Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File:                     p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier:          EI3O0WgnPkIS8nuUNIMiZOTp/wZScwC8Y1rTyi0PtYI=
Subject key identifier:   B3:46:B5:57:23:C9:3E:2E:17:E2:ED:8F:AC:5A:C4:13:78:A0:83:C2
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer:       /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial:       0198D5157F74D0B2470FCF49231D3D4D2F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number:          EC
Signing time:             Sat 23 Aug 2025 04:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:12 +0000
Files and hashes:         1: iwQbkJtBuAm_xcfzDuJT6i57BjY.roa (hash: RmTZJ40kwHa9kbSdBRPYJl4skgdfEXdZGrx35wy6Kio=)
                          2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: AqHcry3DqVjwUUYuO87VZn9wV6sx+2ZNKEm3TuFMAgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:7f:74:d0:b2:47:0f:cf:49:23:1d:3d:4d:2f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a750263823402b83c11c5014d32666dcab111447
        Validity
            Not Before: Aug 23 04:00:12 2025 GMT
            Not After : Aug 24 04:00:12 2025 GMT
        Subject: CN=b346b55723c93e2e17e2ed8fac5ac41378a083c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a0:7d:1d:72:08:f6:2b:46:88:2c:f3:d5:4c:
                    17:2c:cc:86:5a:41:1a:7a:2b:6b:0f:c2:f0:e1:c2:
                    7e:cc:0c:39:1d:c9:a2:5a:f3:24:e4:57:fd:d2:69:
                    a3:dd:00:20:a3:b3:1f:c0:f1:a8:73:1c:8a:bf:30:
                    ab:9b:00:38:cd:62:44:18:e2:2d:34:22:77:25:24:
                    43:7a:5d:7f:41:55:a7:c6:0b:a7:a5:0d:ac:4d:2c:
                    11:98:a2:8c:a6:6f:74:b3:11:28:cd:40:5e:2b:0c:
                    71:22:bb:25:02:65:43:0a:78:8c:80:d6:cf:3c:b9:
                    1b:9e:c7:a1:e5:90:d3:f0:d3:cc:9e:04:d1:e7:fe:
                    a0:3e:88:1f:2e:2c:17:13:96:0b:c4:2c:3e:fc:d5:
                    af:e1:a1:ca:68:0c:b5:e4:3b:7e:1c:92:a3:c2:0e:
                    65:77:66:f3:a4:28:8d:82:39:32:13:f7:aa:d6:b1:
                    b1:ec:0b:63:ea:d8:d7:38:d0:e3:8b:ae:1b:57:22:
                    7d:ee:08:18:ed:31:83:77:29:e2:f9:e2:3c:ed:f9:
                    9a:07:41:92:9b:a2:27:7c:c1:6a:f9:0b:15:52:e4:
                    68:65:e7:54:0e:87:36:6a:f8:95:c1:81:84:7f:81:
                    f6:f4:57:69:6d:f4:cd:65:68:24:c2:93:ef:b8:3d:
                    ac:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:46:B5:57:23:C9:3E:2E:17:E2:ED:8F:AC:5A:C4:13:78:A0:83:C2
            X509v3 Authority Key Identifier:
                keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:10:2c:02:8e:63:8c:0f:10:e0:42:38:94:bd:34:e7:5f:ab:
         51:a1:90:c3:03:ce:b6:44:07:65:25:f5:ae:f2:72:08:86:c2:
         be:b5:6b:2e:7e:dd:5a:a5:9f:14:d1:f3:a2:44:76:83:b6:57:
         fe:67:ce:9d:70:6b:38:6e:4f:3f:75:35:48:f1:6a:ca:53:6e:
         da:39:22:57:0a:dc:6b:19:fb:c7:04:c7:b7:e1:08:ea:7a:fd:
         ff:f1:5b:7a:f7:ab:f5:a5:57:8a:ce:06:8c:d7:1f:0b:d8:44:
         39:87:e5:79:5a:15:8d:47:a7:fa:6d:85:6a:1c:b2:3f:32:9c:
         1d:94:9e:75:fa:f7:15:09:76:8d:74:8d:72:20:c0:73:04:27:
         48:03:fe:8b:ff:72:b4:3e:c0:90:88:3e:87:d8:d6:9e:dc:f9:
         40:02:4a:2d:86:98:e8:b1:25:f0:e3:50:52:f4:83:ef:d0:02:
         a7:32:da:a2:a0:45:9f:10:7d:47:4d:57:a2:32:c7:8b:98:87:
         15:e4:83:6f:db:9b:02:71:51:fb:fb:41:76:fe:c2:9e:fd:87:
         92:42:65:29:ef:9e:82:a5:48:0f:f2:88:e9:2f:af:dd:cf:08:
         85:3c:76:01:0f:6e:ea:f7:7a:16:77:32:d3:e0:8a:38:d1:7d:
         55:50:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:27 2025 by rpki-client