Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
File:                     mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json)
Hash identifier:          izg7iUvhJy9JuaLUnSwFVv4glDEzgqsg318xf0utYx8=
Subject key identifier:   DA:E7:10:FA:CA:3B:09:51:9D:C1:F7:02:68:EC:23:E0:59:49:C2:EA
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Certificate issuer:       /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial:       0198D5F1C1AD8527199883225C55B974074E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
Manifest number:          15DB
Signing time:             Sat 23 Aug 2025 08:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:47 +0000
Files and hashes:         1: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: JEjcNSASpDsKhTfh6qbhBzZJ3h1wkU9Qi1wgpUnsZjI=)
                          2: zpGvhyYRAmjs5EUuaL_qNrktFtE.roa (hash: 24VotJmvmJDfDZLcY9ERb5W8a78zlapyR9WGVJQ5ABc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:c1:ad:85:27:19:98:83:22:5c:55:b9:74:07:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
        Validity
            Not Before: Aug 23 08:00:47 2025 GMT
            Not After : Aug 24 08:00:47 2025 GMT
        Subject: CN=dae710faca3b09519dc1f70268ec23e05949c2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:11:32:bc:23:8e:eb:c8:0c:b5:9f:fc:77:
                    a8:d0:fc:c5:94:76:32:81:3d:d6:af:f5:9b:60:cd:
                    5f:f4:67:4c:3e:ee:b9:c6:49:76:15:48:cc:95:da:
                    e3:c0:15:cc:94:6a:20:8a:83:19:46:51:6d:64:d4:
                    40:38:fd:1c:b0:56:6c:4c:d2:1e:81:2d:c7:60:8a:
                    73:69:7f:1f:8a:00:d2:a0:27:27:22:e2:49:46:28:
                    06:0e:39:0f:d5:5b:4e:48:ec:1f:de:0c:9a:68:de:
                    65:6a:62:8e:ab:62:4b:87:67:62:bd:5a:46:b7:4b:
                    96:d5:37:b5:c5:84:dc:b9:1c:d2:b0:25:7a:8a:f3:
                    a8:e2:3a:62:0b:7f:cf:43:1d:c6:79:5b:45:c0:e3:
                    62:f3:d5:04:d7:a5:1d:ee:42:cc:70:f2:5f:a5:fc:
                    9e:5c:cb:b6:9d:a7:25:90:fd:64:51:be:9c:b2:66:
                    5c:89:94:ed:67:86:84:a5:7c:d1:6c:ca:1c:df:f5:
                    be:d8:19:83:3e:49:2e:93:ff:8e:2a:d0:7f:b7:07:
                    3b:ba:d7:2d:95:57:7c:fa:e2:4b:03:55:8a:e7:e2:
                    d6:5f:de:e9:2e:0e:e1:a3:af:77:33:cc:80:2a:42:
                    d8:dd:d7:1b:c2:ba:a8:19:ca:fa:1c:de:d2:e2:3c:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E7:10:FA:CA:3B:09:51:9D:C1:F7:02:68:EC:23:E0:59:49:C2:EA
            X509v3 Authority Key Identifier:
                keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:6d:39:da:01:4e:9f:8d:f0:a1:25:63:cd:91:3e:4f:34:cf:
         57:78:3f:80:da:ea:5f:ca:37:e1:02:84:67:ae:77:64:3c:56:
         70:6b:1f:3b:f3:d7:b7:d3:35:8f:20:d5:b4:bf:f1:7d:5e:78:
         50:65:75:21:e1:97:4b:3f:92:e0:ee:36:15:88:91:e6:6e:10:
         2d:2d:9e:3d:97:09:3e:04:de:f9:d1:7c:69:95:23:6f:c9:92:
         99:9f:dd:95:f4:1d:11:21:90:20:6f:15:4c:f9:c2:5f:6f:53:
         2d:82:8a:a8:89:cd:9a:57:ac:12:16:ba:71:8a:de:60:57:50:
         3f:22:6a:dc:8d:c7:68:7a:92:fa:e1:62:3c:47:25:ee:e5:6a:
         0a:f1:fe:0d:63:04:1d:82:bf:bd:b3:ca:fb:d5:ba:35:25:bb:
         cc:d6:a2:e5:69:b8:2e:b4:e9:bd:51:a7:08:40:35:ca:46:a2:
         38:76:fe:98:99:83:38:7d:cf:a5:fa:9f:39:1c:56:1b:7d:0e:
         f2:02:8f:4b:f8:ce:5e:0a:a1:e0:0f:30:c0:7c:27:cb:1b:24:
         af:d8:37:33:25:58:5d:97:c6:9c:a7:42:31:25:8f:45:02:20:
         7d:08:0d:7b:84:c6:17:3a:02:ed:3a:dd:ca:bb:06:23:c1:76:
         5b:2f:09:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:56 2025 by rpki-client