Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
File:                     Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json)
Hash identifier:          FANhk0G7awpE7CfrteKU2JHYYiAfUY4NB+eXD74wwd0=
Subject key identifier:   58:50:89:A2:82:F1:E5:D5:18:F8:C4:9A:E2:C3:07:A7:36:29:CA:3A
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Certificate issuer:       /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial:       0198D58343B74360E87739F79F872152EF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
Manifest number:          1045
Signing time:             Sat 23 Aug 2025 06:00:06 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:06 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:06 +0000
Files and hashes:         1: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (hash: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=)
                          2: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: AZqa9LuIvRA/juC8O6uDo5jKoSY27AARQHIrGIYJWVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:43:b7:43:60:e8:77:39:f7:9f:87:21:52:ef:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
        Validity
            Not Before: Aug 23 06:00:06 2025 GMT
            Not After : Aug 24 06:00:06 2025 GMT
        Subject: CN=585089a282f1e5d518f8c49ae2c307a73629ca3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:62:28:47:2b:7c:2e:c9:4d:a6:54:25:d3:
                    d8:c4:b2:7f:40:84:31:4d:4c:aa:24:82:ae:dd:15:
                    1b:3b:e8:af:62:c3:ea:ef:87:52:28:31:09:0a:df:
                    03:25:3e:4b:11:fd:39:f2:8d:97:5d:d1:b3:48:15:
                    45:8c:4e:b5:b8:e2:63:5a:11:7e:39:e6:2f:70:c5:
                    e8:4b:d8:ca:b7:23:ea:e9:d5:5e:d6:78:77:1b:08:
                    aa:e7:03:d6:67:ba:b9:df:11:e9:0f:77:cf:a2:8b:
                    37:20:b6:38:cf:e2:15:c3:18:9b:d1:22:1c:b2:c4:
                    4e:93:67:0a:5e:0c:1f:5c:7a:e0:bd:f2:15:0a:f9:
                    6a:dc:44:5b:2e:ab:9a:41:8b:af:6d:c9:7e:b7:ce:
                    17:ba:43:c7:46:dc:57:19:a2:eb:7b:3b:23:18:9e:
                    03:1a:9a:75:83:72:1a:d3:40:d2:58:de:b5:6a:50:
                    53:b7:37:96:5f:db:82:27:dc:40:6e:98:dc:81:8f:
                    8d:24:cc:6b:16:c1:84:f2:75:58:bf:d4:ba:65:fe:
                    dc:d9:18:2f:e1:45:77:3a:aa:20:89:5c:ba:7d:94:
                    57:9d:73:3c:f8:64:c9:98:07:5f:46:0d:46:0f:1f:
                    a7:a6:e0:19:dd:b9:32:eb:b3:36:18:7f:05:0c:99:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:50:89:A2:82:F1:E5:D5:18:F8:C4:9A:E2:C3:07:A7:36:29:CA:3A
            X509v3 Authority Key Identifier:
                keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f0:7c:20:95:23:58:5f:2d:ac:c5:99:68:c0:01:71:31:7e:
         74:c1:d3:e4:8f:f6:c8:18:95:49:bc:84:f7:b7:df:76:b5:92:
         b4:5d:b5:24:f7:2c:23:02:6a:ea:19:d7:bc:4b:1b:f5:14:f2:
         44:ff:09:9a:a3:ee:26:aa:e3:4e:c8:1f:94:01:88:bb:94:10:
         c9:48:b7:05:af:5d:99:b1:f4:15:70:c5:f6:41:8b:ab:91:07:
         f3:e9:fc:a6:98:5e:d2:16:0d:d0:2f:0a:c6:4f:db:ee:d7:30:
         19:21:46:75:d1:ca:53:66:00:5a:94:65:c4:35:75:fd:bb:2d:
         4c:0b:2a:7c:bb:20:8b:26:4e:ea:52:30:46:1c:2a:cc:8e:3e:
         6e:d9:eb:99:6b:e3:23:e9:55:93:37:9d:15:55:15:d2:27:5f:
         df:b4:9f:14:59:52:c6:c7:c8:c7:fe:10:89:2a:da:c9:60:17:
         f1:1d:12:f0:a9:a4:92:86:84:18:c3:6b:2d:06:3b:ed:b7:9e:
         0a:d5:cd:91:8e:ff:36:8d:63:12:65:64:66:f9:b2:4d:6d:45:
         7e:e0:38:ce:1a:73:01:66:52:6e:83:cb:f4:c2:00:d2:c9:36:
         1b:6a:56:99:00:45:33:2f:03:ce:0e:d2:b9:80:ad:7e:47:7a:
         ff:cd:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:59 2025 by rpki-client