Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
File:                     fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json)
Hash identifier:          UPMeErJ9wp90Azzru+kUtraEyV48Kb5x5MqmpsfvmEM=
Subject key identifier:   5F:73:E1:38:01:CC:14:EB:2C:10:BC:9C:1D:5B:DF:1F:BA:5F:3C:FE
Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
Certificate issuer:       /CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Certificate serial:       0198D65F374538BBCCEB88057F07BD7010E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
Manifest number:          0ED9
Signing time:             Sat 23 Aug 2025 10:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:20 +0000
Files and hashes:         1: 3DrlLWhGcsMv-s4viwJB1FYsGOU.roa (hash: s3b1rQsesdFt4DpbajXuJViVF04qZ0u1qGw5GYZzzXk=)
                          2: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: KPm9U+Tdp1qqCsrTg4Z960wObujAVUGvP53kr5wvT8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:37:45:38:bb:cc:eb:88:05:7f:07:bd:70:10:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478
        Validity
            Not Before: Aug 23 10:00:20 2025 GMT
            Not After : Aug 24 10:00:20 2025 GMT
        Subject: CN=5f73e13801cc14eb2c10bc9c1d5bdf1fba5f3cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:9b:ba:a1:b8:39:07:97:02:23:23:52:22:
                    ba:da:0a:14:58:4f:f6:57:9f:6c:2c:a0:84:56:af:
                    dd:84:0a:a7:8c:d1:24:44:33:d5:40:7c:24:5e:7c:
                    a3:f9:ec:65:1e:06:90:2a:b3:e4:4d:29:f1:85:31:
                    18:92:ca:46:a0:57:73:9a:b2:a3:61:5b:b2:fe:59:
                    cd:6f:0e:5f:72:99:ea:4d:32:ef:f0:75:8b:b5:78:
                    b8:05:7b:1e:bf:87:4d:49:c1:69:4f:ff:fb:e2:21:
                    48:8b:0e:cd:bf:73:1a:ff:11:2f:c6:41:44:6c:0d:
                    64:a1:ec:b8:b0:54:8f:b9:9e:a0:24:3d:ce:e2:16:
                    2f:59:bf:9e:4c:ee:64:e0:a8:d7:22:f3:b4:b5:a6:
                    eb:c9:43:b4:ec:73:bf:f9:ca:1e:b7:fa:90:da:4a:
                    8e:1c:80:21:41:8b:84:0b:19:63:20:ca:92:67:57:
                    8d:c5:ab:48:79:de:e5:bf:e7:2e:1b:ef:6b:14:ce:
                    24:9a:58:33:b9:bb:83:1f:81:00:82:48:4a:41:64:
                    c7:56:58:c6:9a:c8:d2:67:7a:60:0a:e6:fc:3b:3b:
                    ee:31:ee:c1:0c:2e:e4:8a:77:de:eb:f2:1d:b0:d8:
                    8b:02:03:7f:38:c1:a3:95:78:d2:6b:3d:b9:96:bd:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:73:E1:38:01:CC:14:EB:2C:10:BC:9C:1D:5B:DF:1F:BA:5F:3C:FE
            X509v3 Authority Key Identifier:
                keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2d:e4:3a:9d:ab:81:a2:9b:25:87:63:b4:61:a5:11:c7:1f:
         fb:f4:8c:42:aa:60:25:87:f2:21:14:3a:4d:f1:d0:ac:8e:f3:
         3e:73:9a:c9:4b:17:2e:bb:c5:99:5a:d2:49:77:a7:63:6b:05:
         25:75:a3:90:6f:86:53:ab:0d:95:3d:3f:0a:96:4d:2a:a8:af:
         fd:25:21:64:fd:58:ae:f5:81:a9:fa:16:13:ff:ff:16:52:90:
         e9:5f:b7:2f:c4:5d:d5:36:c1:be:84:b5:84:66:8b:0b:4c:2a:
         a0:01:d2:f0:f8:b2:01:19:cf:4d:b5:42:72:72:b4:4b:c8:61:
         b0:06:71:f4:f7:54:15:c5:ec:69:e3:39:ef:c5:4a:99:f4:cc:
         5b:8a:97:fd:d8:c0:11:78:4c:af:a5:a9:6e:a7:a4:6c:c2:67:
         e2:a4:03:2d:16:8d:51:57:aa:86:61:7f:cc:60:e1:06:d5:55:
         d7:45:b9:70:0f:3f:1d:0f:18:98:ff:9b:33:6e:41:59:c6:d7:
         a9:27:91:59:97:1f:f8:54:7a:6d:43:c9:33:92:ed:a7:30:f0:
         9c:dd:4d:f0:a6:4b:a3:1a:a1:32:45:ae:6a:9c:9a:84:06:87:
         94:79:d0:28:a2:6c:c8:b4:f1:db:67:20:2f:df:73:df:a9:92:
         ee:ab:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:42 2025 by rpki-client