Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File:                     oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier:          R1g+qR6R930fYuRqEOlUV1n8y9HNUWBbIzYr4MsS6mA=
Subject key identifier:   A2:98:EE:5E:DB:39:B9:27:1D:4F:59:B6:68:12:39:4A:81:AB:F7:25
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer:       /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial:       0198D5F19EFE218849D586333C4AEB52D94E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number:          1315
Signing time:             Sat 23 Aug 2025 08:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:38 +0000
Files and hashes:         1: ZsbPyFKfDnHSbXB5Rdfyon4nTbQ.roa (hash: f+ETlYVDvmS9d48p0ZYmqykWIOKGSt0JzwDEXRuMaVs=)
                          2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: oVVtvoNz7TZwWC8peFIqNH1ue32vAyygm4VKOAY4+50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:9e:fe:21:88:49:d5:86:33:3c:4a:eb:52:d9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
        Validity
            Not Before: Aug 23 08:00:38 2025 GMT
            Not After : Aug 24 08:00:38 2025 GMT
        Subject: CN=a298ee5edb39b9271d4f59b66812394a81abf725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2d:85:88:51:88:04:62:c7:0b:a4:91:a7:ce:
                    6e:21:45:f1:92:ad:72:d8:48:87:85:3c:6b:5e:c9:
                    73:df:ad:00:36:e8:7b:c0:6b:ae:76:df:3a:cd:ea:
                    35:2b:4d:7e:4d:b3:1d:eb:f8:91:ce:9f:78:71:86:
                    1c:ad:2b:75:7b:1b:c6:49:b4:c0:79:e4:3a:ad:d7:
                    3f:fe:24:00:b7:4b:8a:cf:76:1c:34:87:8c:91:3b:
                    b0:85:7e:ec:d0:04:0f:d9:fb:9b:77:4d:54:8e:bc:
                    c9:0f:20:08:2d:5e:1c:25:06:17:75:c6:6b:86:8c:
                    c9:e1:4a:ea:49:d2:15:c3:d2:87:a3:f1:58:d9:6e:
                    6e:8f:b1:22:a3:57:2f:47:19:68:3d:52:60:4f:b8:
                    fc:04:76:d0:08:ca:82:db:25:7e:c5:a4:5e:be:b9:
                    2c:84:cc:44:06:3b:5d:c3:1b:ca:ee:3f:c2:0c:8e:
                    03:72:ee:13:dc:f7:89:31:71:c2:16:0e:a8:fa:ba:
                    cc:87:a4:d0:28:57:49:fb:cc:80:d8:5c:c7:c9:78:
                    f9:ac:3b:90:28:cb:5a:16:02:0f:5b:94:6e:1e:ba:
                    7f:6e:5a:a0:77:59:65:bd:7a:01:c5:66:d1:8a:b7:
                    b6:73:c0:c0:4a:1b:82:e6:a7:08:7b:d0:62:79:8d:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:98:EE:5E:DB:39:B9:27:1D:4F:59:B6:68:12:39:4A:81:AB:F7:25
            X509v3 Authority Key Identifier:
                keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:28:b6:ac:74:6a:03:36:cb:3e:9a:88:b2:f7:52:81:93:0d:
         f6:0e:cb:1e:dc:7f:2b:6a:cf:6d:9a:7b:2f:6c:6f:2d:ef:ae:
         2f:c1:c1:ca:5f:60:8a:59:c7:d4:9e:2f:f7:5e:e0:f0:0e:63:
         3b:64:3d:00:df:8e:36:3c:4d:0c:7f:38:70:df:6f:61:22:5e:
         f9:aa:0b:22:c7:b1:9d:24:36:c4:d6:55:97:56:3f:ed:2c:16:
         d9:5a:76:fc:4e:04:a2:50:42:75:6e:d5:6c:90:7c:0b:da:92:
         e3:51:7a:b1:33:fd:a7:57:7d:d1:28:2e:93:8b:0d:ad:b4:a0:
         3a:8a:f9:a9:e8:47:8c:df:9e:0a:a8:be:8a:b6:5e:87:88:ea:
         15:55:94:cb:0e:bd:03:a9:4a:66:a4:76:d5:af:f2:56:b9:3e:
         b3:30:9e:98:ba:7e:31:b6:85:12:bd:24:97:0f:e5:17:68:32:
         8c:75:25:a4:1b:25:a3:67:11:2d:5f:d2:4d:c2:6f:81:83:24:
         cc:20:81:05:62:10:3c:92:75:1e:13:a9:31:92:97:3f:70:84:
         1a:65:90:3d:fc:79:17:b7:18:82:81:78:4b:07:04:3d:cf:5d:
         b4:21:da:6d:e8:6c:b9:a7:c2:4d:04:36:10:72:b0:d1:ff:bc:
         b2:48:9a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:24:05 2025 by rpki-client