Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File:                     datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier:          Of8tt63O8MgNdlOSRj3zmzyWhEEp6m4PW0d44L1mVVw=
Subject key identifier:   B4:45:5E:84:F5:45:44:01:39:43:B1:24:06:54:67:FD:DA:D7:35:E6
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer:       /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial:       019874F4AE63A4AD039822A8233C0BDFD9CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number:          02FB
Signing time:             Mon 04 Aug 2025 12:00:49 +0000
Manifest this update:     Mon 04 Aug 2025 12:00:49 +0000
Manifest next update:     Tue 05 Aug 2025 12:00:49 +0000
Files and hashes:         1: 14NM_hJ73U6vGuk5H4RP54-eZBY.roa (hash: lie+0t/dSukUm9OoNgztT3EnggVtNQOhf9gAShVS0rI=)
                          2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: sRppFLH21aEpY47mdhzWCt2wA+TLVYEcVd4xrq1jO5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f4:ae:63:a4:ad:03:98:22:a8:23:3c:0b:df:d9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
        Validity
            Not Before: Aug  4 12:00:49 2025 GMT
            Not After : Aug  5 12:00:49 2025 GMT
        Subject: CN=b4455e84f54544013943b124065467fddad735e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:2c:b0:80:4d:2d:52:91:66:11:c1:3a:2f:
                    92:56:01:31:16:48:3d:3e:2f:4d:00:1d:a6:52:af:
                    d4:10:df:0f:2f:e2:ad:d2:e8:7d:69:bb:07:dd:de:
                    8e:05:ac:e4:ac:07:54:1a:12:ad:fe:75:9c:a7:d0:
                    c0:85:ed:0a:32:21:94:91:b2:27:e7:33:d3:a8:f1:
                    8a:45:64:33:c7:c2:15:ac:d3:59:d8:10:95:d5:0b:
                    8a:7e:91:15:bc:89:47:e2:29:a2:41:cb:92:64:4c:
                    61:64:68:89:54:d5:e7:9a:f1:f4:0c:70:49:2c:1c:
                    5c:38:24:58:ed:a3:51:ce:8b:c8:3a:c0:88:8b:5f:
                    0f:38:ad:52:a7:e6:c3:28:bb:cf:64:63:9a:ba:ec:
                    4e:5f:fb:93:8b:1b:92:f0:75:a0:db:3c:8c:ba:a8:
                    be:8e:92:72:1b:ca:84:84:82:0a:05:88:16:00:c9:
                    74:41:64:62:ea:34:82:4d:88:88:b1:87:8e:e8:66:
                    ef:cd:78:46:8a:ef:9d:b4:e4:f3:a2:75:03:e1:59:
                    73:d8:9d:9e:dc:77:39:50:a7:ca:86:d7:b4:57:86:
                    bd:5c:59:62:46:d2:7c:12:d7:0d:7f:47:4d:9a:39:
                    6c:51:50:ce:0b:c2:60:60:22:9e:a0:8a:5b:8c:72:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:45:5E:84:F5:45:44:01:39:43:B1:24:06:54:67:FD:DA:D7:35:E6
            X509v3 Authority Key Identifier:
                keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9e:f8:cd:ce:41:48:ea:f7:21:14:2b:2f:06:80:17:2f:bf:
         10:a7:ef:26:47:82:e6:0e:cc:04:e3:1e:d2:59:9f:b7:8d:ef:
         22:42:71:4b:92:53:09:29:11:37:58:79:4d:db:ec:17:fa:ff:
         61:9e:f8:d3:44:cc:70:4c:19:43:90:c2:c7:59:19:60:1d:21:
         e2:fa:a1:95:1a:d0:ac:6f:08:0c:e4:76:21:6b:43:d0:b0:25:
         63:9a:83:40:e3:83:94:3b:2e:17:f8:41:53:31:ad:76:fe:fb:
         54:b6:84:2e:ea:b7:0e:b2:57:bf:6e:45:38:9f:a1:ab:c5:60:
         e0:be:bf:87:b4:f6:bf:10:be:a0:8a:23:dc:8a:bf:19:1e:d1:
         7d:76:22:a3:23:97:c5:cb:f2:93:b1:72:03:b9:9b:44:3c:a4:
         40:b7:53:f4:77:99:15:a8:7c:f8:d4:36:cc:e0:85:23:85:d2:
         ba:3b:44:ab:68:53:fd:a4:01:76:d5:62:be:67:2d:3b:e9:64:
         3e:f3:5e:54:8c:0f:5c:f2:49:7c:c4:32:9c:ce:b7:b8:1e:3e:
         08:e3:d9:63:ce:44:7e:18:c3:29:28:66:0f:c5:9f:13:64:f5:
         3e:c4:30:34:51:22:78:18:89:b6:ab:97:9d:e1:31:a3:9f:3d:
         fd:2b:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:27:05 2025 by rpki-client