Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
File:                     MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json)
Hash identifier:          uNSg25yis662KgTCf6JTm99ek/mdZZpsdsJSQ4mA1js=
Subject key identifier:   3B:86:FB:4F:A2:49:11:1E:16:C9:88:EC:87:73:17:25:CA:78:C3:A3
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Certificate issuer:       /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial:       0198D70615017F9D5F484559A7CC8B7B11A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
Manifest number:          0DA7
Signing time:             Sat 23 Aug 2025 13:02:36 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:36 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:36 +0000
Files and hashes:         1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: aLpuU33/PeHw5DS8RQF8FnW8xPS49KurdUaGJDDGkwc=)
                          2: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (hash: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:15:01:7f:9d:5f:48:45:59:a7:cc:8b:7b:11:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
        Validity
            Not Before: Aug 23 13:02:36 2025 GMT
            Not After : Aug 24 13:02:36 2025 GMT
        Subject: CN=3b86fb4fa249111e16c988ec87731725ca78c3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fb:14:01:34:2a:b7:7a:9f:88:31:e8:56:62:
                    7f:8c:19:71:21:92:76:d8:0c:f0:31:9d:1b:63:f6:
                    fb:3d:d4:74:ec:8f:52:d8:36:11:31:26:e6:13:e5:
                    2c:c6:35:73:08:81:01:72:7a:34:62:1a:89:ae:a8:
                    55:96:a6:7f:db:b9:4e:35:f3:6c:7b:dd:eb:36:ae:
                    a6:a0:67:98:8a:d0:1f:bd:3d:d3:7f:1a:8b:03:8b:
                    82:7e:52:8f:ab:4e:b9:d9:58:b3:52:63:13:4f:b8:
                    17:ab:06:d3:1c:05:fe:b4:48:06:e6:57:d2:85:97:
                    eb:13:66:a8:34:9c:ba:8c:92:63:db:fa:f7:52:ad:
                    28:92:e5:a1:b1:37:09:de:83:4e:39:0d:77:48:f9:
                    62:36:80:f0:28:c6:1b:d8:26:4b:6a:f4:ca:b9:c5:
                    fd:aa:e6:aa:64:89:82:6b:db:c6:25:7b:bf:80:bb:
                    ea:fa:0e:2a:54:93:cc:c4:bd:b8:54:44:3d:e9:bd:
                    97:ea:90:ba:e9:03:29:53:e2:1f:d9:e6:cc:d4:82:
                    ea:ae:bc:9a:a1:b8:f7:c2:2d:8d:57:6d:44:e5:26:
                    9c:47:a1:52:06:d6:86:55:4b:f1:1a:ed:59:41:74:
                    ac:f4:35:1a:d1:df:81:34:de:3a:78:3f:94:d0:43:
                    ae:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:86:FB:4F:A2:49:11:1E:16:C9:88:EC:87:73:17:25:CA:78:C3:A3
            X509v3 Authority Key Identifier:
                keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:95:67:0f:52:c0:1c:70:67:92:4c:ab:37:24:2d:42:77:25:
         74:77:3b:9f:e5:05:f7:d8:e1:2b:e2:7d:5c:2b:4a:fb:04:e2:
         ae:fe:ec:fb:8b:3e:1e:f4:68:d5:65:0b:04:7f:df:81:3b:13:
         9e:6b:f3:8f:de:48:1a:f5:6e:41:c7:c4:6b:f8:c5:af:fa:1f:
         68:95:30:d8:a7:ca:7d:28:c0:42:c6:98:78:5b:dc:38:90:15:
         eb:d7:c0:69:a8:ac:ed:ab:25:bc:a7:4a:6f:4a:58:82:2b:b4:
         43:47:18:43:75:b5:be:28:f6:30:84:9d:55:f8:52:ae:64:62:
         6c:1b:d1:1e:eb:04:5b:c5:6e:9a:d9:2b:3c:c1:40:db:e8:fc:
         e3:81:de:cf:c7:11:72:78:71:1b:ee:9e:31:d3:7e:ef:34:53:
         ca:ff:0f:4a:9c:98:22:2a:fb:9e:70:96:4e:8d:23:f8:41:ef:
         78:be:dd:bf:fc:1a:d1:e6:d7:58:4c:99:ed:a4:7a:37:97:c9:
         bc:81:07:e5:6a:93:c0:f1:b3:32:b9:d2:56:53:72:bc:e5:10:
         cd:18:90:cc:62:7b:6a:9c:54:18:e1:88:76:36:31:b1:4c:2d:
         1f:e1:ce:0e:7e:86:8f:75:55:db:40:09:9b:a0:3b:a7:70:55:
         f1:01:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:47:37 2025 by rpki-client