Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File:                     xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier:          dh8bQk8PMhhLX3AON64jw5cyG+gOy1E1w5B1Gy1MQL0=
Subject key identifier:   C1:9E:EC:49:7F:10:1B:53:0D:BE:B0:D8:26:AA:39:28:47:22:43:EA
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer:       /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial:       0198D5F1ADE79E7EF324F88662BB405762BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number:          0C54
Signing time:             Sat 23 Aug 2025 08:00:42 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:42 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:42 +0000
Files and hashes:         1: Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa (hash: Ohs/5SqLV2Md0cGZVcdev41UIaMnOgv11AyrRygjew0=)
                          2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: GHob5yAdmrdrT1OLQjTIIaM0UQiJXsnUtWybpHClXOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:ad:e7:9e:7e:f3:24:f8:86:62:bb:40:57:62:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
        Validity
            Not Before: Aug 23 08:00:42 2025 GMT
            Not After : Aug 24 08:00:42 2025 GMT
        Subject: CN=c19eec497f101b530dbeb0d826aa3928472243ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2e:94:c2:24:2f:45:16:b8:24:9d:6a:df:83:
                    6d:39:23:5e:70:e4:88:d5:30:42:51:82:b6:0a:d8:
                    5c:f7:32:02:74:6b:b8:77:a6:db:6b:27:77:34:e5:
                    37:4a:6f:91:71:da:9f:c6:f3:3f:59:cd:01:f4:b2:
                    3a:c6:d0:f3:23:dc:a0:c5:ab:0a:1d:c7:a0:da:0f:
                    1e:cc:ff:b6:a7:90:e5:b5:ad:6d:95:dd:92:56:c9:
                    ee:f1:93:4d:5e:b8:e2:f8:f3:6f:4e:bd:3e:70:19:
                    d8:35:9f:1d:13:2d:c9:b8:b3:0b:3f:5a:00:a9:ba:
                    c2:2e:c9:dd:e1:3d:af:62:9b:3e:4f:81:dd:7d:a0:
                    bf:cf:e9:fb:cb:2d:a6:8f:e4:b7:64:a7:21:2a:d2:
                    bc:f3:60:a2:78:15:ae:f1:ab:fd:d6:de:fc:c7:05:
                    80:05:72:7e:b9:2f:ec:9b:85:2a:31:a8:85:dd:fa:
                    dd:4f:88:5d:02:cb:71:3d:52:8e:60:ed:e5:0e:49:
                    ef:1a:c2:4a:72:d3:f9:b9:e7:52:1a:54:7b:db:fc:
                    2d:e4:f4:ca:4d:a0:ec:fc:e8:a5:3d:f7:7d:fd:9c:
                    35:98:6b:af:d8:0d:e8:53:72:83:8d:14:53:be:75:
                    72:c9:05:40:8c:72:47:e1:d4:84:02:96:9a:de:1d:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9E:EC:49:7F:10:1B:53:0D:BE:B0:D8:26:AA:39:28:47:22:43:EA
            X509v3 Authority Key Identifier:
                keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ec:13:a6:36:f9:f7:51:e5:ee:ba:e2:c6:f9:07:b0:b7:df:
         6e:61:3c:c3:15:56:0f:4a:57:40:66:88:dd:03:8a:08:74:18:
         ce:20:5b:c2:a2:8f:4a:80:5e:aa:8a:64:4e:7c:9b:8b:0c:1f:
         30:ac:a2:77:20:6d:68:b9:2f:d9:05:85:41:b2:99:40:3a:39:
         f0:ce:6e:4a:36:2d:34:89:7a:f0:90:9a:42:90:2b:c7:02:67:
         be:80:8a:20:4a:fa:55:de:1b:e8:da:d7:ca:55:79:f1:75:ca:
         2e:2f:af:06:87:57:f2:c5:e3:13:bf:42:24:3c:29:84:19:76:
         9c:b6:0b:9c:d8:c4:bc:98:7c:2a:74:75:c2:0e:d0:bc:c8:71:
         f0:8a:00:1a:16:16:39:31:91:19:cd:3e:03:c8:bf:a9:80:5b:
         59:a4:0a:a5:d1:1b:04:96:72:0d:35:90:c9:36:09:31:6d:53:
         8a:58:e6:6c:90:25:46:f1:35:0b:6d:64:9e:3b:fe:6f:c2:1e:
         a0:5b:65:b1:e5:68:78:61:a6:2a:a5:98:e2:b8:be:6b:75:4a:
         16:8d:79:74:d2:21:64:01:08:ea:c3:81:a0:0f:df:fc:80:4f:
         4e:41:a0:3c:e6:7d:d9:a6:40:84:8d:06:6c:2d:62:47:89:74:
         5d:73:69:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:13 2025 by rpki-client