Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
File:                     gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json)
Hash identifier:          oDjWALiDf+kjEpU0p8RdjDZEGv9MYhH+XM3Jne2vBZQ=
Subject key identifier:   17:B3:90:0E:CD:D2:C6:4E:FD:C8:8C:AF:F9:F4:46:C9:62:2D:5A:9A
Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
Certificate issuer:       /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Certificate serial:       0198D8F2E10BDF3E649898ADEE59A8421CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
Manifest number:          68
Signing time:             Sat 23 Aug 2025 22:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 22:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 22:00:52 +0000
Files and hashes:         1: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: H7QG5/iZFrCgUgzl3BlutneCSdcOBu3jzK98oMirjiQ=)
                          2: lEs6g5eluA8OYcvzew0cUO730sU.roa (hash: NpVRDbdHRR1xBWUfgq3Nc+bh893oQNOgoD46/FbiD3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 22:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:f2:e1:0b:df:3e:64:98:98:ad:ee:59:a8:42:1c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
        Validity
            Not Before: Aug 23 22:00:52 2025 GMT
            Not After : Aug 24 22:00:52 2025 GMT
        Subject: CN=17b3900ecdd2c64efdc88caff9f446c9622d5a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:47:08:34:37:80:86:a8:3e:09:17:3d:41:
                    cb:a6:c3:d6:58:f2:12:7a:2e:8c:45:e5:d8:d7:23:
                    4b:6d:a9:87:9d:28:72:e3:7a:72:c3:04:b7:48:64:
                    1b:d7:9d:1f:ca:89:6e:9b:bc:ca:05:20:57:db:c5:
                    6e:ab:48:42:4f:6d:98:e3:ae:90:01:6f:fb:4d:e4:
                    f0:33:f5:5f:0d:15:ba:fd:0a:bc:5a:02:ba:5b:56:
                    d0:91:bc:9c:5a:f7:0a:7f:18:f8:ce:c9:d9:ab:70:
                    7f:e4:19:7f:93:39:c7:22:8c:47:4b:49:50:da:4c:
                    7f:de:a7:ac:4a:f7:11:96:d6:3c:70:55:f4:9f:69:
                    80:f2:e3:9d:64:aa:c2:40:4c:7c:f1:13:c5:e5:fc:
                    6c:6c:5c:73:c8:de:01:7f:d5:88:41:c2:66:06:7b:
                    78:43:12:3e:c8:15:b0:c9:a9:6d:be:fe:35:36:f8:
                    e0:4b:f4:94:4c:49:71:2b:8d:e6:55:c7:a7:42:96:
                    9b:92:a5:08:85:9b:de:b5:45:71:f6:55:b5:52:75:
                    b0:0e:c4:3e:f4:4b:d4:96:8d:91:56:ec:9f:23:0d:
                    a8:43:3e:a6:d0:9c:94:d5:f1:7c:69:85:f1:54:19:
                    11:63:5a:cd:bb:36:d1:e9:7e:fb:6d:98:c3:96:93:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B3:90:0E:CD:D2:C6:4E:FD:C8:8C:AF:F9:F4:46:C9:62:2D:5A:9A
            X509v3 Authority Key Identifier:
                keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:c2:4b:48:e7:e7:38:c7:71:fc:28:45:0a:0e:bf:39:86:
         0f:7b:4d:d8:5b:d8:a2:bf:6d:07:e8:6e:1c:00:e6:03:cc:1b:
         f9:52:ae:48:bb:07:72:d7:69:3f:66:28:ef:b5:2d:98:a7:ae:
         e0:ea:bb:f6:8d:4a:a4:1c:a7:ab:9a:44:de:49:fd:fd:6d:ef:
         30:79:e1:34:ae:10:77:46:25:02:24:93:f4:0a:f6:f7:93:d2:
         2a:c6:de:5e:9e:d3:d2:aa:37:11:15:60:1c:ef:77:b0:3a:23:
         0d:e7:b1:6d:6e:5b:15:10:d5:f9:c6:35:b5:cd:55:1b:ab:83:
         92:bc:7a:4d:65:60:7b:3c:68:80:4d:0f:85:0a:53:6f:4a:7d:
         aa:af:5f:4f:f9:3e:67:f8:e0:b4:9d:53:84:f8:fe:bf:d8:18:
         1d:2d:cc:a2:02:de:5f:2e:44:e1:a0:56:4b:74:ef:a4:31:5b:
         73:d3:d6:a0:80:e1:6e:8b:1d:48:e9:d9:92:d7:e0:d1:f4:87:
         12:f3:ad:1d:41:5a:1e:a0:f5:57:1f:5a:d4:84:2f:f5:45:9b:
         08:63:aa:71:71:9e:fe:14:23:91:90:d2:cc:ba:28:15:b9:42:
         85:33:8f:cf:4f:2d:7e:30:59:78:94:4e:75:50:2e:1c:d8:b4:
         c1:72:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:19:55 2025 by rpki-client