Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
File:                     aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft (raw, json)
Hash identifier:          51haNkdU0LruTiPW5ON+BL6vnIXwx2ybHz4yGjYetN0=
Subject key identifier:   D4:93:52:5D:1F:D9:B2:D5:D2:75:05:A6:9E:B8:AD:C0:03:00:19:35
Authority key identifier: 6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
Certificate issuer:       /CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Certificate serial:       0198D515BDADED111058665CB8B25AC0C98B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
Manifest number:          028A
Signing time:             Sat 23 Aug 2025 04:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:28 +0000
Files and hashes:         1: Uk__OZgps3cW-lHF28p4Fkxzez8.roa (hash: xpOF8IhBwl9sbc7jkk5/9vqgBdRwATYGkdLVpY/CHdk=)
                          2: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl (hash: u7fn1HGZAzAhovo8HcU2L1ybfCcdZhmCTNcCAOWp0qE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:bd:ad:ed:11:10:58:66:5c:b8:b2:5a:c0:c9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
        Validity
            Not Before: Aug 23 04:00:28 2025 GMT
            Not After : Aug 24 04:00:28 2025 GMT
        Subject: CN=d493525d1fd9b2d5d27505a69eb8adc003001935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:e1:f4:d2:f4:8b:e8:62:6b:fd:23:79:63:
                    c4:80:4f:80:2d:85:71:d5:92:31:88:44:e9:ba:63:
                    63:f2:21:a5:7b:8d:ac:1b:7c:c3:f8:35:f8:19:e4:
                    57:4b:c0:3b:4c:3e:f5:56:ca:21:0f:90:44:99:aa:
                    e2:21:b2:02:dd:8c:27:0c:ee:31:62:c1:f6:f2:b1:
                    fc:2d:9b:56:0b:b5:d0:42:fa:d3:4b:c5:00:66:84:
                    15:ae:64:df:06:75:b5:db:44:db:6b:1c:ec:6d:b5:
                    7c:d1:85:1d:8f:3f:39:1e:a9:4d:15:e7:8a:6e:f9:
                    4b:18:e3:bc:8f:6f:98:f6:0e:94:4b:8f:c9:c2:e3:
                    6d:bc:bc:a8:46:04:35:fb:d0:21:48:dd:2c:f9:f2:
                    44:28:4d:f9:37:dd:1c:61:5f:7c:95:28:d8:bf:c0:
                    92:5d:62:b1:8f:0a:43:08:b1:d6:83:98:7e:35:45:
                    0b:4a:9d:c5:93:5b:ca:ce:a2:02:2a:e6:47:c1:02:
                    ae:d5:b4:f5:e8:d4:ce:d0:a7:4e:b7:86:27:ee:3d:
                    06:c6:bb:cb:2e:29:c1:36:2c:64:06:f0:8a:0e:d2:
                    f3:57:65:55:93:dc:5f:b8:fc:83:63:a8:89:e7:de:
                    4f:f7:d5:a7:ff:08:d0:98:56:c9:61:62:53:be:91:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:93:52:5D:1F:D9:B2:D5:D2:75:05:A6:9E:B8:AD:C0:03:00:19:35
            X509v3 Authority Key Identifier:
                keyid:6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:b1:3a:fb:9c:d6:65:b1:25:df:01:36:01:3b:1f:1b:67:
         e5:34:56:46:5d:e7:8f:a1:af:73:97:08:34:61:e4:2a:a7:62:
         e1:24:96:07:bb:f4:ec:67:05:49:0d:87:0b:91:27:5b:8b:13:
         6c:5b:e4:4a:0b:a0:8b:3a:61:97:78:f6:44:0d:37:91:2c:88:
         89:86:6f:e6:fe:09:e2:53:df:01:0c:7b:88:4d:99:99:3a:15:
         5f:9a:d0:b6:bf:a9:7d:b2:22:4e:f1:3a:40:3a:c3:2a:50:5e:
         0a:d6:fa:c9:26:c0:f6:d8:ea:04:14:76:e5:68:e8:88:81:a0:
         21:64:23:27:36:b9:55:17:eb:e9:e8:3b:9c:a5:5f:7e:38:98:
         c8:d1:9f:9f:1c:ca:54:8c:6b:89:07:f2:8b:81:a5:ee:e4:4b:
         34:a1:22:17:00:12:f7:b7:04:94:bc:31:0a:b3:0f:f9:60:0b:
         3b:5a:e1:dc:fc:0f:56:a4:1b:3f:33:35:eb:10:5e:9c:62:94:
         f5:00:a9:4b:56:98:bb:c8:56:7e:18:0f:98:12:e9:7c:19:86:
         c7:fe:80:4a:5c:e9:4b:cd:e3:5f:26:7b:a6:53:94:a9:f4:b5:
         80:8b:46:d9:8b:0a:f9:42:13:73:b0:d8:43:46:ad:41:7b:f1:
         26:8c:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:32 2025 by rpki-client