Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
File:                     F1EkoXuHIV95IFzRSG9hg5z55vg.mft (raw, json)
Hash identifier:          NsGKkD6sGHVk4D9vYn/nwGObUnwDpTHT3LwRofE2osQ=
Subject key identifier:   C8:3F:9A:6D:79:67:64:99:ED:99:23:07:AF:5E:EF:2F:8E:0C:71:9B
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Certificate issuer:       /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial:       01989335AD8989DC39103662687EDA4AE92A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
Manifest number:          1234
Signing time:             Sun 10 Aug 2025 09:00:25 +0000
Manifest this update:     Sun 10 Aug 2025 09:00:25 +0000
Manifest next update:     Mon 11 Aug 2025 09:00:25 +0000
Files and hashes:         1: DMobrwEvAlt4_akaIi-0Lc6dPts.roa (hash: eRMFGBbat7fpcfp5RVndmvhD7W3VWXwnUQLezxfywoU=)
                          2: F1EkoXuHIV95IFzRSG9hg5z55vg.crl (hash: 2G6U9ZXvjpO+Qe9eacGQZQ2a3sLY8BzuXxgDvW+G5hI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 09:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:35:ad:89:89:dc:39:10:36:62:68:7e:da:4a:e9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
        Validity
            Not Before: Aug 10 09:00:25 2025 GMT
            Not After : Aug 11 09:00:25 2025 GMT
        Subject: CN=c83f9a6d79676499ed992307af5eef2f8e0c719b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:8a:8a:a1:6a:3d:a4:c3:58:75:b0:d6:33:
                    3f:0b:df:b3:35:73:9b:69:09:10:9f:c5:52:ec:22:
                    ab:d4:ad:f7:a7:45:98:56:a6:88:a4:bb:52:29:b7:
                    6e:07:76:05:37:da:b7:62:77:47:c9:12:71:fc:37:
                    55:73:38:69:f5:40:fc:9f:08:81:35:c9:f0:49:da:
                    a4:c0:de:6b:04:d6:19:df:3c:27:50:57:b4:bb:35:
                    57:99:19:70:ea:ef:73:67:32:d3:47:f1:b9:cd:37:
                    cf:eb:4f:6d:66:07:99:66:4d:f7:89:aa:11:65:5a:
                    b1:6c:61:84:97:ae:b8:a6:d0:b4:fe:40:94:57:db:
                    f5:45:5e:ef:c7:74:a9:31:fa:90:95:2d:09:09:bc:
                    27:6d:3c:cb:ee:67:95:34:35:87:72:df:74:10:09:
                    30:40:dc:14:b6:58:79:eb:63:97:e7:d6:ea:f4:6a:
                    2e:dc:6b:6c:a9:09:7d:ad:73:1b:60:ef:27:ac:ed:
                    8b:97:d8:98:10:75:b4:bb:16:30:5e:de:26:1b:91:
                    31:53:3a:f5:c7:82:10:00:bb:35:cf:6a:54:7d:8a:
                    87:46:01:6c:b2:89:07:03:7a:9e:c1:91:6d:f9:ac:
                    9d:1c:55:6b:cd:c5:5f:b7:3e:51:df:90:6a:f8:68:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3F:9A:6D:79:67:64:99:ED:99:23:07:AF:5E:EF:2F:8E:0C:71:9B
            X509v3 Authority Key Identifier:
                keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7b:2e:fa:ff:a1:e6:3e:6a:9e:97:ab:b5:fc:b3:8c:f2:da:
         97:6b:51:17:c2:fa:50:78:27:6f:09:f1:6e:d6:cf:f9:ee:79:
         b5:78:51:27:e7:ef:71:12:a1:ea:38:2b:7f:82:be:07:04:21:
         5a:47:de:72:85:ba:ee:7b:b0:c8:ab:97:56:d6:50:cd:bd:48:
         1b:1d:36:04:04:0a:1a:86:5f:f8:5a:ae:6d:cd:37:b3:73:fb:
         59:1d:b5:7f:b8:47:a3:9a:c8:53:ea:de:1b:e5:7e:9e:95:04:
         18:c4:eb:9f:a6:9b:19:b1:58:c0:ea:6e:76:6e:a2:1c:14:6b:
         2d:26:91:cb:10:3e:15:37:77:81:5e:db:5b:84:5f:99:f6:e5:
         88:54:82:aa:81:00:4a:ef:36:48:ae:34:99:2b:e5:77:8c:c9:
         65:5c:12:a1:cb:75:19:d2:3a:e1:62:45:9b:58:ed:b6:93:97:
         bd:b1:70:95:28:38:eb:94:4d:97:63:9f:2a:7b:24:48:bf:8c:
         ae:f6:4f:e0:a1:9f:d1:dd:d1:ff:c6:cb:46:d5:e3:58:f9:e4:
         07:37:a3:1c:69:b4:c1:56:d5:19:30:69:41:85:2a:2e:f8:93:
         7f:e5:75:e2:88:8d:a0:6b:34:f0:f5:fd:38:f5:0b:46:a5:f3:
         98:98:db:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:50 2025 by rpki-client