Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File:                     pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier:          ippgdPrxxcNU7jmM3+SxtghTDJx1T+OXzRs7CuP/MGw=
Subject key identifier:   74:86:15:C4:0B:0E:DB:38:9A:F8:4F:06:B7:F7:AA:14:3B:F7:B4:A6
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer:       /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial:       0198D5BC17D9218EC22A3241AA18479D505C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number:          0B2B
Signing time:             Sat 23 Aug 2025 07:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:10 +0000
Files and hashes:         1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=)
                          2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: ey/o94cm+2QmveWfQWAlHuz3HuGIIffylouUZD58nRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:17:d9:21:8e:c2:2a:32:41:aa:18:47:9d:50:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
        Validity
            Not Before: Aug 23 07:02:10 2025 GMT
            Not After : Aug 24 07:02:10 2025 GMT
        Subject: CN=748615c40b0edb389af84f06b7f7aa143bf7b4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:d2:10:7c:a4:ca:ce:46:90:a1:ec:fc:13:
                    f2:b3:63:3a:1a:15:7a:74:a3:0c:3f:ed:31:70:01:
                    e2:d8:83:79:79:51:dc:21:95:fc:6a:8d:b3:f0:8b:
                    6f:ea:58:49:a8:a3:61:78:06:d5:28:2c:26:4f:74:
                    34:c6:e1:8e:50:92:df:10:4a:18:89:32:f9:c6:21:
                    f2:fb:f9:f0:5d:1f:fb:3a:7c:3d:c3:9a:a1:ec:d3:
                    f0:c1:e4:c3:b2:1e:7e:20:6c:9b:5e:58:5f:70:2a:
                    10:96:c0:cd:2e:a5:e7:2b:b4:20:09:64:17:0e:ec:
                    14:18:74:5b:ba:2f:9d:0f:5a:94:8a:e5:0e:ea:a7:
                    01:fe:93:5d:10:bf:b4:43:58:a3:ce:0e:f1:18:4b:
                    3e:5f:d4:1d:bb:47:6f:4b:c4:1c:a1:09:44:97:84:
                    f7:25:03:05:f7:e6:70:27:06:0d:10:df:4f:80:07:
                    78:a8:0a:ec:dd:91:0c:bb:80:d7:24:cc:db:3b:0b:
                    1f:6f:79:e8:f3:67:4a:0a:63:96:a4:9d:08:3c:26:
                    2a:fc:95:2b:a0:00:ea:e2:c1:4b:c7:ae:03:a6:b4:
                    f0:c6:6d:12:74:98:c5:ef:d5:14:74:1e:28:b6:e7:
                    c6:b4:19:f1:55:d2:85:80:b9:6e:bc:d3:5f:99:1a:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:86:15:C4:0B:0E:DB:38:9A:F8:4F:06:B7:F7:AA:14:3B:F7:B4:A6
            X509v3 Authority Key Identifier:
                keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2f:d9:5f:46:b1:75:9d:a9:42:0d:7f:bc:c3:f5:9e:47:d7:
         28:95:32:0f:0e:03:17:d5:ab:e5:09:11:44:63:53:37:75:2f:
         e9:8d:d8:93:03:e0:0b:0d:3d:14:0f:67:d4:f8:79:b1:17:d0:
         38:c8:f6:f5:ac:4f:89:01:f0:29:33:ac:ac:3f:9d:1c:e1:70:
         29:2d:1c:7c:b6:c9:6d:24:ca:15:c7:21:01:ee:9d:03:da:c8:
         36:4b:97:a4:4b:59:e6:f7:9f:62:93:5a:af:a9:91:dc:5b:ee:
         9a:4a:0b:9c:6a:01:68:68:fc:23:72:88:d3:94:40:66:67:11:
         26:5a:b8:15:a2:be:9d:de:b7:f7:7e:06:41:47:26:bd:a0:46:
         03:2d:8a:a6:e1:d6:2d:3e:f3:9f:55:41:90:12:59:55:b6:fc:
         3d:05:8e:72:78:be:89:d3:e9:02:00:09:cd:df:90:95:25:7e:
         c6:4d:66:31:63:42:3c:20:ba:b5:75:77:02:e3:5c:fa:b4:dc:
         37:15:28:ac:56:ee:97:2e:47:8e:5e:e3:78:94:31:03:b9:1f:
         15:ac:1d:7a:1b:a2:b8:b3:08:f4:b3:af:d6:79:ef:03:9e:10:
         d7:5a:a8:de:77:49:d2:bd:aa:38:ff:5b:72:6e:7b:43:2f:21:
         71:26:0e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:59:50 2025 by rpki-client