Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          bjksD7ZwF1rKtRQI9bymnD5WXBewCDpd0lOtdyCDdGo=
Subject key identifier:   9A:0D:E5:2C:95:E6:CB:79:8B:7B:5B:CB:F6:BB:73:F8:A5:30:B8:48
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       01989035762784FEDF16623D1A0EC4BF3C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          0D75
Signing time:             Sat 09 Aug 2025 19:01:19 +0000
Manifest this update:     Sat 09 Aug 2025 19:01:19 +0000
Manifest next update:     Sun 10 Aug 2025 19:01:19 +0000
Files and hashes:         1: 1Di0Xz_MpkFSCrXwieDlABcYUOY.roa (hash: e9+8w6PzwdqZ5DMc28fcl3/6JCrUHirDY/ShA9oFLww=)
                          2: Fb4Aih2t-3x0svMSkoJF-OT975k.roa (hash: 4CpcD3G4jnvkJ9iB2UM4J3ZMTh++G55QBNDvUCamA1Y=)
                          3: NXwDVZABd3p4a0yMyLVaEUu993w.roa (hash: lhUXJxfjstspXt3/27XnZ9HzN1ZpRrwcEX2KjNAybVU=)
                          4: _zmyvqhTt2oFbDnddAPtCQEEyok.roa (hash: DAvzMAds1rhf279ET0ww79hQJtAHmid5htmCA8lZZdI=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: Bv3YzaryHIb7Dw0amPCtlQDHML0LoeW1jlapcJ4PLTI=)
                          6: m4nA49Lv7EMjkCcxgMafzldImD4.roa (hash: evH9NZtYuDtPls9Lqu7Vupfo95DdUFuCaTKXVG/rgrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:35:76:27:84:fe:df:16:62:3d:1a:0e:c4:bf:3c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Aug  9 19:01:19 2025 GMT
            Not After : Aug 10 19:01:19 2025 GMT
        Subject: CN=9a0de52c95e6cb798b7b5bcbf6bb73f8a530b848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:53:3f:60:fa:54:54:4d:4a:ef:ba:c7:bd:
                    3d:e9:db:ca:62:1d:c1:60:69:ae:44:1f:29:ad:ab:
                    c1:e6:1d:41:7e:50:29:f6:90:f4:1a:d2:69:c2:25:
                    b0:0a:67:c8:e1:4d:c0:eb:6d:20:49:a4:62:fd:14:
                    3a:ff:5c:f9:50:82:e1:b9:81:e5:f8:ec:fe:ec:fc:
                    85:09:ea:7e:9b:57:39:20:b6:52:df:27:f5:f6:4e:
                    df:eb:27:3b:19:de:d8:ac:52:30:c1:d7:c4:60:49:
                    64:35:d8:b6:4d:b2:a6:ef:61:d8:7b:7e:00:af:6b:
                    34:97:b2:21:f9:75:3a:d0:ee:32:85:61:c0:c9:2a:
                    0b:76:c1:37:ee:54:1d:c6:e2:bf:ff:87:0d:64:f6:
                    c9:96:97:a7:65:b6:47:69:00:ed:c6:cd:2b:94:fc:
                    22:7f:1c:eb:aa:65:13:42:fe:ac:02:ca:e9:3d:84:
                    52:e5:d1:d2:a8:c1:40:25:fc:f0:ec:ba:66:d6:be:
                    df:fc:98:32:ca:84:78:47:79:73:8e:df:fd:4d:b0:
                    06:9a:5a:33:53:37:af:53:30:5f:ea:62:8a:85:62:
                    a8:c9:d8:fb:5b:ba:7b:ff:c3:99:e5:f4:72:35:f8:
                    38:37:d9:1b:51:2b:14:a3:f8:c3:21:07:59:4f:c5:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0D:E5:2C:95:E6:CB:79:8B:7B:5B:CB:F6:BB:73:F8:A5:30:B8:48
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a7:0c:91:07:bc:50:2c:8b:4a:b1:70:f2:db:f5:c8:58:05:
         f8:3c:2a:53:a9:e3:b5:27:37:e2:40:94:53:cc:0e:de:1d:89:
         52:60:d2:95:5d:37:2f:69:01:a4:5f:55:d2:9c:0b:98:b8:af:
         3b:7f:b1:e8:21:56:74:c7:f8:cf:55:59:8b:d6:97:3c:be:57:
         25:65:e3:b4:5d:c6:0c:dd:6c:27:6c:12:7d:6a:36:0d:84:4b:
         79:8a:c3:af:7a:e6:3a:32:9a:23:e0:64:68:19:99:ad:de:9a:
         c0:16:b5:40:82:2a:90:f7:4e:cb:2b:d8:ca:c3:77:ae:c1:aa:
         dd:bb:cf:fb:e6:dd:1a:c8:6f:dc:33:4e:9e:81:f3:3f:12:95:
         bd:51:1f:19:7f:18:df:ee:8a:cd:ba:d7:d5:64:3d:28:50:83:
         67:f0:0b:36:3f:1f:d7:8b:7c:8f:83:d1:72:3c:c9:2e:7f:d8:
         ba:93:89:c2:ef:da:c9:fd:34:3f:30:be:14:c8:20:f0:eb:1a:
         bf:df:a7:e6:14:06:c6:d6:b8:0e:72:85:74:b9:8e:b7:34:32:
         48:6f:a3:1f:3a:42:b4:f4:11:f5:a1:e2:51:b3:fb:fe:f1:8f:
         8b:21:36:42:fd:bc:7f:f5:e3:e1:22:b9:19:88:b4:c5:36:b6:
         45:ea:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:47 2025 by rpki-client