Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File:                     Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier:          Qu2kVMTMA0AUmRr5xgry/fZhymY4XGIT+LPVjy2vpHA=
Subject key identifier:   BD:FD:A6:8E:CF:DB:12:65:21:A4:27:F8:B1:92:F9:C8:C2:93:91:04
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer:       /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial:       0198D706054F6870334C0CC617F6B3A501FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number:          031F
Signing time:             Sat 23 Aug 2025 13:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:32 +0000
Files and hashes:         1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: 10uwuzqVbCj8C9MRtuBVTR2TYrsFYsiXTWN1DQIxx+s=)
                          2: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
                          3: c_sMTj7v_tcLPK4ph9KiN4hyel8.roa (hash: WlGUEszKDgI/p0yTM/WRVaqPEPGJ8QjHZwVMfO6NE9k=)
                          4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:05:4f:68:70:33:4c:0c:c6:17:f6:b3:a5:01:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
        Validity
            Not Before: Aug 23 13:02:32 2025 GMT
            Not After : Aug 24 13:02:32 2025 GMT
        Subject: CN=bdfda68ecfdb126521a427f8b192f9c8c2939104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:4f:96:aa:1c:75:72:01:33:db:ef:85:4f:
                    be:aa:3a:53:2d:28:79:ba:d9:b6:f4:c0:3b:6d:8e:
                    a1:d5:e4:e6:14:f2:a0:e3:2f:7d:d2:37:f7:ff:f7:
                    00:45:75:a4:68:c9:db:39:27:f0:fa:cd:91:0d:e5:
                    01:d3:a6:1a:07:b6:57:3d:fb:c2:6f:81:68:ab:a6:
                    28:e5:fd:8e:48:1d:09:01:8a:25:9d:cd:8d:03:29:
                    ec:ca:02:6f:22:ee:a9:69:4e:82:9a:76:41:73:c0:
                    18:8c:59:ad:81:87:03:6b:bc:76:0e:03:ad:b7:14:
                    c1:df:69:75:93:52:b5:75:0e:f4:5e:39:15:95:da:
                    2e:8f:bd:da:7d:86:ec:4b:23:a4:76:06:37:78:01:
                    df:09:ca:12:28:a5:1a:ba:42:a3:43:10:e5:85:9b:
                    7a:35:55:3a:e8:e3:15:7d:26:37:11:67:81:09:52:
                    8e:0f:3e:ab:6d:cd:de:b4:27:df:6e:01:b7:b1:87:
                    35:bf:74:3c:46:15:2a:af:a0:7a:3b:96:27:4f:c0:
                    8d:1f:b1:24:9b:0f:5d:c6:5b:5c:df:42:82:a3:11:
                    cf:e5:32:e8:a3:57:d0:79:4c:9d:05:59:c8:cc:f1:
                    26:f9:a9:74:f3:d4:42:7c:dd:60:31:f2:4f:9b:53:
                    3d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FD:A6:8E:CF:DB:12:65:21:A4:27:F8:B1:92:F9:C8:C2:93:91:04
            X509v3 Authority Key Identifier:
                keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:fc:a8:8a:73:5c:a4:98:24:ed:22:f8:c3:a0:3e:c8:10:
         59:dd:84:ff:c0:67:d0:70:01:2c:f6:8e:00:e1:3a:a1:eb:f6:
         7e:f1:e7:ab:9d:1e:b3:3b:0b:20:1e:0c:19:cb:16:90:54:36:
         29:be:0e:0d:5f:15:3c:44:e3:cf:d8:f4:9d:54:ee:5f:c5:24:
         9a:74:2b:b4:a4:4d:c0:9b:54:c7:62:6d:e8:62:4c:ff:21:9a:
         c1:fe:fd:ad:58:2e:b0:68:85:ac:9b:c7:4f:e3:cc:96:29:c3:
         f2:22:2c:d7:1a:d9:c1:05:74:fa:aa:57:e5:42:ad:b2:06:1a:
         14:bb:f4:eb:c6:3b:75:6b:4b:e6:a7:74:c6:ee:4b:a0:80:3e:
         0b:df:d2:4e:ea:ec:59:a1:29:d9:e5:35:d7:d1:2b:98:5b:89:
         4a:21:20:6c:b4:ff:92:f4:be:64:e9:64:6e:b9:e7:36:e8:5b:
         a8:f7:bf:ba:92:8f:13:39:4d:4f:35:28:08:55:96:4b:1e:27:
         6c:fa:77:ae:4c:cb:ff:23:df:03:4f:40:82:87:7a:41:d4:0c:
         d9:89:e0:3d:09:ae:ff:d0:83:93:2b:05:c1:14:b6:a9:4e:ec:
         09:c5:58:5f:71:81:13:13:4d:38:be:81:a1:0d:fd:0d:5e:01:
         19:ea:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:50 2025 by rpki-client