Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File:                     0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier:          PgFmT++mfSOSNu7gEC/+wqVR5l7fpkZ4D9XGNfwhYww=
Subject key identifier:   8C:36:B0:0D:A9:3C:0E:BD:B4:B7:EC:5F:6C:C6:C1:47:2A:EC:D9:53
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       0198D47316E159AADCC851EAA8AB2C1A758D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:02:48 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:48 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:48 +0000
Files and hashes:         1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: WNtdFFNP5Dm5oZSrGS/uMCn0KLkOjx3R8nJM3XlCbnA=)
                          2: 9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa (hash: xWmWZ6mNV40OXaNhlTROFGFnywkkEouFvFZTD1JJjZc=)
                          3: MXxh0YHPMrk5arTCf3q6sfloz_s.roa (hash: N+z7kc9squE6rbdRMbjpnb079oubXEpLhtNwZjifRAU=)
                          4: PJMpQm9gwngY8P3_lMKl-7kl_Jo.roa (hash: kW2DqnWjgsO28lEW1wrqQlb2aOCM46/dPtOZpgqTEW0=)
                          5: q6I6gf2csqwaWg3RJJBU3r8Ww9s.roa (hash: TuJ+a/fTT9f6d+FkeMmzYXOZB23+5zFwPl6nA0Nxjxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:16:e1:59:aa:dc:c8:51:ea:a8:ab:2c:1a:75:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Aug 23 01:02:48 2025 GMT
            Not After : Aug 24 01:02:48 2025 GMT
        Subject: CN=8c36b00da93c0ebdb4b7ec5f6cc6c1472aecd953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:78:94:26:b6:c8:9f:f0:b4:a6:6c:9f:1c:
                    41:dc:29:2c:78:69:b8:ed:64:15:2c:5f:02:26:0a:
                    b2:46:cd:4b:0f:6d:56:9f:b0:8d:59:86:b0:81:81:
                    94:a7:cd:7d:be:06:8a:99:a4:b0:3d:d7:96:9e:41:
                    30:47:79:ad:8b:94:a2:ea:54:f3:b2:7c:44:a4:12:
                    b5:34:21:a8:e7:99:ac:5b:4d:d1:67:ff:e4:c1:61:
                    05:96:54:0c:90:06:4c:46:60:1f:45:3b:dd:2a:86:
                    7e:0c:c9:82:0c:f3:22:eb:99:f9:6b:2d:8e:95:ee:
                    ee:dc:43:a9:f3:f6:2b:31:b9:6f:09:6c:dc:eb:92:
                    cf:a8:da:7b:fe:e7:26:b1:84:1f:85:e5:b0:6d:aa:
                    8f:2f:c2:bc:c1:43:c4:89:6b:49:aa:ca:7e:b5:dc:
                    0d:64:f9:62:d8:16:fc:bf:06:22:b6:a9:b1:a5:f4:
                    d1:98:12:5a:67:2b:e3:9c:95:59:8f:c4:df:89:86:
                    cc:50:54:d9:34:50:70:62:3e:fe:60:d6:f2:13:ea:
                    19:a3:25:dd:f8:74:b1:49:fa:8b:78:fd:d6:49:99:
                    c0:bb:c2:bb:cd:60:1b:0d:1a:57:bc:c6:4f:37:d0:
                    73:f0:32:96:5c:41:37:20:eb:be:51:81:94:f4:b8:
                    c8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:36:B0:0D:A9:3C:0E:BD:B4:B7:EC:5F:6C:C6:C1:47:2A:EC:D9:53
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:74:a9:64:a9:43:f6:dd:05:ab:56:1c:c6:a5:a2:d1:2b:30:
         11:44:61:3a:7d:50:cd:ed:0b:4c:82:5b:3d:40:43:24:34:df:
         5c:d3:b2:79:5a:29:81:bf:a4:c9:5b:fa:c7:87:ef:87:6c:49:
         ce:8b:28:25:c3:59:6e:46:56:aa:f0:92:ce:7c:fb:bd:07:d4:
         74:21:c0:64:9f:58:81:8f:d8:14:0f:91:c6:9f:d7:e7:a1:5a:
         25:22:aa:ac:6d:07:52:8f:4e:60:e7:dd:df:fe:24:1b:5e:1d:
         6d:1e:67:44:24:51:59:1b:c5:b9:5d:2f:c0:8d:0a:2d:f6:f7:
         18:77:f2:9c:a0:5d:56:1c:35:00:0a:e7:a1:af:a9:4a:7d:bf:
         d5:93:81:59:d2:27:58:90:26:e3:2c:06:a8:b9:c0:8f:87:bc:
         72:8d:8c:7f:e3:57:58:4e:b3:0d:a0:7f:52:74:c5:d8:f7:03:
         5f:4a:af:ab:4e:eb:5e:b0:3b:e9:a4:4f:f5:48:ee:ec:13:dc:
         85:78:40:27:63:c2:62:19:52:48:9f:bf:d7:a0:de:c5:b0:85:
         20:c9:72:55:3c:92:6c:e4:3e:c9:1d:75:5d:5c:e0:56:24:23:
         48:56:82:39:09:7c:96:17:3f:ad:46:48:3d:6e:f6:9a:f9:e0:
         e9:9d:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:42 2025 by rpki-client