Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
File:                     XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json)
Hash identifier:          liQfTVVAmQJx4JDf5lI4frsDu2gLly4SI3FZnz5PLVM=
Subject key identifier:   C2:65:44:4B:C3:42:52:60:F0:4B:BA:65:83:F5:BC:91:71:0A:7C:EB
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Certificate issuer:       /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial:       0198D5F144730E6150A6DAD16E236376726E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
Manifest number:          0EA8
Signing time:             Sat 23 Aug 2025 08:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:15 +0000
Files and hashes:         1: P2NRYwvD64-ChL8WHsL3n2VNc0o.roa (hash: ieevRAfzDccOVGuN3ZGz3jBO2k67pRtiKtsN5CR5hf4=)
                          2: WePWXi4BVJvCbK70G_Bl8LvCy1A.roa (hash: KcxOlT86bPrqOuZYUTgExqyOPNUmMSnB0pr0K4kluRk=)
                          3: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: OzUyhogA6HjDMEkYqEePtm1T4DMmnhKBC1yyKKmGErs=)
                          4: ZN7LHZSqu6VYidqfpIPOfCxL2L4.roa (hash: HOkUkg1LrwSaHvSseUfJQzAJzpgcTNuaZCYPqCnldN0=)
                          5: fm5A4Lmh3Dyoqm8phCUbdJ-SJ50.roa (hash: y1l9jzGOcVZ0GENozcALgbMdp6ZfPx8sRn42vZfb0eg=)
                          6: mOQsXh6W-nguYweUEP-GggtQ8co.roa (hash: BRX6qGv8sEq7HbLRmf+hKda82RdBa8GI6j+263A+qA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:44:73:0e:61:50:a6:da:d1:6e:23:63:76:72:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
        Validity
            Not Before: Aug 23 08:00:15 2025 GMT
            Not After : Aug 24 08:00:15 2025 GMT
        Subject: CN=c265444bc3425260f04bba6583f5bc91710a7ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7e:6a:c9:d5:44:02:90:c3:7f:4f:59:0c:d9:
                    07:15:07:d3:09:ec:12:43:cd:8d:6d:20:b4:86:cf:
                    80:00:a3:36:af:f0:d6:f6:85:13:70:be:3f:48:4f:
                    f8:18:ee:74:b6:3e:8d:18:ac:db:62:61:71:7a:5a:
                    d4:77:27:76:1f:f4:a4:64:23:98:c5:ab:e6:f9:02:
                    a0:b8:03:17:3f:6d:0b:e7:c6:cf:77:dc:61:b5:7a:
                    79:37:0f:b4:55:bb:34:ed:e9:7d:3b:b2:fd:38:c1:
                    9b:76:e7:64:03:bc:ef:1c:b3:a3:20:b7:78:0a:b6:
                    82:0d:e9:13:c4:93:49:78:d4:fe:23:2d:b8:1c:8e:
                    7c:da:f3:4f:2d:ef:c8:29:7e:bd:a5:c6:34:c2:75:
                    02:44:45:d4:35:8b:e6:75:42:e3:e4:6d:25:e7:1c:
                    88:f4:82:93:6c:60:63:78:b8:5a:7b:77:eb:8d:68:
                    17:e8:7d:7b:1e:f9:db:19:9f:60:72:60:ab:e1:e6:
                    8e:e7:e7:c4:2e:9d:c6:26:48:84:82:ca:6d:3f:38:
                    70:00:20:60:09:b9:8f:47:76:35:2c:c6:7e:d9:62:
                    22:07:10:5b:8e:77:e5:a6:22:64:85:15:77:49:36:
                    73:39:f9:7a:dd:ec:85:52:4e:01:1e:0a:9a:d1:be:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:65:44:4B:C3:42:52:60:F0:4B:BA:65:83:F5:BC:91:71:0A:7C:EB
            X509v3 Authority Key Identifier:
                keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fc:3f:d3:1b:f8:56:99:87:64:a6:05:17:b5:7d:ff:2e:bf:
         2f:11:a1:86:4f:92:28:8a:81:2b:4d:ad:45:03:52:94:7b:fa:
         5c:12:7b:cd:13:0a:b3:fb:cf:02:54:be:79:91:e6:16:48:a5:
         29:c4:33:b5:e2:9a:d7:10:38:44:b0:c1:08:19:13:71:8e:44:
         6b:99:22:88:33:2b:62:b8:3a:28:f8:19:a5:0e:dd:08:3f:5a:
         14:fa:fc:bd:68:da:d1:e4:79:45:2e:7b:99:cd:3b:12:72:c5:
         91:8a:ed:1a:6c:a4:7b:da:e3:28:d9:a5:2d:80:00:f6:4f:ec:
         c5:c4:c7:40:fc:ca:b3:dc:74:79:a9:66:d4:e8:1b:1a:17:b3:
         f6:fe:6e:12:2b:c7:86:41:95:6c:da:d9:d1:45:a2:e2:c7:1c:
         ce:58:6f:20:63:8c:75:72:ed:87:66:5c:33:39:fa:fc:bc:7a:
         52:89:b2:2b:8a:e8:74:d9:85:8e:73:a3:b1:5a:7b:28:58:bb:
         a0:23:11:ce:52:18:57:81:41:15:1b:99:23:b5:bf:cc:d3:1b:
         bb:ed:95:c5:64:24:9a:a8:54:64:8e:ab:98:d0:84:69:0c:2d:
         94:1c:3b:09:6d:02:ee:32:f5:69:cf:6e:4e:e2:97:a6:d7:5f:
         43:c5:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:40 2025 by rpki-client