Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File:                     iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier:          R6UR3rfyHmIL18L+aOEWJPX93ehNkcHHlegyuh5cBcU=
Subject key identifier:   9D:C7:C2:CE:00:0F:F0:2F:2F:CB:62:D6:5E:95:F5:9E:93:05:04:A3
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer:       /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial:       0198D65F92E31256A5DAACADB2C4B172B480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number:          140A
Signing time:             Sat 23 Aug 2025 10:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:44 +0000
Files and hashes:         1: ENS55DqOSCIACYKV88lsj2-9Qt0.roa (hash: DHbJggMAa2s1Y5SQ9CvEy1KweRl3G7QnT7Ch9hrVq4Y=)
                          2: Eh5XcZTOlwwjICZ8D5e6YinN9to.roa (hash: i3hRAhyXtajePfAySoecKpTzxKsfIbEuHCpoNygQqoo=)
                          3: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: D6Yjcg2Wr/Es5B31qO2JXig+cbIGW9hIb1BUnZYvP+8=)
                          4: rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa (hash: L0IGvxVXiMO117M8Wm4IgrHBTq1xuhWbcFCP05D3zJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:92:e3:12:56:a5:da:ac:ad:b2:c4:b1:72:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
        Validity
            Not Before: Aug 23 10:00:44 2025 GMT
            Not After : Aug 24 10:00:44 2025 GMT
        Subject: CN=9dc7c2ce000ff02f2fcb62d65e95f59e930504a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:73:34:24:76:b7:18:32:68:ac:11:e0:a7:
                    dc:2e:56:bd:29:cc:7d:f7:df:42:04:1d:71:c9:a3:
                    19:ef:88:59:59:bb:47:f6:4a:da:cf:00:8e:ed:2a:
                    63:ec:6d:40:84:92:de:cb:39:39:45:33:da:e8:12:
                    d9:0b:ee:d7:47:1e:3d:5b:f6:c3:96:c1:89:bd:08:
                    b4:2a:cb:d6:6c:f1:ae:e7:6c:40:8a:e1:11:44:83:
                    cc:db:7d:4f:68:a1:18:ee:43:2e:e8:7b:cd:78:c3:
                    24:19:ba:6a:39:24:09:4c:fa:51:07:8e:63:bc:31:
                    82:83:73:35:fa:59:6f:61:e1:50:f4:a8:46:5e:18:
                    10:52:3c:7f:9c:a2:b4:7b:7f:01:51:40:96:c9:7d:
                    3b:20:47:6d:5b:5a:b1:03:83:f4:1c:b4:11:a9:7d:
                    3a:b8:e4:fd:03:0a:30:72:49:a8:26:6d:67:41:27:
                    9e:92:bb:b3:6c:9d:b0:a3:53:ad:9e:79:a7:1d:8b:
                    58:56:70:40:8c:e8:84:4f:7e:13:f8:6e:3b:25:62:
                    41:87:ec:5c:4f:4a:9d:ed:c7:c9:65:11:6a:21:d4:
                    6c:9c:8a:92:cc:14:60:06:e8:26:df:04:a6:e6:a9:
                    f8:5e:2a:43:54:5e:00:23:d1:03:54:32:89:2b:12:
                    41:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C7:C2:CE:00:0F:F0:2F:2F:CB:62:D6:5E:95:F5:9E:93:05:04:A3
            X509v3 Authority Key Identifier:
                keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cc:af:15:51:1a:a5:90:f4:66:c7:a9:1a:6b:28:bb:b8:b6:
         40:e9:8a:6c:d4:a4:73:3d:44:7d:e5:d5:4c:46:e5:ed:a6:3c:
         ef:43:25:cd:b2:ce:15:cf:23:37:96:09:10:9e:1a:af:f6:ea:
         10:0d:7b:e6:45:75:da:e1:f6:45:bf:b8:56:5a:14:37:f1:84:
         3c:e8:49:b4:aa:50:d6:64:e9:31:c5:05:de:75:0b:9e:21:af:
         af:3d:0a:f2:29:ad:7d:32:91:94:64:67:6c:97:31:c0:ab:2b:
         b1:cc:46:22:17:81:9f:b6:5a:cb:10:d0:63:ec:41:78:10:2e:
         8e:dd:a1:0d:db:44:d3:e6:1d:04:c4:90:6f:86:fa:3e:67:12:
         66:db:4f:d5:36:f6:eb:5a:5f:53:ef:f9:67:72:ce:36:11:65:
         c0:3c:7e:eb:3a:9a:28:02:c1:35:d7:65:af:66:ed:d8:ea:20:
         7f:25:d7:84:c0:d7:99:9d:1d:a2:d9:be:4a:87:71:55:50:94:
         8c:d9:a1:e2:5d:dd:3f:03:65:f1:10:fc:35:60:56:dc:09:fa:
         32:17:62:81:ac:39:e7:06:2a:61:3f:cf:f1:24:06:7a:7d:3f:
         8f:62:cd:c7:c4:2a:43:0c:41:a7:3c:97:1f:52:b8:8a:b9:36:
         a4:d5:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:37 2025 by rpki-client