Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File:                     t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier:          z2Yd1SiN2Hk23BrpyscCmgHo2uEAbe1ZCxBqigXOvXs=
Subject key identifier:   22:B1:37:62:19:EE:7C:24:22:D6:93:7E:8E:8A:52:99:B1:EF:31:7F
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer:       /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial:       0198D6612A67B20416323489F567CD25A7CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number:          03A8
Signing time:             Sat 23 Aug 2025 10:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:28 +0000
Files and hashes:         1: k9U72mP-Km1xWLf3e9wAtG2m9RI.roa (hash: Pej7Eh2aiqSEO+t6zjd8tEra9H0XG62qu73Vt5mmuqQ=)
                          2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: jiRZUcreRzOCZtFoKQDpENoA4PlOzNH112pOBehyPoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:2a:67:b2:04:16:32:34:89:f5:67:cd:25:a7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
        Validity
            Not Before: Aug 23 10:02:28 2025 GMT
            Not After : Aug 24 10:02:28 2025 GMT
        Subject: CN=22b1376219ee7c2422d6937e8e8a5299b1ef317f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:4e:69:1e:af:54:c9:ab:65:29:d3:d1:93:
                    bd:7a:1d:ae:6e:30:b2:59:31:95:b1:43:14:a3:66:
                    8d:77:40:42:ca:d9:70:2a:f2:ad:b5:a8:75:29:4b:
                    89:c2:67:f7:09:4f:de:d5:3e:11:cd:5e:c8:2a:6e:
                    06:69:5a:61:61:39:51:99:57:52:d6:99:36:40:b7:
                    33:0f:de:78:01:26:dd:26:06:b3:68:af:ff:8e:b3:
                    4b:64:b9:2c:81:79:5e:76:e7:77:71:53:20:a6:15:
                    8b:ea:e8:76:84:dd:ec:22:3e:5d:7a:e2:60:3d:4a:
                    00:96:75:69:03:21:c2:ca:ef:b1:1a:d2:89:68:b9:
                    8c:2f:40:a5:29:b5:2d:fb:fd:50:1d:85:b6:cb:69:
                    24:a3:60:4c:e3:c8:16:6d:9f:a5:85:da:10:38:cd:
                    24:64:90:bf:db:97:7e:6e:13:be:23:de:1d:2e:6b:
                    b7:ba:e6:a2:c4:06:0b:2f:57:57:de:2b:ed:76:c4:
                    fd:49:79:2e:cd:89:5e:44:a1:11:f3:89:ba:c7:7f:
                    6f:0e:b3:b7:b2:67:1f:c1:d5:df:13:53:6a:99:06:
                    98:20:19:19:32:a4:1c:29:fb:5d:61:7c:b6:44:60:
                    cd:bc:4f:b2:ea:9e:6f:6d:c7:ae:dc:60:7b:ee:a0:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B1:37:62:19:EE:7C:24:22:D6:93:7E:8E:8A:52:99:B1:EF:31:7F
            X509v3 Authority Key Identifier:
                keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:51:84:a9:bd:7c:06:79:7f:0f:50:08:26:14:16:dd:f1:1c:
         55:c7:c3:32:b6:d4:eb:24:fb:8d:92:35:49:85:74:2e:d4:50:
         b1:f7:4e:ab:1b:3c:3c:6b:3b:9f:fb:ee:24:bd:d3:a7:5b:93:
         bf:e0:9a:27:d9:44:09:b8:ac:bb:7b:6d:27:94:a6:6c:33:13:
         75:26:9f:6b:14:ec:05:3c:63:f7:0e:a3:98:31:38:cb:1f:75:
         95:b0:29:9c:a4:e0:f0:dd:90:73:27:d2:59:fa:c7:88:58:ef:
         57:f6:40:60:64:7d:4a:0f:56:a9:19:38:5f:b6:b8:be:0c:16:
         ff:d3:7d:02:a7:03:21:da:34:50:b3:46:ec:c4:dc:67:b4:62:
         4c:79:7c:f4:44:30:de:6e:32:2a:6c:80:86:4c:c8:4a:48:97:
         e8:4e:a6:8d:8e:a3:da:65:6a:96:04:61:26:b9:3f:45:6f:a0:
         e1:9a:67:60:a7:9e:ef:ba:6c:58:3f:6d:6b:d3:72:c0:86:be:
         57:c7:6d:ef:18:0a:a0:75:dc:96:d2:e6:33:ef:95:99:57:05:
         38:a2:0d:5a:83:e3:1b:5b:f9:d9:a3:ac:e9:66:d4:74:ed:37:
         8c:5b:76:6e:20:39:9d:bb:f8:3b:4f:5f:7c:87:72:87:aa:89:
         5b:d3:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:35 2025 by rpki-client