Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
File:                     9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft (raw, json)
Hash identifier:          hoiXSvJQ77SVFXg34yytSoDVN8Vf3VuE3mII3KfDM48=
Subject key identifier:   A5:05:BF:F7:4B:3A:52:71:3E:7D:86:E5:F6:E7:03:9C:DF:0D:17:3E
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Certificate issuer:       /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial:       0198D7739296DD5B0DA0B3D8DD6521988BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
Manifest number:          15A8
Signing time:             Sat 23 Aug 2025 15:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 15:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 15:02:12 +0000
Files and hashes:         1: 0YWWGLY2ws5dEm_54FSQZ1sndS4.roa (hash: NrM8b8iTRjQj/SggeT540k8LBz4kUfRyQupPzxIyzNo=)
                          2: 9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl (hash: p4nGi/4w6dS34937KkCmKfSXAjzXmq5bD6d2fcKl7Og=)
                          3: QvYuctjlOUmpEgpvzgB4c1se_Qc.roa (hash: eYNoK8Wy+9Zr1JqWLRbHBLeE5t+d/AXQdx/gVhz5wA0=)
                          4: SgIFzdX6JcgyEvIi1tU7tEpqzs0.roa (hash: p6RL3L68zCciLtwZlC4lGEQ9Tf1FF1+MJetEEftOp98=)
                          5: WC5kYAaNv3dBMoN7rOV1Dk7R1Eo.roa (hash: IM898uPAV6VmuESMyy3MG48B0cB42EspCAHOuXpg7Io=)
                          6: wW0iKtg9bPCx0wfkjNfecHkB2Ck.roa (hash: UM3eZveIrytl53yxFS6AdW4CNHF0JEQaT47qsF3G7tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:92:96:dd:5b:0d:a0:b3:d8:dd:65:21:98:8b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
        Validity
            Not Before: Aug 23 15:02:12 2025 GMT
            Not After : Aug 24 15:02:12 2025 GMT
        Subject: CN=a505bff74b3a52713e7d86e5f6e7039cdf0d173e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4c:26:13:c3:cb:56:4b:81:a4:33:38:7d:8d:
                    a0:77:e4:83:c9:0b:c3:33:f0:c9:ff:56:6c:a2:d5:
                    52:6a:1c:32:98:94:0f:4b:ef:da:93:df:22:86:f0:
                    38:01:18:3f:6d:13:f1:a6:3e:09:84:bf:4f:6b:84:
                    d3:63:f5:96:b3:77:f6:4e:fc:6d:ad:a6:c5:74:0c:
                    fa:d4:bb:c4:3f:9e:5c:43:2b:b4:a0:ae:53:66:65:
                    bf:3a:f0:36:54:43:76:be:b9:b5:32:1c:b4:47:9b:
                    3c:48:85:b6:f8:7f:12:af:a5:12:63:f9:a7:17:e2:
                    83:0f:a0:92:c8:5a:00:40:f5:a1:0f:92:78:1c:36:
                    a9:a5:9d:1c:63:63:b3:05:ad:dc:f5:f1:1b:1d:91:
                    32:55:e4:c4:c0:ad:47:e1:e0:6d:41:a7:16:10:74:
                    07:04:12:12:ad:d8:6e:cc:14:25:fe:c0:91:49:74:
                    23:a9:c8:09:82:a7:73:14:3d:1e:19:0a:85:72:4e:
                    5b:49:a4:5d:d6:ce:c7:0e:77:b2:cc:d5:3d:75:3a:
                    89:ca:2d:d1:5c:36:df:80:ff:05:a1:1a:44:1e:3b:
                    aa:09:b7:3f:c1:f0:d6:3b:76:37:8a:ad:12:91:35:
                    13:99:13:5b:f8:51:10:87:c3:64:a9:eb:98:61:86:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:BF:F7:4B:3A:52:71:3E:7D:86:E5:F6:E7:03:9C:DF:0D:17:3E
            X509v3 Authority Key Identifier:
                keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f1:52:80:3d:8f:ae:bf:e2:6d:99:d8:e2:60:18:1d:56:77:
         ab:11:f8:3d:9f:eb:e3:3c:07:aa:18:04:86:0c:84:8d:4f:cc:
         27:84:5d:74:46:79:a3:ce:e3:c2:d0:c2:e7:a7:23:7d:b9:14:
         47:0f:ee:54:83:e1:9b:d6:c7:65:be:73:76:e6:0c:6b:c3:87:
         85:21:9c:20:fa:cd:0c:77:53:43:63:f0:5d:7e:8e:85:c8:dd:
         73:ae:ff:c7:61:73:63:0f:5e:39:70:4c:82:20:a5:f5:74:68:
         1c:3d:d5:78:3b:66:c9:77:5f:d4:8e:9d:92:b2:e8:9b:7f:90:
         74:24:97:2c:33:1e:06:a8:87:10:7a:eb:f5:d7:35:e4:d5:66:
         26:67:0e:41:11:e7:63:99:ab:37:7e:59:ee:3b:7a:19:08:9b:
         60:f3:af:5d:58:3e:5b:99:28:c8:26:a1:53:b2:3f:e6:6b:43:
         7a:b8:15:62:2a:2d:03:70:0a:9a:bb:a3:56:07:88:ad:06:8f:
         60:d8:2b:7d:4c:16:13:f7:c1:1c:9d:03:9d:7b:d4:33:bb:f6:
         8c:39:84:cd:4f:17:f3:db:c5:52:ba:f4:73:31:44:f9:d9:07:
         5a:cf:dc:68:39:96:a5:54:7a:5d:ea:3e:4b:d4:d2:d7:21:42:
         ae:38:ba:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:17 2025 by rpki-client