Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File:                     gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier:          5jCcHx03NbSuYuaSdZuVIKk7QRuYpVDx2120AOxWO4s=
Subject key identifier:   8E:4F:93:A3:BF:04:F5:B4:B4:F2:83:E4:59:A6:F8:E9:2A:5C:98:A2
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer:       /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial:       0198D65F97288192002CDCAA2C11F7E5B348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number:          0BEB
Signing time:             Sat 23 Aug 2025 10:00:45 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:45 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:45 +0000
Files and hashes:         1: KQTK1M5p1w2tgkimZwP7TTABtyY.roa (hash: LTRVwyOZnYQaG256SSamw/dl7HTrEkfEZ7OCXHYqevA=)
                          2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: 3ikTkHjMIhBCrSDVnIZm/suglWTKp5cQSXxiwgWNYJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:97:28:81:92:00:2c:dc:aa:2c:11:f7:e5:b3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
        Validity
            Not Before: Aug 23 10:00:45 2025 GMT
            Not After : Aug 24 10:00:45 2025 GMT
        Subject: CN=8e4f93a3bf04f5b4b4f283e459a6f8e92a5c98a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:2e:fb:3c:da:ba:59:b1:5c:b4:2c:22:66:
                    2e:b4:94:9a:25:d5:f9:44:76:a8:f7:38:2b:b9:7e:
                    e9:8a:7a:ce:68:5d:e2:98:50:a9:bb:7e:6e:dc:28:
                    82:34:e4:45:ef:6a:e9:2d:a4:37:dd:3a:92:58:07:
                    01:87:12:6f:87:b6:0a:66:d7:63:a0:08:f1:84:fc:
                    0e:3d:f6:fc:a4:67:2d:0a:12:58:94:45:13:64:94:
                    68:f4:5b:ae:48:6a:cb:4c:ad:d2:c2:94:c9:4d:e0:
                    c2:a4:be:23:74:2b:72:76:b0:1d:de:6d:66:39:e9:
                    46:19:26:55:44:f0:1b:bb:ce:1e:cb:89:2d:e2:a9:
                    9f:76:db:2b:c4:14:b4:c5:f5:c7:86:e5:d5:ed:68:
                    44:3c:30:ef:7d:ff:28:2d:c7:13:1f:e1:11:2e:c0:
                    f7:76:30:19:a4:77:1b:24:ec:3a:85:b5:93:20:1a:
                    a3:4b:f1:ac:75:9d:4e:80:e1:77:1b:03:cf:2d:b2:
                    06:55:68:3e:02:1c:05:87:45:72:64:f0:3d:b3:72:
                    6c:83:20:15:bb:ed:f8:37:f4:ae:5f:cb:a6:cb:25:
                    5c:04:43:b4:79:d8:a6:83:47:0a:d6:bd:9c:21:88:
                    0d:d7:04:2a:76:7a:86:68:b7:fd:83:7d:2a:25:fd:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4F:93:A3:BF:04:F5:B4:B4:F2:83:E4:59:A6:F8:E9:2A:5C:98:A2
            X509v3 Authority Key Identifier:
                keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:08:ac:f4:e1:6c:30:c7:12:9e:b8:f5:07:0b:93:bf:d0:01:
         c5:32:a5:3d:14:fc:a2:b2:ca:23:41:e3:4e:0a:dd:70:f6:3b:
         bf:2f:7a:88:c2:25:6f:01:88:4f:73:92:42:95:ed:1e:97:39:
         cb:f0:cc:26:f9:bb:c5:b3:21:92:51:ec:dc:a0:53:db:3d:ad:
         19:ba:91:2f:84:d8:c2:d7:e8:98:f6:11:4a:ba:13:58:6b:71:
         a5:46:b2:59:be:bc:e6:72:09:e7:77:e6:7d:27:ef:d7:02:3e:
         61:71:48:fd:7f:5e:d9:e9:c7:f6:e4:fa:f6:4a:b7:2e:8e:7c:
         fa:2d:5b:32:79:cb:ac:30:ae:77:44:12:c8:09:09:a6:22:d5:
         a3:35:01:78:9c:1b:c3:e8:c0:b6:77:13:c5:bf:60:af:11:42:
         fb:5e:71:4b:dc:7f:5a:d2:95:d9:75:d4:69:11:b5:5d:f9:9f:
         6f:18:17:57:4b:ab:30:66:6d:41:9f:48:a8:01:e2:d4:40:07:
         e1:e0:67:7a:11:4c:40:e8:e8:b0:24:01:93:c2:b1:37:05:23:
         84:16:61:9d:cd:2a:8d:51:ac:6c:44:bd:b4:5f:23:46:38:58:
         9d:3e:f5:6c:1d:dc:1d:2c:23:74:ff:d4:8f:08:c5:dd:c3:35:
         e0:8a:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:06 2025 by rpki-client