Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File:                     piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier:          R77DkVgzCyVKMsyOmM+EeZ0JJzUICYIkesYzlX7w/yM=
Subject key identifier:   B0:5E:24:46:EF:E1:A2:60:96:93:A6:20:16:6D:79:A0:CA:A6:74:56
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       0198D6609C9AE81ED5187B4CE0309D21E31F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number:          0A8D
Signing time:             Sat 23 Aug 2025 10:01:52 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:52 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:52 +0000
Files and hashes:         1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
                          2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
                          3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: /YT1uE0W7gaF4n7Z+8ug8r7GXJqFsF2Hp4WEs8P8ZDc=)
                          4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:9c:9a:e8:1e:d5:18:7b:4c:e0:30:9d:21:e3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: Aug 23 10:01:52 2025 GMT
            Not After : Aug 24 10:01:52 2025 GMT
        Subject: CN=b05e2446efe1a2609693a620166d79a0caa67456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:07:39:8f:21:d0:99:8b:38:2f:e0:be:8f:
                    00:d9:12:09:61:bd:0d:26:61:96:10:12:69:80:3f:
                    92:83:d8:96:3a:eb:17:f5:63:81:f9:86:d1:dc:37:
                    20:76:c8:fb:3b:82:25:5e:a2:ad:3a:2f:ca:fd:49:
                    32:07:97:74:f5:9e:98:a0:9d:f4:10:0e:c1:7f:58:
                    2a:0d:88:77:5b:d5:c7:38:fc:1e:ae:42:81:9f:4c:
                    7e:69:31:a6:3c:a2:58:72:3b:dc:69:f3:d0:48:b0:
                    c6:47:8c:53:8d:96:3d:b0:a4:5b:41:c1:18:12:4c:
                    5c:7e:7c:db:17:67:a6:ef:02:12:b6:c1:4f:a4:dc:
                    e6:a8:4f:56:53:96:5b:b4:38:59:df:f3:62:3d:50:
                    d7:d2:01:82:71:d2:a9:15:a9:2b:c3:7d:da:a9:40:
                    e9:bf:1a:ff:5a:ba:71:5a:7a:ad:40:aa:b7:3f:3b:
                    29:24:8d:6b:c9:b7:a4:44:f2:cb:6a:f2:c7:39:bb:
                    38:07:32:bb:58:41:3e:f9:46:fa:49:e9:7c:80:76:
                    a0:b4:96:73:29:6d:60:7e:0d:78:f6:9b:99:82:6f:
                    66:d1:38:53:66:b0:51:42:08:01:b2:69:cc:be:9e:
                    65:92:b5:d2:33:df:43:5b:1b:0d:01:a2:d3:fc:1a:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5E:24:46:EF:E1:A2:60:96:93:A6:20:16:6D:79:A0:CA:A6:74:56
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2a:c7:04:30:8b:9a:8f:fd:75:85:45:73:7e:c8:3c:d2:c7:
         5b:87:4c:6b:04:c7:6d:ec:01:a4:a5:24:49:7d:9d:0f:f1:34:
         11:1c:f8:96:b8:bc:c8:b4:4e:97:06:63:e7:a8:0d:ec:bb:5a:
         b9:09:dc:83:99:28:d6:0d:48:73:ee:bf:ff:cd:63:6a:16:91:
         db:3b:d0:04:44:a5:e4:f5:e2:dc:94:e5:2c:a8:11:47:95:88:
         60:7d:cd:ec:61:27:8b:b7:6c:e7:dc:23:7d:22:78:3b:20:71:
         09:6c:55:f3:6f:d1:42:16:68:4e:b6:30:1f:a5:82:54:6f:ba:
         2d:45:4f:98:85:b3:59:57:5c:ee:06:69:03:97:b0:72:53:aa:
         46:36:47:b5:28:ed:eb:96:4d:b2:73:2c:25:3d:03:63:ad:77:
         be:2d:2d:54:0f:70:a5:67:30:01:49:d2:7d:0f:2b:51:56:6c:
         ee:8a:ec:6c:39:97:94:03:f5:71:b6:54:d6:c6:b8:9f:c8:29:
         f2:aa:76:9d:d9:5b:79:84:7d:04:d9:22:f2:b4:c8:b8:da:f6:
         83:ed:4d:15:93:1f:d2:65:c2:76:e8:b0:73:d4:95:de:45:ac:
         cb:55:60:ef:d1:f0:b6:c6:bb:a9:e5:b8:71:89:43:78:5d:c0:
         51:0c:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:15 2025 by rpki-client