Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File:                     G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier:          AUshNxW/ehi5y8Kr3G4i+y1jY+a2V5MKha61Xbt+iTw=
Subject key identifier:   87:81:F8:AF:DC:9C:8C:C2:AB:49:B9:E5:E7:C6:AF:74:29:4E:61:CB
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer:       /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial:       0198733D6AC5C9086D67CFE4039559D89D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number:          132F
Signing time:             Mon 04 Aug 2025 04:01:01 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:01 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:01 +0000
Files and hashes:         1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
                          2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: 67iTugvboEh9xCKu9hqCpDBhVSBXvpF0b7ra7iEY20E=)
                          3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:6a:c5:c9:08:6d:67:cf:e4:03:95:59:d8:9d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
        Validity
            Not Before: Aug  4 04:01:01 2025 GMT
            Not After : Aug  5 04:01:01 2025 GMT
        Subject: CN=8781f8afdc9c8cc2ab49b9e5e7c6af74294e61cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:99:35:33:53:ef:29:64:a9:3d:f2:b2:09:
                    7c:ab:28:9d:d5:18:10:71:9c:d2:75:c6:a4:5d:50:
                    ab:f3:e8:78:a4:0d:b9:b1:26:35:7d:ef:75:71:65:
                    57:19:36:80:ee:c5:c0:bd:2a:5e:82:5b:07:2c:cd:
                    d6:45:21:9c:3f:17:45:46:04:34:4b:30:59:47:7d:
                    b9:a3:9d:84:18:74:46:79:f7:4e:f7:fe:3c:cd:eb:
                    10:d6:f7:c0:ee:d1:03:eb:44:08:31:33:ab:52:81:
                    fd:29:be:f6:dd:89:57:e7:bd:e3:56:7f:47:89:13:
                    5b:2c:a3:7d:c8:fb:40:bd:20:05:d9:0a:8c:95:6a:
                    10:e7:32:d7:6c:38:a9:bf:fa:d4:39:5e:f6:0c:e3:
                    70:ad:85:c7:e7:50:10:07:28:d1:74:f3:e1:d1:b7:
                    96:25:a8:32:8e:53:f6:2e:9c:9b:ad:38:b5:7e:60:
                    81:db:59:7d:88:fb:56:78:5e:dd:78:77:4b:f7:98:
                    ef:26:0e:5c:9b:1d:2d:a6:0e:83:44:8c:9b:bf:59:
                    1b:94:78:cf:81:9b:62:12:c5:ec:34:28:d6:b5:75:
                    5d:bd:cd:ab:56:ed:e3:96:50:65:a0:e6:bc:21:f2:
                    4d:93:84:0d:14:01:13:0d:94:88:dd:39:be:b6:64:
                    0d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:81:F8:AF:DC:9C:8C:C2:AB:49:B9:E5:E7:C6:AF:74:29:4E:61:CB
            X509v3 Authority Key Identifier:
                keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:4e:0c:54:0e:76:0e:9a:1f:0e:3e:84:13:e5:34:c9:d7:
         be:2b:00:72:19:9e:53:f5:10:ee:c0:cd:5c:8c:dd:c8:62:06:
         cb:56:6c:a2:47:e2:4c:fe:11:8f:e3:0f:6a:86:9c:e0:6b:14:
         45:af:d8:05:c5:bf:52:f8:8d:4a:63:ee:67:ef:10:60:7c:d8:
         db:34:45:76:2b:99:ca:dc:9b:b5:55:e7:b7:01:4c:25:e5:a3:
         a1:97:fd:e7:39:b2:c9:3a:e2:be:45:b9:35:a0:88:9b:fc:7e:
         6c:ec:37:58:97:69:fe:b7:ee:45:6c:10:0f:5b:be:d7:c6:29:
         1a:1b:2a:b1:fe:04:dc:7d:98:58:27:1b:5d:85:db:32:08:bb:
         61:c4:90:63:87:22:0b:9c:7e:c7:84:a3:d6:2c:dc:cc:c5:ad:
         dd:d3:01:af:41:f1:b8:00:01:d0:d3:d7:98:39:48:83:53:04:
         26:1d:01:d0:f9:f3:94:e1:19:2d:32:ff:b6:b2:51:9d:96:f5:
         8b:ec:d4:ee:da:38:aa:72:8e:84:28:c4:0b:56:3b:68:d9:18:
         75:b3:84:96:f9:bc:47:1f:e2:61:38:1e:d6:93:3b:f4:5a:4a:
         76:b4:4a:ed:d6:65:cc:4a:6a:8f:a9:9b:92:9d:50:95:bd:b5:
         02:0e:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:06 2025 by rpki-client