Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
File:                     pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json)
Hash identifier:          CMAQZlq1N5dEUF+i6Nrac5U6wT/fibQMVA+clGNfamc=
Subject key identifier:   97:A6:07:BC:21:66:8C:45:AA:44:5F:8C:2A:A1:6E:5D:85:8B:8E:5D
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Certificate issuer:       /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial:       0198D5F18705C86945FE6C2451A0E8ECB6E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
Manifest number:          0C98
Signing time:             Sat 23 Aug 2025 08:00:32 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:32 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:32 +0000
Files and hashes:         1: 1LXoG8lIrfkrrE3BvhbCNRs7Cyg.roa (hash: qehfEzu5pVPdqrtkKPnNAj43cdjEk3H8LlXqlcvxhLI=)
                          2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: KaSescbZPhQr3SXSUWYwTBB+oD9Z9nI2LhoGMj1/hz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:87:05:c8:69:45:fe:6c:24:51:a0:e8:ec:b6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
        Validity
            Not Before: Aug 23 08:00:32 2025 GMT
            Not After : Aug 24 08:00:32 2025 GMT
        Subject: CN=97a607bc21668c45aa445f8c2aa16e5d858b8e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:64:dd:4a:39:2a:0f:19:5d:e4:62:b5:43:
                    64:ea:f2:30:96:4b:33:22:3e:94:19:29:b4:4e:2d:
                    85:3a:4c:16:59:83:44:e7:b4:9f:51:9e:38:98:9a:
                    62:be:13:ba:ca:2e:4a:68:fd:b5:d1:b8:e6:0f:f5:
                    bb:0f:28:11:ad:09:24:1c:2f:51:90:79:11:7a:30:
                    f7:2b:73:c2:7e:da:07:39:48:27:15:6f:a1:b8:61:
                    b7:be:97:43:67:f1:ee:73:91:42:78:b3:7b:ce:b7:
                    a5:7e:74:1e:a3:6f:7b:cc:8e:04:1d:ea:da:1a:50:
                    a2:c3:42:1b:05:92:16:75:38:c5:4b:0c:2b:8d:99:
                    bc:1a:aa:c1:b2:de:b1:2e:93:08:ab:a3:7b:af:cd:
                    9a:6a:fb:47:64:9c:85:06:83:41:83:b7:dc:5a:e1:
                    f4:89:46:4a:f7:2f:33:d4:a8:49:33:13:b9:b7:68:
                    ad:f1:22:c6:34:42:93:69:bf:e6:83:f4:65:7d:e1:
                    49:29:1a:1a:cb:10:51:7f:53:e1:96:d4:c1:8d:08:
                    a7:8f:62:b5:fe:07:9a:a0:c6:35:c0:6f:46:a7:54:
                    31:5d:ab:da:28:23:d2:f1:c8:b9:c9:0a:43:be:ac:
                    47:81:a6:33:4c:79:70:c6:f2:b8:2b:73:18:52:d7:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A6:07:BC:21:66:8C:45:AA:44:5F:8C:2A:A1:6E:5D:85:8B:8E:5D
            X509v3 Authority Key Identifier:
                keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d8:6c:82:95:d9:a8:ce:cd:cc:e1:57:1e:18:c5:1f:72:2e:
         00:dc:e2:b2:55:51:5f:11:ca:30:e4:35:35:a6:64:1c:0e:c8:
         00:34:6a:42:bc:74:74:7f:01:ad:48:e6:d1:27:f1:0f:71:33:
         b8:5f:ce:01:f5:1a:32:8c:e6:f2:bc:c0:f2:8c:86:77:c0:d4:
         5e:ef:51:e9:d5:85:d7:22:bc:d6:51:cd:14:69:f5:0a:35:6e:
         26:4a:c7:83:d3:67:b1:f6:81:81:e1:c0:bd:15:9e:3f:20:c0:
         1d:0d:a7:0c:9e:15:7d:96:63:56:a2:39:ae:19:ad:8a:5c:5a:
         6b:5c:d4:88:84:91:19:28:f3:3e:23:e6:9a:8d:21:12:28:2a:
         c5:99:69:37:a7:cf:47:88:aa:9b:9f:61:e1:73:52:99:55:ed:
         4f:d8:fc:5c:f7:54:51:69:c6:12:b3:f9:31:39:c8:0f:9f:95:
         02:e8:5d:17:07:e1:cb:db:96:55:bc:a4:b2:26:2d:75:69:3c:
         c3:e3:2a:69:a6:e6:53:ce:b5:d5:f1:56:b4:c3:df:ab:b8:8a:
         88:5e:65:e4:ae:46:67:5c:cb:4a:49:4f:c0:dc:9b:c1:af:15:
         17:ef:21:d4:85:3a:03:36:61:e0:2c:f3:ed:01:c0:b4:01:8e:
         ad:f3:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:02 2025 by rpki-client