Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File:                     hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier:          qGv9rHz9acG4a8wd1+Zo357E0RMSpXm8nUWJy8PSuiM=
Subject key identifier:   0A:BD:B9:6C:A9:FD:35:9C:92:1D:35:CE:71:C4:63:FF:28:75:F7:B3
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer:       /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial:       0198D515E01B242139362F7A780691A4004B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 04:00:37 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:37 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:37 +0000
Files and hashes:         1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=)
                          2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: j9BcGatv33w5mM+kQ5uSY50FZJfkXsSZGYdjLoXMBSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:e0:1b:24:21:39:36:2f:7a:78:06:91:a4:00:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
        Validity
            Not Before: Aug 23 04:00:37 2025 GMT
            Not After : Aug 24 04:00:37 2025 GMT
        Subject: CN=0abdb96ca9fd359c921d35ce71c463ff2875f7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:79:c8:84:f6:72:02:6e:cb:9f:e0:03:66:
                    aa:eb:e0:18:55:78:7b:46:c6:21:27:c0:5d:1c:0e:
                    b6:e9:33:de:31:db:1e:0a:b8:2f:24:a0:af:43:79:
                    c3:c6:c8:e6:ad:e4:0e:0f:f5:74:4a:db:2e:d7:a9:
                    7e:83:6a:be:d9:8e:dd:f5:16:b9:37:90:fe:fc:f2:
                    80:1c:da:b3:7d:7b:c2:d7:c2:96:77:68:eb:44:9b:
                    c8:1f:68:ab:35:24:a8:35:1c:48:82:16:6d:48:b8:
                    9c:b8:e9:a2:c8:a6:f2:b2:23:d8:2c:8d:9b:2f:79:
                    eb:c8:54:9e:b4:44:19:cd:78:5f:26:72:5d:7b:bd:
                    b0:12:4d:b8:5b:67:68:00:32:42:45:b5:61:0c:ef:
                    36:98:f6:1c:c5:dc:4a:20:8d:38:7a:2c:d8:d8:e5:
                    6a:39:3f:03:06:94:54:e6:e1:33:c0:ea:09:a8:39:
                    49:c9:26:a1:e9:c4:37:59:55:d6:a7:cd:b7:49:c6:
                    ae:21:ed:8d:8c:7d:db:4f:85:c5:e4:ec:46:21:7b:
                    2c:ca:07:f2:b5:fd:84:11:e9:42:df:ab:97:fd:ae:
                    c9:08:72:ed:c7:31:be:ef:62:a1:08:70:73:41:9e:
                    a2:00:9a:f4:e6:6f:3f:75:09:0c:92:5c:d8:53:aa:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BD:B9:6C:A9:FD:35:9C:92:1D:35:CE:71:C4:63:FF:28:75:F7:B3
            X509v3 Authority Key Identifier:
                keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ec:49:f9:21:78:c8:07:65:f9:d8:99:47:38:4b:c8:e2:4a:
         40:96:b8:17:d8:55:4e:24:73:a2:da:fa:27:0b:d8:bf:48:6c:
         6f:75:9f:83:ff:cc:c1:2a:49:32:00:e6:50:09:9a:ce:44:b6:
         fb:a9:b8:28:7d:69:00:fb:d7:ad:24:da:aa:12:35:99:f3:d4:
         c8:2d:1d:9e:86:e8:1f:da:53:4e:d1:9a:4a:03:f0:d0:91:c5:
         74:fb:fb:a4:67:ab:69:49:31:71:40:83:c4:68:e3:e8:f2:d8:
         8a:cd:dc:16:0c:f3:65:14:86:2a:48:d9:12:0d:82:2f:c3:1d:
         31:92:b5:1c:da:0c:4a:79:ef:c8:08:7a:d2:c4:54:65:84:74:
         cf:b6:d9:4d:40:89:db:9d:60:84:ed:d9:2e:65:38:b1:bf:19:
         4e:8e:5e:33:45:97:2c:0c:c6:82:88:16:7f:c7:98:26:67:39:
         4c:28:45:2a:d8:b2:4f:cb:d7:28:85:27:ba:dd:90:bc:0c:c9:
         9c:0a:3a:5f:77:15:e0:f5:0d:b8:6e:50:87:e1:2b:67:db:b3:
         44:05:ad:b5:e9:0b:5a:4d:bf:64:c9:d4:6f:d3:77:4c:11:15:
         90:86:d6:d5:2e:4e:3a:40:a3:08:b9:e2:c4:0a:b2:9e:96:81:
         9b:8a:f3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:50 2025 by rpki-client