Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File:                     rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier:          7eJAHqD8/xR53wiOk/nUwmKtxm06U1dRgJBNWGbEuTA=
Subject key identifier:   AC:9E:63:37:B9:B9:AF:59:1B:19:D1:CC:1E:5E:5F:F7:0F:22:AB:BA
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer:       /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial:       01988BB3A0514ACE9BACCC7CBBC915196664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number:          E8
Signing time:             Fri 08 Aug 2025 22:01:01 +0000
Manifest this update:     Fri 08 Aug 2025 22:01:01 +0000
Manifest next update:     Sat 09 Aug 2025 22:01:01 +0000
Files and hashes:         1: JwcsFNQrZCdoPIC0dUAZcHysppo.roa (hash: FF/t/K7QA2jOU+o41VoGD+jy9dDqvhlPL/hHJRA3zzM=)
                          2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: 6gAniVb0tDVYnYusPbH6WEL4ZNt1Paq2fVOLW+JH5A4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:a0:51:4a:ce:9b:ac:cc:7c:bb:c9:15:19:66:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
        Validity
            Not Before: Aug  8 22:01:01 2025 GMT
            Not After : Aug  9 22:01:01 2025 GMT
        Subject: CN=ac9e6337b9b9af591b19d1cc1e5e5ff70f22abba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:95:54:16:99:e2:8a:e1:ba:57:07:5b:61:
                    ab:ee:fb:fd:9c:ba:dc:33:e4:c6:7f:52:3f:c5:9f:
                    1b:8d:11:52:dd:51:fc:74:57:26:0a:a3:1c:5a:34:
                    6e:43:51:a4:c0:8b:75:8a:d9:5b:b9:2e:81:1d:94:
                    ff:94:a9:c0:cc:0d:5c:19:1b:7b:7f:01:59:d9:9f:
                    e1:9c:58:e2:9b:e8:30:ef:13:a0:b5:0d:b0:9b:3e:
                    54:da:f1:74:fc:44:c1:d3:c0:3f:3b:d2:9b:16:c2:
                    4b:61:cb:01:9c:38:79:e7:1d:05:27:cf:3f:a1:2b:
                    90:cb:65:2e:a0:3a:c2:3f:aa:4f:e9:6a:94:93:9b:
                    8e:7a:c1:f6:97:43:04:0b:77:e0:8f:d6:3e:ef:e1:
                    4e:43:59:26:c1:b7:11:eb:5b:a9:d9:0e:26:76:7f:
                    70:b4:78:d8:b8:f8:52:e2:a3:32:cf:22:6a:2d:f0:
                    f2:4a:47:e8:fd:fc:95:25:19:98:84:fe:f4:ed:7f:
                    ee:13:25:c2:a3:7f:8b:b7:19:8d:0e:8f:14:44:18:
                    e6:36:db:97:e9:71:c4:77:1d:04:73:5d:8d:94:55:
                    5a:c1:61:36:66:02:61:08:ff:67:7d:88:89:91:1b:
                    17:a3:2a:82:19:85:75:bb:63:ae:fa:32:24:12:9c:
                    46:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9E:63:37:B9:B9:AF:59:1B:19:D1:CC:1E:5E:5F:F7:0F:22:AB:BA
            X509v3 Authority Key Identifier:
                keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:bc:bf:9c:cf:a8:5c:98:c2:e9:c7:2d:54:ed:04:2f:46:2b:
         6b:e7:4c:e5:05:ca:6d:8b:0c:7d:9d:78:d7:42:43:d9:22:da:
         55:c4:30:27:63:37:99:ac:c4:b2:c6:1b:d6:8e:a4:81:c7:35:
         c2:7d:1c:f9:42:66:82:21:3c:09:6e:6e:67:d5:fd:20:5a:07:
         ff:d7:7f:cb:c9:4a:cf:af:47:33:3d:a2:4a:45:54:de:36:fb:
         ba:03:cc:a2:b7:7e:ce:97:99:f5:9a:2f:09:ff:2e:2f:38:c0:
         b1:2b:d7:6f:7f:19:75:02:51:52:a0:c7:0c:da:69:bd:c7:5b:
         f3:e5:76:43:73:56:4d:73:aa:b4:3a:6b:d1:80:f0:33:57:a7:
         c2:f2:1d:32:b8:83:de:0b:ef:fb:32:a9:02:15:8f:19:13:fd:
         44:14:b3:a2:e5:cd:58:b7:58:e8:c9:66:a2:70:a7:6a:5b:66:
         79:58:a1:9d:ac:8f:cd:bb:a3:57:8e:35:27:6b:a4:b8:ec:30:
         41:07:a2:c7:80:40:01:b2:45:f4:0a:48:25:27:45:5f:7d:27:
         d2:27:59:c5:d3:9a:e4:f8:f6:1c:9f:5f:42:1a:48:13:b3:f2:
         e4:b1:0a:2c:de:a7:a2:8b:03:1e:71:a3:c3:48:29:e0:c8:19:
         6d:d0:3d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:22 2025 by rpki-client