Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File:                     eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier:          wJXcFNt4H/AEoJs9qt9H1DmYtf0HjVCb81g3rPjAYgo=
Subject key identifier:   9A:A4:B4:59:F2:D2:25:F9:50:06:6D:84:79:62:ED:66:57:D9:5B:A2
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer:       /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial:       0198D473FA990C965C06164330CE495D0736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number:          0B3A
Signing time:             Sat 23 Aug 2025 01:03:47 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:47 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:47 +0000
Files and hashes:         1: WCZTQxU946nlR7ch0PPIZ_wC2wE.roa (hash: gB/77HCksF53BORp9peHh3slxdDcnobCSMUhewaJyNA=)
                          2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: 9y10yK9ASN3EZLqEQkf98mfNNNYAZmSsM8sur9qAXV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:fa:99:0c:96:5c:06:16:43:30:ce:49:5d:07:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
        Validity
            Not Before: Aug 23 01:03:47 2025 GMT
            Not After : Aug 24 01:03:47 2025 GMT
        Subject: CN=9aa4b459f2d225f950066d847962ed6657d95ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:ce:a6:88:b4:cd:9f:57:65:53:af:eb:31:
                    c3:a3:b6:e3:93:85:d3:59:cc:6a:47:7f:ac:9b:13:
                    87:2f:85:f4:04:c1:55:ab:d5:61:73:36:b0:45:95:
                    84:0f:0e:38:10:e1:30:f3:f7:2b:c3:dd:87:8d:e1:
                    39:89:8f:50:27:2a:65:9a:88:f2:17:55:36:1d:76:
                    a8:80:25:d7:1f:b1:cc:ad:f2:ea:1e:13:3a:a0:25:
                    45:63:95:cc:64:68:7a:81:2d:09:f5:92:fd:ab:55:
                    11:17:f4:2d:f1:a0:39:32:1a:dd:5d:20:0b:8a:18:
                    2f:98:ab:9c:6c:ef:fa:00:cc:90:f9:b8:37:74:29:
                    7a:0c:9b:a7:85:a7:b7:30:7b:38:59:95:98:f9:34:
                    3f:88:cb:b1:fb:2d:dd:05:eb:7c:8a:c8:25:60:f0:
                    6c:45:6c:b6:3c:52:f9:9d:10:d1:33:af:21:6c:5c:
                    4a:3b:c8:dd:07:d9:d0:af:38:6e:ae:28:3b:fc:68:
                    28:ec:4b:0a:7b:ca:42:5f:33:4f:8e:95:e1:35:bd:
                    ad:0f:75:d5:93:bd:aa:91:77:3f:2c:aa:b0:7e:1f:
                    24:8f:95:b7:74:6a:d1:51:6c:b8:07:df:5a:3e:61:
                    89:a8:8e:ac:4b:ec:45:77:26:69:ad:c8:eb:cd:64:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A4:B4:59:F2:D2:25:F9:50:06:6D:84:79:62:ED:66:57:D9:5B:A2
            X509v3 Authority Key Identifier:
                keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ce:0e:0a:35:80:49:c5:ee:47:13:76:0e:e5:f9:06:43:0c:
         50:ae:fe:73:6c:0d:27:67:7b:00:c8:76:62:e7:02:4e:92:22:
         d7:05:63:5d:dc:dd:86:c6:5c:f9:eb:9e:27:71:7d:0c:52:98:
         85:33:d0:c4:b5:48:88:00:3d:86:44:2b:37:b0:b6:f2:a0:af:
         cf:be:ac:ac:ea:7d:8b:75:d9:f0:6b:75:bf:34:62:5a:e0:e8:
         33:46:36:85:d4:c3:74:1f:99:56:ce:41:60:15:12:ff:e2:a2:
         fd:4f:4c:54:aa:90:7d:1e:3f:c8:5f:8d:70:6f:f2:02:88:d4:
         c9:e3:d9:1d:5b:94:2d:54:6f:c4:72:6b:d1:ec:00:33:ad:c8:
         30:2e:80:14:8a:a7:ee:52:a1:85:5f:1a:90:34:12:d7:cf:33:
         d3:6d:d3:78:9d:d1:88:13:37:a8:40:d3:35:46:92:94:23:17:
         4b:ac:b1:04:5e:24:b6:b1:b2:b5:8f:b3:b4:a9:f8:1b:a3:fc:
         27:01:28:f9:21:79:e5:d5:6a:b7:e8:36:e8:71:41:f3:64:6f:
         c4:fb:cc:d0:e7:11:0a:94:5b:5e:c8:43:54:a2:c3:32:2e:f6:
         b5:58:66:2b:e9:f6:9a:5d:53:ad:db:b9:c4:d9:5e:93:e5:a2:
         d4:77:96:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:34 2025 by rpki-client