Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File:                     m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier:          LoNcrEi/Yh0IisCRGTecPskAs09ec9FZqMfInM0MAr4=
Subject key identifier:   ED:62:82:83:09:80:E8:A1:02:91:A3:F0:DE:FB:B9:3C:0C:34:76:BE
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer:       /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial:       0198D6CDABEF0A91667ED2E56E1C07197539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number:          088D
Signing time:             Sat 23 Aug 2025 12:00:59 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:59 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:59 +0000
Files and hashes:         1: 00e-JENKJtNxBi-As1sYUq5EX18.roa (hash: YsSrS2JJTX4eWuRZQoJnhVIIQfCJDpSvv/nCINRxU3I=)
                          2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: 4/SqyT6TMFFkujDVundUwgyZXUgcPRBu7uixpmpkfnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:ab:ef:0a:91:66:7e:d2:e5:6e:1c:07:19:75:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
        Validity
            Not Before: Aug 23 12:00:59 2025 GMT
            Not After : Aug 24 12:00:59 2025 GMT
        Subject: CN=ed6282830980e8a10291a3f0defbb93c0c3476be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:1b:6e:68:e8:1c:4d:bf:29:03:2a:b9:8c:
                    00:9f:ff:e9:78:21:35:aa:aa:e5:5d:61:ba:15:95:
                    8e:78:0f:b4:6a:0a:2c:89:59:46:7e:51:fd:38:49:
                    c3:02:bd:25:03:20:9a:02:92:26:55:14:a3:d5:3f:
                    2c:f0:a7:57:7f:4a:e5:60:75:0d:b5:65:2b:c8:2d:
                    cd:8b:6a:ae:08:ce:73:24:8a:f5:1c:d5:cb:40:cd:
                    0e:d0:b9:43:22:7b:60:76:d5:1b:2b:b6:15:30:d3:
                    07:7c:4c:24:79:05:67:5b:ee:3d:82:c7:36:d7:67:
                    29:76:54:9a:21:5a:e8:a1:24:98:b0:88:65:1a:62:
                    5a:55:ff:8b:d0:60:12:24:be:29:64:72:00:4a:2b:
                    9d:bb:9c:8f:84:fa:c0:9d:d4:23:11:a9:2a:5d:66:
                    23:28:7c:3f:da:5d:0b:1a:b2:5e:d9:1e:e0:c7:6c:
                    e4:fa:cf:bd:12:34:7b:60:96:87:d4:d3:26:92:ce:
                    31:e1:1d:d9:96:49:35:88:4d:1c:d4:77:5d:03:35:
                    b2:85:4c:34:9f:43:45:4e:ab:09:86:ce:46:fc:b1:
                    75:65:5c:f9:c9:07:48:d6:eb:5c:f5:fd:4e:ea:28:
                    d3:06:be:7e:0b:6f:6d:58:24:c7:91:99:95:24:46:
                    6c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:62:82:83:09:80:E8:A1:02:91:A3:F0:DE:FB:B9:3C:0C:34:76:BE
            X509v3 Authority Key Identifier:
                keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fc:a5:04:57:2c:59:5b:59:82:f0:ba:dc:23:a1:5e:5d:12:
         44:c9:13:5f:9c:62:8d:b6:c3:8c:b5:be:da:c9:8c:6b:05:93:
         6f:04:ec:a8:13:8b:44:21:4a:7e:3a:c1:84:3d:71:d8:82:4e:
         7c:08:a7:e3:77:06:a4:ab:ba:94:84:4d:1e:9e:63:87:12:16:
         5b:ba:b3:ff:7f:6a:96:11:ca:a5:69:18:57:6d:00:f5:54:b0:
         54:bb:66:75:07:fd:ce:d1:4c:8b:90:62:82:e2:30:73:40:53:
         39:aa:96:e1:8d:6a:93:63:ed:8c:6f:74:12:f1:00:4c:2a:98:
         fc:27:c4:94:8d:23:07:fa:c8:ca:a2:d0:90:35:67:c8:77:4e:
         ba:22:a2:67:99:27:be:4f:bd:78:fb:2f:28:66:1a:59:78:39:
         33:37:7c:50:b9:c1:d7:5c:5f:d0:4b:ae:a9:b2:ea:60:a4:b8:
         f9:4e:df:35:23:a8:3c:d1:a9:6e:71:83:22:b5:a7:9d:17:dc:
         6e:99:7d:14:d4:2f:00:2c:ad:a1:32:79:5e:f9:77:69:d4:65:
         26:12:e0:00:11:2e:ad:5a:31:d9:fe:2d:97:d2:47:5b:36:9e:
         03:cc:e8:8e:46:4b:8f:ba:1b:d1:22:b6:6e:10:74:37:74:06:
         1e:ea:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:43 2025 by rpki-client