Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
File:                     qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft (raw, json)
Hash identifier:          rvDtjjV+0v3jqiov2WdJ6kHGhsoCk8tKqe1xg/r6o3A=
Subject key identifier:   94:C7:79:B2:22:03:2E:4D:58:F6:A6:0F:64:41:07:16:11:BA:C9:40
Authority key identifier: A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19
Certificate issuer:       /CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
Certificate serial:       0198D4A81BBDF7A6201B5A566CD15830DA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
Manifest number:          0532
Signing time:             Sat 23 Aug 2025 02:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:43 +0000
Files and hashes:         1: n5eJkZFicuorP_7YUyglUyaxuUw.roa (hash: X7lChHAuDqiBzbpN9aFseejb0s7SiAcnR2Lo7vuWZMI=)
                          2: qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl (hash: a2P/j9JEsJmnljCDRiwwUVZU/WxC6bPdjnzG8I3Stb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:1b:bd:f7:a6:20:1b:5a:56:6c:d1:58:30:da:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8180bf1a7750b3d22f9358556e11f0ff766a619
        Validity
            Not Before: Aug 23 02:00:43 2025 GMT
            Not After : Aug 24 02:00:43 2025 GMT
        Subject: CN=94c779b222032e4d58f6a60f6441071611bac940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:95:ec:65:92:8e:26:3d:ef:4e:f6:47:52:
                    15:86:dd:fd:c2:10:92:67:2c:f5:b8:f6:bd:ba:17:
                    d3:7d:33:94:43:cf:b5:94:58:db:21:7a:d7:db:8a:
                    c9:94:c8:53:30:bd:37:cd:ec:63:df:13:39:bd:6b:
                    06:23:45:05:fd:18:1d:f3:a6:6b:e1:39:ba:c6:25:
                    42:e2:3f:84:7b:9e:7a:e4:16:ee:93:d7:d1:fd:b7:
                    ab:4e:ea:45:36:cc:25:74:2e:50:97:89:26:93:67:
                    d6:37:a6:08:1e:91:da:b4:52:51:7f:c4:9e:6a:8f:
                    90:da:77:87:c3:25:31:1e:69:cd:7f:e2:68:d1:2a:
                    ef:ac:3e:62:41:2e:77:28:b6:ac:4a:ce:c4:3f:46:
                    ff:a9:88:d0:ee:6f:25:02:59:83:15:7e:6f:50:af:
                    c1:66:61:07:66:b4:d4:7f:01:80:7f:ed:52:9e:19:
                    f2:c8:89:39:0c:a0:eb:2a:c1:7d:63:34:ec:40:02:
                    16:41:2f:5b:c7:5b:ae:1e:e9:94:26:3e:b8:80:76:
                    2c:61:41:3b:6c:64:a4:f1:88:1b:1b:e4:0b:0f:5d:
                    1d:f0:48:15:6b:db:60:63:cb:6c:06:f4:11:c3:e4:
                    04:02:22:bf:cf:c0:eb:f5:72:2c:ff:d4:75:75:fa:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:79:B2:22:03:2E:4D:58:F6:A6:0F:64:41:07:16:11:BA:C9:40
            X509v3 Authority Key Identifier:
                keyid:A8:18:0B:F1:A7:75:0B:3D:22:F9:35:85:56:E1:1F:0F:F7:66:A6:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBgL8ad1Cz0i-TWFVuEfD_dmphk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/547f51-0b39-4b8e-ade6-f400dabb9bc2/1/qBgL8ad1Cz0i-TWFVuEfD_dmphk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:93:c1:09:85:bc:d2:54:0c:87:92:6e:2a:14:a5:e6:5c:2d:
         c1:0f:71:98:09:cd:bb:6c:77:39:fb:8b:0f:6f:77:c4:d3:0a:
         d0:5b:89:86:de:c2:75:99:d1:ed:e7:0b:58:0f:e7:f2:7f:f9:
         bf:92:fa:f8:54:db:b8:9e:36:fa:39:82:20:3f:4e:cd:86:97:
         db:56:32:a5:f7:05:88:07:19:90:a8:15:06:49:48:57:f6:18:
         c7:fa:5e:2a:93:e7:31:6f:eb:30:fd:71:68:0f:59:c4:45:90:
         d7:cd:05:a8:f1:02:b9:0c:1a:ff:59:0f:2b:40:3b:a1:f4:87:
         f7:4c:e9:13:dd:a1:92:20:b1:84:8b:f0:9d:2e:28:1c:ab:a9:
         6d:6d:f5:3c:40:1b:b7:9b:18:97:eb:b6:08:3f:88:17:d5:da:
         2e:24:8a:6e:26:1e:cb:b0:bb:8d:7a:ad:1e:1e:90:c5:76:06:
         3f:a1:e3:f9:00:a0:a6:f2:2d:7b:5a:2c:29:3f:b2:bf:07:fa:
         c2:cd:07:2b:e3:75:78:2e:19:79:df:a8:67:34:79:41:f5:e8:
         58:7f:cc:a4:2f:0b:68:91:57:eb:3e:72:f8:38:6f:6d:43:7a:
         85:4f:0c:07:30:51:21:4f:eb:d0:d7:97:b0:66:26:f9:90:95:
         d5:06:11:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:32 2025 by rpki-client