Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File:                     datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier:          gCE0rWkD4jaM4UGqZhGgo+EXWW8hsiSTcNRKg5UeaYY=
Subject key identifier:   BA:63:85:6E:03:D2:47:F9:67:F4:1B:B9:6A:74:6F:26:B7:29:CD:7C
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer:       /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial:       0198D5838DB2A95B3E0409860344C76FB244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number:          032D
Signing time:             Sat 23 Aug 2025 06:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:25 +0000
Files and hashes:         1: 14NM_hJ73U6vGuk5H4RP54-eZBY.roa (hash: lie+0t/dSukUm9OoNgztT3EnggVtNQOhf9gAShVS0rI=)
                          2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: qxIm/EykhEc5gkFWPbN4n9i94jJE57xB86OnrC4cxeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:8d:b2:a9:5b:3e:04:09:86:03:44:c7:6f:b2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
        Validity
            Not Before: Aug 23 06:00:25 2025 GMT
            Not After : Aug 24 06:00:25 2025 GMT
        Subject: CN=ba63856e03d247f967f41bb96a746f26b729cd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:26:f9:91:d7:d0:b1:b2:3d:bf:61:57:56:
                    14:6a:36:7a:07:04:76:e6:40:33:88:a3:35:b8:1f:
                    2c:f8:2d:24:db:98:82:73:b9:b6:34:f1:b8:54:c1:
                    22:07:57:cf:5c:7a:42:d2:23:6b:fe:2c:ad:69:45:
                    14:9d:54:df:48:22:bb:20:58:85:c8:58:00:13:11:
                    43:c4:51:ce:fd:dc:81:07:9f:22:72:38:82:04:0d:
                    fc:91:c4:d8:c8:cd:b5:12:68:c5:f0:02:ba:ea:84:
                    c1:2f:59:a1:74:0b:16:2c:e7:80:05:31:87:76:3d:
                    a6:23:06:6d:8a:39:c7:20:f8:a6:28:87:8b:05:25:
                    fe:f2:ad:28:64:6b:e6:4b:a0:b0:6b:52:1a:b5:ae:
                    ec:a2:a4:22:2b:03:6b:35:a1:58:cf:c5:eb:e6:24:
                    04:fd:43:45:f4:ea:bd:cb:8a:80:c8:a8:bd:98:56:
                    d4:9c:28:7a:c4:6f:e0:44:20:30:71:a2:de:b7:21:
                    b7:38:d7:8e:d9:92:f1:2b:08:3e:72:6c:cc:7b:b8:
                    18:3b:f9:10:72:05:fc:05:2b:3c:bb:a0:14:2c:3f:
                    39:f9:0c:4b:24:f3:9c:50:c0:0f:40:6a:72:47:54:
                    07:0c:36:b8:d2:bd:a1:72:da:ee:bd:17:40:5e:a5:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:63:85:6E:03:D2:47:F9:67:F4:1B:B9:6A:74:6F:26:B7:29:CD:7C
            X509v3 Authority Key Identifier:
                keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9a:cf:ee:18:29:9c:76:9f:0c:ef:ca:3f:0a:eb:57:7a:f7:
         1a:35:6d:f2:c7:cf:39:d8:b3:d4:66:66:6b:5c:d1:1e:29:7f:
         d5:54:2b:63:ad:bd:6e:2f:37:7f:e3:55:18:8a:ac:17:79:84:
         44:ea:9a:28:c1:a7:73:8d:de:ff:6b:d1:db:8e:b0:99:d6:db:
         fb:f7:b2:42:0b:70:d4:26:b1:39:44:d1:b9:c7:0d:a0:ef:81:
         40:47:eb:b8:67:e0:41:10:57:78:98:f4:07:e6:7c:05:4c:e6:
         bf:f0:06:4b:fb:e8:1f:e8:84:e1:cb:8f:d4:67:bd:97:a2:6a:
         9e:61:af:e9:c6:72:cb:e0:8b:6c:4c:6e:0d:6a:75:c0:5b:72:
         4a:99:b7:0b:08:31:17:e0:90:41:cc:35:d4:14:e5:8a:2d:c0:
         8f:b6:22:47:46:68:b8:b7:7a:36:20:e1:a8:b5:7c:19:55:9e:
         05:16:58:bb:a7:5f:1c:fa:df:b8:48:73:55:5e:54:c3:fb:bf:
         0d:f7:88:af:db:a8:00:0c:a1:26:b3:c2:55:80:ad:8d:f7:01:
         8e:aa:11:44:60:f2:7b:77:11:fa:ba:07:f8:de:50:a2:70:c8:
         b6:4a:d4:85:49:cf:2f:b6:fc:ef:d2:ab:7a:19:fe:f0:f1:d3:
         bc:3a:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:44 2025 by rpki-client