Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
File:                     d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json)
Hash identifier:          HV1ds7uH/DAlbyngDqYKKB0GWwL1KFOwrgFCjTUy4s4=
Subject key identifier:   08:86:4D:77:52:E2:55:11:4F:39:70:B0:3D:1C:1C:9C:9E:7C:6A:E6
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Certificate issuer:       /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial:       0198D5160FE2C7BBDC01D15E2D4037403F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
Manifest number:          0A73
Signing time:             Sat 23 Aug 2025 04:00:49 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:49 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:49 +0000
Files and hashes:         1: 9zwR0ItkTBE3NBrhNXLgD19Ygh0.roa (hash: 668uqZpsKXpsQP4NHjfvBq7qiMq3YrFIWJSOqGsUVvE=)
                          2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: IrWQQQ87qyimXkaVbWmypF1KTlFQ3SVb+ZH3CVea9kQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:0f:e2:c7:bb:dc:01:d1:5e:2d:40:37:40:3f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
        Validity
            Not Before: Aug 23 04:00:49 2025 GMT
            Not After : Aug 24 04:00:49 2025 GMT
        Subject: CN=08864d7752e255114f3970b03d1c1c9c9e7c6ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:68:c6:dc:cb:24:db:3d:7a:44:eb:06:6f:
                    c1:96:19:01:4b:c6:64:79:7f:f6:df:02:4d:d6:7d:
                    8e:a6:86:1f:b0:22:eb:24:20:de:37:fe:b5:ed:31:
                    30:52:71:2b:97:a5:eb:7e:fc:f9:37:81:50:23:b1:
                    7c:ce:8f:72:c7:16:4c:33:05:93:ba:c7:ea:dc:a7:
                    83:6b:6c:e7:c8:a2:50:bf:78:49:7f:7c:0e:81:a7:
                    21:34:26:58:5e:55:59:b7:f1:5f:16:72:7e:4c:1a:
                    2c:3b:26:88:36:7f:5c:06:f2:07:20:dc:e2:03:69:
                    00:70:a6:64:96:e6:dd:58:d7:ca:c7:72:34:b1:cd:
                    f5:ce:6a:bc:fe:76:82:11:ec:4e:73:07:8a:e0:e6:
                    07:a0:1a:bd:40:db:1c:83:0e:91:3d:41:4d:3b:e2:
                    0c:55:70:94:ce:92:7a:0c:af:00:fa:76:f1:ad:69:
                    85:72:ed:55:76:cc:44:da:d1:08:7f:b4:c9:eb:14:
                    21:82:ee:ab:e3:d5:8b:d4:11:0e:9f:d3:9d:f8:49:
                    c3:df:18:8d:fd:84:91:0d:fe:35:00:95:10:c5:06:
                    49:40:ab:62:8d:30:9a:08:76:60:e7:dd:b2:92:c1:
                    44:8e:05:63:6c:91:83:07:94:1b:d9:a2:7e:04:01:
                    97:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:86:4D:77:52:E2:55:11:4F:39:70:B0:3D:1C:1C:9C:9E:7C:6A:E6
            X509v3 Authority Key Identifier:
                keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:99:6c:f5:a6:24:77:c8:2d:c4:34:df:81:92:a6:a4:c7:0a:
         d0:68:41:ec:aa:80:89:b5:4f:2f:79:c8:5c:19:67:9b:62:a7:
         fd:54:d5:e8:18:c9:51:df:aa:ed:ca:01:f4:39:04:53:4f:83:
         e9:4a:bb:3c:d6:71:7b:8a:e4:77:ff:68:8d:bf:55:91:47:a7:
         fe:5f:49:43:74:b2:02:82:bf:05:58:b7:d3:ba:24:c5:21:93:
         fd:89:a2:2d:49:10:25:52:4b:03:42:03:63:d3:8f:9e:d3:1d:
         f1:dc:83:31:c4:fe:c5:43:70:63:5f:7e:68:46:fb:fe:c6:30:
         f0:d6:2b:34:ef:8c:b0:83:bf:8a:a1:6a:f6:ba:51:5f:31:ee:
         16:06:7e:8b:8e:31:9d:16:ab:38:db:9d:74:7d:e8:46:94:ac:
         6c:49:c6:f9:d7:5e:fb:8a:eb:03:fb:c5:66:25:0e:f5:4e:96:
         d8:01:23:9c:95:3b:3d:c3:a0:5c:4e:f3:18:7a:65:6a:be:89:
         0c:f2:ff:2f:72:8e:d1:90:a3:c1:c1:a8:a9:37:c9:4b:14:e5:
         33:41:3d:8f:05:e8:10:cc:6f:9a:40:3e:5b:ac:8c:c7:98:2e:
         98:1a:9b:21:22:ce:e9:85:e0:85:b5:10:a2:3e:51:58:2e:99:
         f7:57:09:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:30 2025 by rpki-client