Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File:                     eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier:          YKoWaZpg8Wyjt5H7EN18Ge9D1cBPu31v7amiU4r+LSs=
Subject key identifier:   93:0D:9B:AD:4D:7E:01:2E:1D:E7:01:9D:55:08:B3:A7:97:73:24:40
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       0198D4728721135F34B285748EE03F894734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number:          0869
Signing time:             Sat 23 Aug 2025 01:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:12 +0000
Files and hashes:         1: JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa (hash: lyg6mL7hgbTWMhjKowvZCwiOw1BkDLdd336Z4BXH0aw=)
                          2: PY2GKalpJxh0rVeN3SNnaDuGcN8.roa (hash: SriQyHP0WB/8fwiUvKAdnNLXQ0snarIjG0cxw/V7C/w=)
                          3: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: yDAIgkznORov3MrRVzX3yd7GpcKrwDac0RHoSznf2RE=)
                          4: numbWnJewpdlWjFsofSPwm7IG3g.roa (hash: 14YqjZz0f+0ogH+Jj76bMz/1yDXbVz5uWlMR4KVjJRU=)
                          5: psQBUc0pobHwdrhlOUZzj_GPEto.roa (hash: qru8ysHHH3C4jCMlszx1z613KVN+O1eNTXPzB5PAv+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:87:21:13:5f:34:b2:85:74:8e:e0:3f:89:47:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Aug 23 01:02:12 2025 GMT
            Not After : Aug 24 01:02:12 2025 GMT
        Subject: CN=930d9bad4d7e012e1de7019d5508b3a797732440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:9b:be:78:78:cc:ff:cb:a1:0c:36:b3:4f:
                    7c:9b:db:b2:2d:d5:a3:54:85:0f:97:eb:0f:0b:fe:
                    b5:89:14:f3:ce:ff:f2:fd:8b:f9:c8:c8:24:e8:8e:
                    8c:f3:20:6a:fd:53:a5:b5:27:82:65:88:0f:25:ea:
                    8d:a8:a0:e8:92:3b:99:9b:5a:6c:98:0a:50:3a:c1:
                    5d:55:74:a9:5d:90:f4:0b:65:55:31:8b:f7:12:52:
                    be:d4:ce:02:f2:10:ad:7a:a3:70:87:0d:35:40:b1:
                    a6:36:c1:b1:1a:5a:6b:e2:81:72:cc:5e:d4:62:9e:
                    b1:22:66:86:71:b0:3d:1d:19:a1:f8:97:4a:36:bb:
                    00:de:53:1e:f8:28:f6:41:c9:57:eb:1b:ae:ef:6a:
                    0b:a9:f5:45:8e:5c:67:5d:d1:82:19:5b:86:3d:59:
                    59:3f:00:c1:25:db:10:3b:a6:8b:26:53:f7:9b:cc:
                    bd:d6:21:1e:61:16:50:61:ca:df:60:bb:15:d1:da:
                    84:6d:40:b0:79:06:41:98:12:5b:da:7c:83:d5:38:
                    b3:60:ec:a4:17:f7:af:6e:36:10:c9:64:64:16:d6:
                    53:ba:68:50:42:b9:80:8a:18:5d:86:47:34:d2:4c:
                    be:62:c3:56:bc:fe:da:45:a1:8d:26:af:3b:74:e0:
                    7a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0D:9B:AD:4D:7E:01:2E:1D:E7:01:9D:55:08:B3:A7:97:73:24:40
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:44:d0:68:25:1b:ab:ba:01:da:0e:6f:c3:8d:c8:ff:d6:18:
         f9:60:f8:c7:83:bd:5d:b2:16:16:d5:5e:35:ed:0a:ed:89:06:
         1e:1b:52:be:16:75:19:34:c7:ce:59:27:b4:a2:61:b2:7c:a0:
         93:30:c7:69:88:32:d0:63:3f:a5:1f:3b:ad:47:0b:59:ac:a4:
         9c:46:ed:95:d2:2b:4a:20:2e:82:1b:7d:e4:95:8e:cb:5b:6a:
         bc:94:2d:ab:62:22:9b:8e:2b:b1:9e:f9:e0:f9:00:93:1f:a6:
         e9:ac:da:cb:cc:4f:c2:f4:63:96:42:7d:77:6f:44:56:d9:39:
         bf:49:4a:90:81:31:2d:52:2b:7b:1f:6a:eb:51:d1:78:68:b1:
         1d:01:fb:bd:37:05:3a:77:80:d1:2f:87:6f:ed:4b:c5:f2:d1:
         cb:b3:94:a9:5a:d8:1f:f7:e9:b8:2a:28:82:1a:15:69:bd:d3:
         ba:4a:05:ab:40:b4:9e:1b:a8:d8:8b:77:f8:e0:c0:97:60:62:
         fc:d0:51:48:38:c4:be:64:23:9e:b4:67:6f:38:61:dc:72:6c:
         d6:fe:f3:55:c4:1c:06:98:ca:6f:88:db:92:b0:89:0d:74:87:
         1a:3c:a3:f1:c6:e6:60:a4:45:fc:ee:59:3f:3f:7c:71:90:2f:
         ae:c6:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:22 2025 by rpki-client