Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          M+jHtmFfZ0HGZ+4aXZTb5DQSAmYK6i0r4a707fxyVUE=
Subject key identifier:   13:A8:D8:8A:59:98:3A:01:11:99:51:03:0C:DD:BF:04:CD:CF:0B:7C
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       0198D4E07B3829D0526BDBA00613FB787927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          0387
Signing time:             Sat 23 Aug 2025 03:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:18 +0000
Files and hashes:         1: 5ROabaZ0IQjGvjydG24dxkFdbIw.roa (hash: VZzap9WlH6EGkLU7RiUuipaz7yv8laZyaoXJmwbYxFo=)
                          2: KNoplKbnalbBlNJ0HrGiOS5fwgk.roa (hash: 6g25L6YriR7F4NqmIjLUqgHXTaSIa9NMu6Z6ggsvzHE=)
                          3: alNy-myxrA734TUoeZ1JVeikh6c.roa (hash: OCkDLXElKJB9eMUhsdq5dMT5WhX6caAwH3DuhC8oZvM=)
                          4: gdHjw5BAYBUGiQIKDf_rANYjbqo.roa (hash: rBCOEGXMkDk7MH6Epcgax70EgSCg7o0cp931QH6ZEmk=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: yqAhybi9Nji6kaDOMI30sU76sg6XhcvVRdXEK0+GHU4=)
                          6: y7BcwDEAXqOJr6z4aNGCsX7xfw0.roa (hash: NHC7ZwJSkEI3d9bNJO6OCWV6hxqIR1IsXwJaROvY2+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:7b:38:29:d0:52:6b:db:a0:06:13:fb:78:79:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: Aug 23 03:02:18 2025 GMT
            Not After : Aug 24 03:02:18 2025 GMT
        Subject: CN=13a8d88a59983a01119951030cddbf04cdcf0b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2e:dd:62:f8:88:0c:d2:74:61:15:b3:61:d3:
                    ef:69:ea:62:fe:5f:c3:f6:46:7e:99:1c:23:6d:88:
                    d8:86:e2:07:6f:a7:49:31:e5:44:ab:4c:fa:58:5e:
                    f7:a8:78:78:a7:f2:48:9d:ac:50:c0:09:1b:01:ac:
                    19:dc:76:cc:64:61:6c:1c:cf:65:09:fd:9a:85:f6:
                    e6:07:a7:f1:ca:eb:cb:a8:ed:7d:9b:84:02:8e:18:
                    75:a9:72:df:df:e7:5a:47:56:06:ea:07:a3:86:25:
                    6c:83:c5:eb:c0:5c:2b:cf:80:64:4d:09:f0:60:ae:
                    7f:fd:6e:f5:e9:6a:0c:12:c8:40:d2:94:ab:d4:1b:
                    62:a2:c9:68:75:a5:1a:fe:3b:3a:31:77:32:50:d6:
                    dc:5c:76:1d:c7:d6:53:4b:95:75:ed:c4:1e:45:93:
                    bc:b4:0e:52:ad:0b:26:13:ca:ac:f4:09:a0:f4:84:
                    ee:91:28:26:2b:7f:71:85:9d:98:61:02:bf:81:be:
                    02:49:3f:10:8d:4a:5a:ae:b8:ec:c4:d5:bd:0a:15:
                    98:a7:f0:27:d4:d0:c6:25:10:85:75:84:73:ee:c4:
                    b4:f4:de:26:d6:e8:6d:fe:34:36:dd:6a:8d:a2:9b:
                    86:86:39:55:92:ff:3b:e5:df:49:5b:ba:f5:05:4a:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A8:D8:8A:59:98:3A:01:11:99:51:03:0C:DD:BF:04:CD:CF:0B:7C
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:7d:34:9b:ea:ef:b5:0d:06:34:db:3c:6d:6e:48:04:a9:
         fd:bb:25:69:a3:d5:b4:65:48:4d:12:52:99:63:3f:b2:7a:1c:
         cc:30:b4:2b:4a:14:3e:29:a8:d7:89:68:f5:48:0a:57:7e:f3:
         1c:9e:5a:e5:90:f7:bc:56:fd:14:3b:5a:b6:32:e7:00:db:07:
         65:70:30:87:b2:a1:54:c1:82:25:b3:0f:e1:8d:e4:e3:d6:70:
         d2:4c:84:61:74:f5:04:45:98:9c:6c:10:5c:c9:7c:6f:8a:6f:
         c9:57:eb:46:0f:e0:48:d7:44:cf:18:26:b6:46:f6:ab:5b:db:
         0f:8c:ad:05:a7:e5:c1:a7:3e:82:4b:39:07:27:04:70:0f:23:
         4a:e8:43:91:fc:61:7c:c8:b0:f6:b2:aa:46:4b:9f:1e:e6:0c:
         5f:71:d8:32:d2:dd:76:86:1f:7f:25:cc:27:f4:ad:33:fe:60:
         3f:0e:02:64:25:16:4e:1e:7e:cc:82:55:d3:a3:5a:a8:27:e7:
         ab:b7:b7:5e:4e:68:c4:3c:ae:e4:4f:7b:e3:4b:f6:80:d9:cf:
         a7:f0:31:18:cb:a6:66:dc:cc:17:9f:b0:a6:9a:96:e8:17:3b:
         f6:a7:01:ef:11:5c:7b:2f:68:20:6e:4a:37:23:cc:2e:c8:ef:
         38:ea:d8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:54 2025 by rpki-client