Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
File:                     fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json)
Hash identifier:          l/MRtD/zBiBZP+6/T6o1N2x/ardueSFB19T2kZywP98=
Subject key identifier:   B1:33:CD:AD:F7:F1:78:9A:5E:49:02:95:48:55:C6:BE:A3:D5:8A:E5
Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
Certificate issuer:       /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Certificate serial:       0198D62982A44FB37F640A4BA9CA5DEF801D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
Manifest number:          32
Signing time:             Sat 23 Aug 2025 09:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:41 +0000
Files and hashes:         1: MXRadGpzqEbp0mkxJfqHUigmWBA.roa (hash: wm6CRKGDQ4Q1PS4u4levZbaZ8tcUlI9RmOi9JQKCpTM=)
                          2: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: MTxmIn2VWB6AF0q4PE1YHe+xhIsh2hx3PZ2D3kSSx7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:82:a4:4f:b3:7f:64:0a:4b:a9:ca:5d:ef:80:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
        Validity
            Not Before: Aug 23 09:01:41 2025 GMT
            Not After : Aug 24 09:01:41 2025 GMT
        Subject: CN=b133cdadf7f1789a5e4902954855c6bea3d58ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:91:f6:96:4e:73:da:a4:71:9b:5f:71:97:2f:
                    8d:d2:dd:ba:9a:43:1d:76:b5:46:78:04:bd:6c:86:
                    66:a8:17:6b:3d:58:93:45:6e:0a:5f:ce:ce:64:09:
                    04:85:88:ad:ed:17:96:9a:b4:aa:f3:1b:3c:2c:15:
                    2f:52:1e:78:e0:9c:d6:2a:53:3a:8d:f7:4b:49:e7:
                    df:9c:76:52:09:32:8a:85:45:51:ec:bd:d2:85:c5:
                    69:8f:bd:eb:67:a1:fd:56:a3:e8:69:db:04:f4:10:
                    53:22:9f:7e:c4:1c:90:7c:4a:e2:54:9e:30:ce:2c:
                    04:ab:ba:23:15:ac:4c:23:d8:3f:03:76:6a:7a:06:
                    7b:b9:2a:84:ea:27:e2:f1:72:f8:2a:f3:11:bc:d5:
                    b3:21:b0:2b:d4:bd:e8:a1:75:52:30:77:c7:21:c8:
                    e5:b5:bc:65:ae:79:73:57:57:47:17:c8:40:ff:36:
                    88:d6:0f:46:eb:7f:cd:d0:ee:fc:ea:51:83:38:d4:
                    f4:80:73:48:d2:81:c6:bc:d6:cb:b1:8f:2b:00:65:
                    ed:76:eb:17:cf:9f:35:3b:6d:3d:04:cf:7a:0b:ed:
                    63:37:22:d9:fc:41:a6:e4:bc:10:b3:55:06:a6:aa:
                    f4:b4:16:e2:89:0f:2b:c0:1a:ea:00:eb:99:b3:51:
                    68:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:33:CD:AD:F7:F1:78:9A:5E:49:02:95:48:55:C6:BE:A3:D5:8A:E5
            X509v3 Authority Key Identifier:
                keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:88:b5:8e:f2:4c:2d:06:f8:8a:3a:cc:6f:59:b5:9a:95:
         2e:81:eb:a9:cc:c2:4b:1e:61:9f:27:4e:1a:b8:3d:05:8e:d2:
         26:cb:d1:9b:35:7b:ee:a5:82:fd:9e:cd:49:e6:f7:aa:e0:03:
         2e:6d:8c:a2:65:9a:09:fe:a2:5c:d9:21:18:78:7e:c4:91:ab:
         6f:72:8a:c8:73:9a:0c:c1:3d:ed:3a:0c:8f:52:e3:2e:79:39:
         72:48:1a:c3:ad:bd:3e:63:7b:a7:03:00:c2:83:f2:58:27:15:
         42:79:80:f1:cb:e8:d1:ed:73:10:a1:89:fc:89:7d:6f:88:6d:
         6d:7a:55:64:d9:87:1b:0d:d6:87:23:97:65:64:cb:28:a2:4e:
         16:71:db:c2:65:c0:56:fe:b3:89:61:c4:68:f3:7a:c0:41:29:
         ee:4b:b6:7e:9d:1b:e5:05:91:83:6a:f4:08:5c:2c:30:4f:97:
         19:5b:2a:19:32:9e:c3:f2:4e:3e:53:d4:3b:a0:dd:5b:b4:dd:
         89:60:ff:48:b4:53:88:48:b1:05:fc:1d:c0:6f:6c:45:32:b9:
         e6:93:64:78:ed:db:d7:70:74:8a:1e:bd:6b:e5:bd:b1:b9:6a:
         ad:cd:04:8e:9b:e9:bd:f9:47:56:8a:53:bc:2b:63:a7:78:c8:
         4f:36:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:42 2025 by rpki-client