Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File:                     rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier:          ZYYG266fjYQWpQbRy1C2wNkND+nurTXEomyRJRcloNs=
Subject key identifier:   F8:D0:EF:DC:2B:FF:B4:8D:8B:41:88:F4:EE:A2:90:AB:21:E2:D3:83
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer:       /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial:       0198D5837E873183C9FF2C9393D9EE7B7D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number:          01A0
Signing time:             Sat 23 Aug 2025 06:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:21 +0000
Files and hashes:         1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
                          2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
                          3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: IFnxSsZg+ijqOwF/c8a6dopeEITIQ0cV4sPdsJCQ5rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:7e:87:31:83:c9:ff:2c:93:93:d9:ee:7b:7d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
        Validity
            Not Before: Aug 23 06:00:21 2025 GMT
            Not After : Aug 24 06:00:21 2025 GMT
        Subject: CN=f8d0efdc2bffb48d8b4188f4eea290ab21e2d383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:3f:47:79:dc:13:77:ef:df:38:67:3d:d1:
                    fd:ff:a2:f1:76:82:2e:a9:97:ee:75:53:40:87:ef:
                    47:04:d1:2a:cc:69:ff:a9:d6:59:e8:1a:41:c9:6e:
                    01:05:da:cc:88:26:4b:78:b7:53:e4:be:55:fd:ff:
                    ae:b4:4c:37:2a:be:6c:8a:83:e9:4d:8a:57:89:50:
                    af:52:d4:ba:60:86:c2:d1:ed:b8:67:83:a8:d6:2b:
                    dd:79:b0:19:a9:4c:0b:bf:fa:41:8a:60:f2:fa:2f:
                    07:20:d0:ef:a9:26:30:a7:95:c1:cb:db:8e:96:50:
                    c8:2a:78:91:f9:36:e0:b0:8b:0b:cf:75:1e:a9:f4:
                    f5:bd:6c:b0:e8:dc:e6:b6:1c:ba:17:78:c9:ee:1b:
                    7d:4e:fd:9d:76:f6:08:68:e6:15:47:42:dc:8a:f8:
                    60:f8:e6:69:9c:9a:9c:19:b6:72:45:42:92:ed:41:
                    27:20:9d:7a:c7:0b:7d:50:2b:1d:1c:85:d8:00:4c:
                    5a:70:8d:e9:ea:e2:64:e1:f3:06:a8:ce:61:18:50:
                    82:23:e8:cb:da:aa:de:79:19:fe:83:92:a1:bd:7a:
                    ee:cc:bd:b3:bb:bc:e6:9c:d4:4c:d9:cc:ac:38:3e:
                    f8:66:a0:5f:65:7a:f5:3e:52:38:44:c8:33:4c:ac:
                    e4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D0:EF:DC:2B:FF:B4:8D:8B:41:88:F4:EE:A2:90:AB:21:E2:D3:83
            X509v3 Authority Key Identifier:
                keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d1:b0:15:75:ff:5e:54:dd:19:77:a6:04:8d:c9:8a:bb:00:
         78:35:e4:fd:99:52:24:71:1c:80:df:32:b4:8d:bb:06:1b:fa:
         54:d1:8a:dd:23:75:2a:95:3a:c5:bb:3b:fc:2f:de:79:cd:af:
         17:de:d0:78:fb:15:a4:03:ab:9d:90:28:42:95:e1:13:1c:87:
         f0:16:75:df:90:b0:86:bb:90:f4:ad:2b:f9:d7:16:ab:4f:cf:
         37:ff:6e:9c:0e:20:42:e5:07:7a:80:51:44:be:e8:06:17:10:
         6b:15:b3:e0:c3:60:b2:e4:d7:78:40:aa:6c:fb:0a:b6:ec:91:
         a7:b7:c1:4d:8d:c9:a5:77:ce:6b:f5:9d:32:dc:23:df:d1:3e:
         31:f2:1f:0c:4b:44:6d:f1:42:7f:95:f1:dd:b9:9a:aa:89:8b:
         1d:12:0e:2e:f4:ae:e7:d9:1b:0c:bf:b9:1c:2b:16:ef:63:5d:
         f6:d3:83:3d:3e:07:f0:c7:78:5e:61:2b:89:b9:2b:e5:26:17:
         37:f7:6c:0e:6a:9b:09:24:ed:2f:3a:ea:17:f0:69:2b:94:cf:
         8d:43:ec:5a:79:e9:fc:e3:b0:c8:a5:81:33:84:07:01:4c:f2:
         bb:8d:cc:34:cd:eb:50:4b:a1:ad:eb:67:0c:2c:2c:da:1c:4f:
         d2:fe:c9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:08 2025 by rpki-client