Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File:                     rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier:          Ik01tE1d/MqxOy4A5u/RxN1IKqd6Y7/7zdsOzl1Heas=
Subject key identifier:   E6:97:9E:F4:78:AC:17:F5:E6:6B:36:22:29:90:CA:F7:02:D9:76:C5
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer:       /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial:       019895FFFD222768401BEC4D13745BCDAF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number:          08F6
Signing time:             Sun 10 Aug 2025 22:00:38 +0000
Manifest this update:     Sun 10 Aug 2025 22:00:38 +0000
Manifest next update:     Mon 11 Aug 2025 22:00:38 +0000
Files and hashes:         1: IhFmVxbE3gn_IPAxvOuH1Dxlo9o.roa (hash: oKXrmB0pSBgjznKzRYUFbiw4D9My9SBHtgqoNaUCBKA=)
                          2: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: HJYINC1goNxKmHYzMc/GsRSSXdgZg8zMw4SJ4ScCXsc=)
                          3: wbXeB63VhLi_7WMIhOdMpk0lCW4.roa (hash: d7dOr+7PutspTBpcReyCrf+E8CzcxyNVV7Zc8qzo3dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:ff:fd:22:27:68:40:1b:ec:4d:13:74:5b:cd:af:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
        Validity
            Not Before: Aug 10 22:00:38 2025 GMT
            Not After : Aug 11 22:00:38 2025 GMT
        Subject: CN=e6979ef478ac17f5e66b36222990caf702d976c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:01:bc:1f:7f:25:7e:3f:61:70:02:de:66:
                    16:cf:4a:8f:29:aa:26:b4:c9:c0:78:68:82:31:c6:
                    84:f6:44:4d:43:aa:80:2f:c1:ba:b2:7f:8a:c7:a0:
                    1c:f2:7f:e5:e1:3c:fe:60:d3:5a:3d:21:16:31:4c:
                    2e:12:99:7c:ea:3d:fc:c4:00:52:3a:9d:3c:96:f4:
                    f5:a6:4a:d0:97:c3:f9:a3:21:1f:f1:49:f6:ba:c4:
                    75:93:52:b3:d2:52:49:80:b8:27:af:33:05:51:f3:
                    3d:3b:d6:f1:59:8b:05:0f:c2:69:45:89:19:96:7f:
                    13:92:b2:57:5a:fe:ea:44:43:fe:89:d8:86:32:b0:
                    bc:cb:a9:91:24:e8:e1:14:04:6f:a1:8d:1b:53:3c:
                    c8:f0:4e:df:34:24:c3:70:39:0b:db:87:8b:48:93:
                    c4:81:df:73:78:a6:ce:7c:53:f9:a6:37:7a:17:6c:
                    f2:39:3e:3b:a1:18:e7:b0:10:2d:dd:62:62:4f:ee:
                    3b:9b:0a:ef:e6:4a:7a:55:81:27:93:44:07:19:67:
                    a2:99:38:6f:aa:b7:29:bd:96:74:3b:aa:6f:84:93:
                    73:0b:3c:0d:20:9a:66:8f:41:a2:30:a9:8f:e1:de:
                    c6:8c:07:bd:b0:84:ac:c8:b7:80:bc:7b:65:d2:23:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:9E:F4:78:AC:17:F5:E6:6B:36:22:29:90:CA:F7:02:D9:76:C5
            X509v3 Authority Key Identifier:
                keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:43:85:90:90:d5:12:e3:eb:8c:e0:23:09:9f:58:0b:71:76:
         e8:07:4f:65:b7:14:75:d0:ea:0f:45:de:ae:b7:58:df:82:4c:
         99:08:64:68:25:07:eb:1d:6f:18:2f:35:19:5a:8b:3c:2f:29:
         bb:05:b1:56:9f:4a:a5:d1:ae:7a:75:8f:20:9b:48:46:92:2a:
         a2:a5:f0:d9:85:2b:df:db:39:93:ae:fb:c9:c2:51:d5:46:2c:
         d2:f4:08:29:08:ce:63:fe:40:54:0a:78:49:a2:17:a0:07:5f:
         3b:31:47:af:74:a9:6a:67:6e:8f:e8:43:be:0c:6a:40:a5:b2:
         c0:a2:99:75:8c:df:15:15:d4:64:33:87:c1:9f:c0:2f:10:2c:
         e0:fe:66:37:1e:ba:37:d7:52:34:6b:aa:29:79:bc:c5:d4:e8:
         0b:82:97:b0:ef:e5:f6:31:e7:16:41:5b:39:6d:bc:0b:e7:3a:
         f2:75:8c:90:c6:84:d3:af:0c:12:07:7a:40:c0:d4:a8:a0:6e:
         27:99:4a:e4:48:b9:73:f6:7b:0e:f0:44:56:76:bf:22:26:20:
         1b:88:3b:7e:ea:ec:a4:64:ea:4e:6e:2a:17:84:5c:ed:d9:0e:
         30:81:d4:15:1d:00:61:15:89:23:c2:39:5f:a3:c3:d7:98:8d:
         9f:59:f9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:55:47 2025 by rpki-client