Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
File:                     RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json)
Hash identifier:          lieMKvl+gTucysiEZrl7uDoIfI9LmLW8eIXiSpTOoHE=
Subject key identifier:   20:6E:B4:DF:06:2A:D8:75:82:8B:6A:F4:9D:E3:10:50:37:53:A0:F2
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Certificate issuer:       /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial:       0198D5BB96EDCD068F9D3F6FF473B1A726BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
Manifest number:          03FA
Signing time:             Sat 23 Aug 2025 07:01:37 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:37 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:37 +0000
Files and hashes:         1: AtEE45wMuuWclU17cb1kVGtiK-k.roa (hash: zV0IMkpRcApVZ59kj9E+ybhQgMo26h1xRqM1Q3Q35gM=)
                          2: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: mlH5Zhh9w3q2QhXl2Q8GA83lvrQc7oIglOf1YEpV2QY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:96:ed:cd:06:8f:9d:3f:6f:f4:73:b1:a7:26:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
        Validity
            Not Before: Aug 23 07:01:37 2025 GMT
            Not After : Aug 24 07:01:37 2025 GMT
        Subject: CN=206eb4df062ad875828b6af49de310503753a0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b7:ca:f0:8e:58:dd:64:5c:8f:9c:e1:03:42:
                    9e:62:61:1d:66:52:b2:b7:8a:a6:7a:3a:7b:21:e2:
                    aa:8f:53:dc:ec:bb:80:f4:96:91:75:7c:f5:d6:17:
                    81:9b:09:45:29:88:b4:bd:5c:75:1e:fa:dd:f9:4a:
                    ae:a8:63:1e:10:54:47:66:0d:ae:bb:73:e2:fc:3c:
                    ce:35:4f:cb:77:3c:d2:62:cd:dd:c8:f5:3d:48:8b:
                    1b:8d:eb:6f:32:db:50:3c:cd:a0:3d:13:9d:66:d8:
                    64:77:16:71:96:74:70:64:42:f3:37:96:84:a7:26:
                    8c:61:88:e2:6e:33:bd:74:e6:72:26:18:ae:0d:71:
                    ed:91:67:ee:ca:c7:6a:4d:1a:be:52:34:84:66:b3:
                    ba:b7:9f:e3:ba:af:84:0c:a7:c5:8b:99:9f:5a:d4:
                    d7:5c:4e:ea:a2:4b:34:7d:49:91:60:4b:66:74:5c:
                    1a:03:34:9f:5a:cc:ae:8d:81:ce:7e:44:5e:53:9f:
                    81:79:ff:80:15:2d:1e:2f:66:42:6b:47:42:96:d2:
                    dc:a3:48:9e:84:23:32:d3:a6:29:04:9a:bf:2a:3b:
                    90:f2:47:1b:54:fa:ea:0d:6b:d8:4a:d4:d1:53:31:
                    e1:dd:af:4e:95:b6:6d:51:1f:30:fa:b2:e1:6c:11:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6E:B4:DF:06:2A:D8:75:82:8B:6A:F4:9D:E3:10:50:37:53:A0:F2
            X509v3 Authority Key Identifier:
                keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f6:6d:d3:7c:4b:5f:b0:f4:91:33:94:ca:ed:73:c6:f0:d2:
         2e:44:95:0e:51:fa:82:3f:fc:98:c8:d3:ee:00:89:d7:ea:28:
         a5:5c:0c:d1:0b:3a:f2:25:ca:04:00:e1:05:51:3c:2a:80:eb:
         b0:91:cd:98:47:b2:2b:23:f2:eb:49:cb:93:e6:97:71:ee:48:
         d0:6a:55:38:08:fd:ba:87:3a:ad:91:f5:f6:f5:f9:e5:65:73:
         28:a6:f1:75:36:c8:b5:d5:84:2d:a4:4b:8e:24:24:c7:40:c4:
         08:7b:ea:e7:d1:ca:09:f4:2c:11:bb:d0:5d:24:9c:85:7c:5c:
         7a:3d:8e:28:da:37:ad:84:d1:c7:1e:72:78:ad:7e:ef:d7:5b:
         7c:58:00:6a:85:4c:3f:17:b1:ac:3a:4d:ac:ac:6f:fe:1c:17:
         bb:a9:72:e0:5f:fd:fc:d2:c3:2f:1e:0b:33:4b:e4:3e:74:67:
         37:6f:16:80:d3:3a:fa:8d:a7:a9:e4:af:de:bb:af:52:a5:6f:
         3d:16:58:c8:75:f8:5c:ab:33:27:e8:54:cd:e4:12:e4:8b:01:
         a3:ed:31:71:06:b3:79:3f:69:0c:07:05:82:22:08:e1:ce:5f:
         55:f7:3f:71:8b:1d:3d:bf:4c:03:91:58:4f:62:94:0f:68:b3:
         f7:cc:53:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:08 2025 by rpki-client