Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File:                     POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier:          6JGqF5UCY67RqOOwJoZE7S+4ya5v/zJVxSUn5arFDic=
Subject key identifier:   7D:E2:C0:B2:79:DB:64:D8:BF:8F:83:55:38:02:F3:99:CE:11:0D:2C
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer:       /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial:       0198D54DC6C7777D80EB91B0EE2454658E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number:          0EA5
Signing time:             Sat 23 Aug 2025 05:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:40 +0000
Files and hashes:         1: LnOKhHlXHgf9Bc7By8RdD87CENc.roa (hash: SBq8tD3nAGx2l0m6YmZ4sb5xKbi6vLmOJJ/u4lHDzyQ=)
                          2: MtOebLSNSemLqQH1Qdt6lKbCdQU.roa (hash: p2mZ95DJo3RCkhalV7XQwJkDag3/z20BD18MDcr1SRU=)
                          3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: 3jx5+I9+0iQ/McSKxoGBIzJI878Hht+BQUki5CuanBE=)
                          4: qQRcQNcowo3kCSFmxOhnd54Y8jY.roa (hash: raMUt5t5W5lynqzBwroXOMjtxQgLkjALLNPiIADIJEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c6:c7:77:7d:80:eb:91:b0:ee:24:54:65:8e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
        Validity
            Not Before: Aug 23 05:01:40 2025 GMT
            Not After : Aug 24 05:01:40 2025 GMT
        Subject: CN=7de2c0b279db64d8bf8f83553802f399ce110d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:0a:e3:64:5b:dd:7d:72:ab:c1:ba:2d:7e:
                    a3:0e:40:04:ae:35:a7:56:96:63:4e:4f:e0:c5:f6:
                    b9:95:b9:a0:29:7b:d9:81:f5:9a:9a:01:76:2d:9a:
                    79:b9:6b:27:20:a1:c9:cd:35:2b:51:67:67:36:10:
                    57:20:36:a3:7f:58:09:91:21:1d:b7:5d:07:89:f7:
                    03:50:b4:2b:2c:52:e6:8a:50:9f:2b:c5:00:80:56:
                    5b:df:2c:c8:47:54:62:7e:a9:87:13:0f:b3:f7:76:
                    fd:ec:b6:d4:20:16:01:cb:71:87:7d:aa:c0:f7:ca:
                    0c:cf:5d:4d:0c:2f:bd:d9:91:d3:92:5a:97:87:97:
                    8c:19:58:a2:19:27:ad:47:4f:4c:56:32:9e:63:fc:
                    cc:be:ae:b6:23:93:da:1f:d3:74:a1:77:68:84:c0:
                    88:06:eb:a9:ef:08:66:c7:4a:2a:44:9e:ff:f8:c2:
                    2c:67:17:95:1b:95:b9:ad:67:9b:e5:6e:87:87:33:
                    c5:ae:42:92:54:b7:f0:77:2c:d5:f8:04:eb:f6:ca:
                    e1:d8:97:b0:41:38:11:05:1d:e2:88:d0:33:a1:86:
                    19:bf:04:9a:8e:dc:47:06:ca:a4:a2:9b:62:bf:3f:
                    9d:a2:a0:9d:d1:59:cd:5a:7c:ff:4b:d0:0e:3f:32:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E2:C0:B2:79:DB:64:D8:BF:8F:83:55:38:02:F3:99:CE:11:0D:2C
            X509v3 Authority Key Identifier:
                keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:86:f5:7e:13:d9:b6:a7:87:7e:37:7f:8a:2d:65:93:02:d8:
         92:5a:ce:03:42:8c:da:c4:44:ee:8b:b0:3d:e0:d8:5b:26:fa:
         1e:ab:e7:15:f5:37:8a:ba:4c:95:84:e6:f3:88:a4:a1:ee:8d:
         ef:3c:d0:43:96:62:71:3c:55:08:dc:6d:2d:56:0c:be:b2:1b:
         50:8f:f9:25:9f:f0:81:82:37:bf:53:21:d4:a9:cf:91:b7:23:
         4f:2c:ca:65:b9:38:fd:4a:4c:d3:9d:64:b6:8c:fc:0f:1c:93:
         a6:db:17:59:82:74:a1:fe:fd:42:ca:45:d7:a6:99:8e:1a:5c:
         e2:ce:63:45:08:9f:e0:c3:c9:59:75:5b:5a:4d:bb:05:8b:cc:
         25:d5:c6:72:fd:89:5b:4a:3b:11:be:cd:93:5b:a9:6c:4b:26:
         41:18:6b:f4:bd:0d:9f:92:30:85:ac:d3:b5:01:68:b2:2e:8f:
         89:ae:f9:5f:04:d7:ed:19:a2:91:52:47:b7:6e:5e:5e:c5:84:
         72:29:8c:63:b7:97:e2:09:cb:76:31:61:b5:4f:3d:e9:28:3a:
         db:26:b4:df:8e:4b:df:c5:d8:be:8c:b5:d8:e6:ea:fd:c2:74:
         1a:c8:22:71:9d:f1:24:b5:6d:b4:d7:71:40:9a:fc:7e:c8:bd:
         0c:e4:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:36 2025 by rpki-client