Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File:                     iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier:          FB2a1uiN7Ei0kfnJ03pcwLYG/RM3CY5suDfJfjqjPXA=
Subject key identifier:   A7:12:D1:D2:BE:A8:9E:1C:F9:42:76:AE:21:ED:05:1B:74:A3:3A:74
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer:       /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial:       0198D6CCE49A9B58F437CF2DC6EC440E8467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number:          05B8
Signing time:             Sat 23 Aug 2025 12:00:08 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:08 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:08 +0000
Files and hashes:         1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=)
                          2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: dg4awDd+NPwNUdlbEWe006dVEz9CUf7olVbaGN1QsSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:e4:9a:9b:58:f4:37:cf:2d:c6:ec:44:0e:84:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
        Validity
            Not Before: Aug 23 12:00:08 2025 GMT
            Not After : Aug 24 12:00:08 2025 GMT
        Subject: CN=a712d1d2bea89e1cf94276ae21ed051b74a33a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:e9:da:d1:d9:92:4f:06:1a:55:4c:bf:4a:
                    3f:54:12:4b:dd:d1:3a:19:61:bb:d6:e2:84:d2:6b:
                    7b:46:ff:56:be:0d:b6:a1:32:65:3d:5e:b1:cf:17:
                    c7:10:bb:41:55:f1:8c:67:64:05:f0:35:b4:24:12:
                    49:fd:c0:1d:6c:f7:0b:8a:8b:3e:50:b3:70:ee:ec:
                    b5:06:38:de:18:d8:09:39:e4:b4:36:0b:ae:18:ce:
                    43:34:96:36:7b:e6:84:27:68:ad:85:2f:e0:18:10:
                    89:d8:b6:9a:f6:48:af:33:67:da:3c:66:e9:c4:f7:
                    28:4d:b5:31:90:a7:0b:c1:d0:e7:ca:32:84:9c:52:
                    3f:ef:8d:57:d2:ed:15:8b:f8:4e:bf:e4:f7:34:ab:
                    46:ac:97:38:f8:fb:6d:7e:98:52:c3:01:5e:df:90:
                    60:b1:9e:2d:de:72:19:ee:d1:67:72:11:a1:92:1c:
                    f3:d0:aa:f2:bc:a9:e9:df:af:64:e3:51:c0:a4:b5:
                    13:2d:5a:7b:ef:8a:d4:f9:4c:28:6b:18:66:21:22:
                    82:b1:f5:9d:cb:2b:d2:62:31:72:34:1b:c5:39:d5:
                    f1:4d:dc:fa:34:9a:ad:50:3d:e4:57:e4:31:09:33:
                    e8:5a:8f:13:70:72:02:80:fb:2a:50:ba:dc:23:8f:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:12:D1:D2:BE:A8:9E:1C:F9:42:76:AE:21:ED:05:1B:74:A3:3A:74
            X509v3 Authority Key Identifier:
                keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4f:60:14:60:88:3e:5c:25:f0:3c:d3:e2:7a:04:6d:38:1e:
         f5:3c:e4:9b:6a:dc:f3:24:9c:6e:67:18:28:da:b8:38:a3:13:
         31:71:97:d0:1e:ef:8e:16:f7:53:9b:31:bd:1f:7c:43:06:f1:
         13:99:b4:29:b3:3f:da:59:51:f4:fd:6f:03:74:0f:11:2f:3c:
         46:f9:90:21:81:a4:4f:35:2c:66:6d:bd:13:2b:cd:f0:fe:1b:
         2e:d8:2a:32:3f:9a:83:47:be:84:e1:63:8a:7b:ae:5f:76:ca:
         4a:36:0e:4b:fd:d4:9c:d0:97:b5:69:57:98:d8:96:9d:8a:13:
         68:e2:53:f9:b6:c8:79:54:9a:e5:af:cf:eb:01:1a:c9:4b:a1:
         65:41:ec:41:89:dc:75:13:4c:8a:fd:2d:cf:20:99:58:9f:08:
         8c:3e:62:6a:ea:ff:9a:86:37:61:33:c9:52:56:c2:5c:00:b4:
         6b:92:08:46:2d:cb:dd:74:23:6f:cf:84:ab:b3:b6:8b:1b:24:
         c5:6b:67:56:bc:70:e1:c8:71:dc:b8:66:ec:7c:9e:d1:1d:bd:
         5d:10:3e:b3:a8:0e:88:07:97:b5:0e:b1:c3:e1:df:4c:1a:87:
         e5:51:9c:d2:d8:55:84:42:39:ce:5e:7b:b7:86:dc:21:e4:8f:
         d3:e1:5c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:55:57 2025 by rpki-client