:a7:51:23:f1:91:8d:51:01:70:ff:f2:
         ac:48:e0:19:e0:87:7a:44:f2:08:e3:d0:1e:6f:21:8a:1e:ac:
         a8:60:48:09:16:e8:93:8c:60:e3:16:0d:64:6e:12:86:b9:ab:
         e1:bf:db:6c:97:85:e9:04:31:72:5e:69:1e:ea:ed:3d:f4:e8:
         e9:f9:27:ca:4f:68:8f:59:c0:d6:8f:2a:07:14:fa:5a:34:92:
         99:25:77:d9:7f:4b:54:44:98:8c:89:1d:1e:71:f8:3b:f4:59:
         d1:86:b1:2b:0b:8e:4b:6a:5d:60:61:5f:b1:40:8b:fc:5e:e7:
         3a:38:95:6e:7e:bc:07:96:65:8d:ce:43:da:9f:ee:28:c4:ae:
         61:bf:99:aa:9c:da:f2:34:4c:b5:d7:8a:30:00:0e:f3:b5:d1:
         49:35:76:33:ec:dd:7f:62:66:5a:e3:b7:8f:1a:d2:7e:11:b8:
         6b:6f:3f:38:c2:7d:c3:e3:44:7b:36:1a:4b:c6:36:6c:88:6a:
         03:a0:98:9c:93:54:a0:0b:17:71:e4:a4:7b:05:43:7e:99:e5:
         a1:6f:7b:10:4c:16:13:78:54:1c:7a:a7:13:44:a5:59:8d:e1:
         71:03:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:27 2025 by rpki-client