Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File:                     AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier:          pjh6Ocad/guWDowkXMSrBGIYeZZoY73aNeWwcZIrM9c=
Subject key identifier:   4A:B4:AC:AE:E1:5F:1E:03:B9:CD:DB:92:2D:1A:9B:09:1B:52:21:D2
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer:       /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial:       0198D7062A6F9274F85F27819E04D39D8E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number:          1669
Signing time:             Sat 23 Aug 2025 13:02:42 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:42 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:42 +0000
Files and hashes:         1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=)
                          2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: OkMrj/etr6Ssij+UfMO9fsl97n5J2JaLX7id+rf5RYQ=)
                          3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=)
                          4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=)
                          5: IC2VX1jV_Dwi9TgKflm59IYMQeg.roa (hash: 4Tq4DinpdRGqkwFnGKnQe2ovlPCcyDT8nlsjtJqn5tw=)
                          6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:2a:6f:92:74:f8:5f:27:81:9e:04:d3:9d:8e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
        Validity
            Not Before: Aug 23 13:02:42 2025 GMT
            Not After : Aug 24 13:02:42 2025 GMT
        Subject: CN=4ab4acaee15f1e03b9cddb922d1a9b091b5221d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:a0:31:1e:1a:ca:1a:b2:e2:77:6c:bf:4f:
                    5b:2b:24:c6:9c:8a:29:2d:a0:dd:42:57:0a:77:b2:
                    6d:57:6a:e2:a8:52:27:6c:43:24:3b:b0:13:71:8b:
                    46:f2:01:84:a3:5c:ec:1c:7b:29:3a:1a:4a:39:09:
                    7e:04:6f:5b:97:8f:72:b9:e4:c4:47:1c:4a:0b:e6:
                    19:c0:44:a8:50:71:d1:89:02:8e:30:a1:0e:88:12:
                    85:5d:02:b8:ef:ac:00:11:d5:8b:12:d9:27:d0:80:
                    9b:bf:6c:04:41:56:42:5f:a1:e8:c6:0a:ed:40:5e:
                    89:35:cc:c9:b9:38:4f:78:83:93:ce:28:58:47:f6:
                    ee:03:40:81:c7:42:72:64:71:08:ff:a8:b0:a6:3d:
                    a3:9e:9d:a5:fc:6c:c4:75:48:91:ee:38:5b:6f:8f:
                    9f:3c:5a:68:28:69:44:d1:d7:e2:e4:aa:54:cc:d9:
                    c2:f8:19:d0:79:f0:66:81:bd:8a:23:09:94:53:22:
                    3c:b4:09:e5:d3:ff:07:e8:14:4c:1d:0e:41:83:72:
                    03:4b:31:fa:37:42:37:9f:25:83:54:f2:ea:ce:46:
                    14:80:a7:fa:31:f2:45:c5:02:82:fe:3a:6e:38:0c:
                    7c:5f:cf:a8:7a:e3:01:11:0d:cc:03:d3:92:45:2f:
                    81:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B4:AC:AE:E1:5F:1E:03:B9:CD:DB:92:2D:1A:9B:09:1B:52:21:D2
            X509v3 Authority Key Identifier:
                keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:26:97:bb:4c:bb:c7:4b:b7:af:9f:c1:f7:0f:dc:b4:a4:3f:
         33:f6:fe:d3:a9:5d:27:b8:71:5e:08:02:ee:7f:02:a2:e4:e1:
         eb:52:77:9f:e1:74:a9:ca:7d:01:ab:62:68:02:53:32:97:ca:
         a7:32:f5:21:df:3d:14:b8:be:6b:81:00:ea:93:5d:13:85:36:
         34:e3:81:93:d5:08:8f:4b:e7:50:ce:47:9c:43:a6:44:cc:a5:
         f4:a6:46:15:27:01:03:bb:9c:8d:ab:02:46:ce:c8:68:22:4d:
         24:c2:b3:4b:b6:b4:0a:e0:c0:ca:98:33:91:f1:75:21:62:f4:
         a0:32:68:af:10:bc:47:a3:2a:68:d3:e4:03:9b:2e:51:29:f3:
         3f:72:d0:f0:cb:43:8d:e1:ec:97:70:d5:15:86:e2:8b:ff:59:
         c8:b9:86:ba:7e:f6:e6:68:82:be:6c:eb:a8:be:6a:f2:47:0d:
         61:a9:c2:6f:fb:a3:57:3c:e5:e0:ae:0c:d7:8f:b5:e3:7e:f9:
         51:50:93:94:74:13:b3:40:82:e5:6c:fc:25:54:58:88:dc:bd:
         0a:d8:80:ba:92:29:6c:78:7b:6e:7d:a1:43:c2:ad:a8:4a:61:
         4f:55:fb:9e:d9:4d:19:ba:55:6c:ed:d0:49:a6:e5:ac:a9:e6:
         c3:3a:3b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:28:06 2025 by rpki-client