Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
File:                     aNogbIPVBeJUs-88dlD5-5NFNDU.mft (raw, json)
Hash identifier:          zyTCu/wpyd7R+u9zt7Ks6fi5q+MxyOsfD01RReaP1sc=
Subject key identifier:   18:F1:AB:30:CE:8C:82:2C:61:C3:97:D2:D2:38:B5:F4:F8:4D:F8:05
Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
Certificate issuer:       /CN=68da206c83d505e254b3ef3c7650f9fb93453435
Certificate serial:       019881D48DD437877F5076CE48801CE7865E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
Manifest number:          090D
Signing time:             Thu 07 Aug 2025 00:00:47 +0000
Manifest this update:     Thu 07 Aug 2025 00:00:47 +0000
Manifest next update:     Fri 08 Aug 2025 00:00:47 +0000
Files and hashes:         1: 9yjOyCjaNQvZmslgCNfY4UdjDvM.roa (hash: BLcuMbjq4mGuK5Vn41A+M+OAou14cd2H96ukojI5mmM=)
                          2: aNogbIPVBeJUs-88dlD5-5NFNDU.crl (hash: C1fDIN3bzkiO0kk5j+iiKsQuAoUYN3XpWrIkwm/j+fA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d4:8d:d4:37:87:7f:50:76:ce:48:80:1c:e7:86:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435
        Validity
            Not Before: Aug  7 00:00:47 2025 GMT
            Not After : Aug  8 00:00:47 2025 GMT
        Subject: CN=18f1ab30ce8c822c61c397d2d238b5f4f84df805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:e2:51:1b:c1:45:3e:bc:00:17:3c:ba:f6:
                    06:c8:15:0e:46:06:fa:d2:c1:a4:c4:26:65:f3:f5:
                    cf:99:9b:8f:4f:0e:2b:0c:83:11:09:91:2e:c7:ea:
                    0e:f1:c4:57:57:71:3d:84:1f:c8:6f:b9:04:fa:1b:
                    af:d5:e9:45:02:b4:e1:01:d8:cd:11:41:82:05:e6:
                    40:30:95:08:48:59:30:01:7e:f6:b5:62:7a:98:bf:
                    08:8f:10:15:59:3e:22:3c:ff:fc:ec:3c:eb:e8:86:
                    b8:28:c7:b5:e0:40:5c:24:4f:3d:be:d3:8e:0e:70:
                    b3:e9:38:29:5b:b4:9d:93:3e:70:fa:db:36:61:6d:
                    0f:d7:8f:0a:ad:19:e2:70:7a:25:6d:c0:3c:c1:13:
                    1f:f1:75:56:ce:19:0b:7b:05:b8:13:84:dd:9e:9d:
                    ee:41:66:b0:69:b4:4d:02:ed:4d:d7:96:9f:e5:c8:
                    2f:6b:e2:50:db:85:43:b5:9e:ff:e9:50:7a:37:1f:
                    be:4a:8a:32:92:6c:13:45:57:d2:44:b9:85:62:e0:
                    6d:66:69:60:6e:d2:a5:47:c1:20:ab:c0:de:7b:a8:
                    00:9d:81:11:94:f3:b1:84:ef:fc:95:dd:2a:0e:96:
                    0a:3f:a0:e9:f5:56:9c:23:de:55:30:7f:77:4c:4b:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F1:AB:30:CE:8C:82:2C:61:C3:97:D2:D2:38:B5:F4:F8:4D:F8:05
            X509v3 Authority Key Identifier:
                keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:14:1d:f2:a6:3c:53:bb:07:6f:c5:6d:a9:10:1c:07:9c:38:
         b0:9b:d1:a7:fe:a2:84:d2:4f:5e:45:1d:72:1c:a6:b6:80:ee:
         32:53:f9:f4:e8:01:5f:06:18:1e:0b:8f:52:96:ad:38:ec:a2:
         77:2b:c1:56:9f:92:6e:5b:a0:1a:f4:4e:bc:f2:2b:d1:e5:6c:
         55:7c:26:75:b4:c3:5b:5e:3c:9d:1c:61:af:0e:8d:e5:ed:6c:
         c2:13:bd:83:cc:2d:a7:f7:a7:96:7b:b1:22:56:9e:38:f2:0d:
         ab:35:2c:8e:c2:53:dc:3a:d2:64:dd:68:fe:a4:73:de:09:ef:
         42:f2:8b:e1:ae:8a:0c:98:01:99:d7:25:8f:8f:e2:af:5a:5b:
         cb:a3:6a:fb:50:cf:bc:97:df:9a:dd:a5:b5:ff:46:5c:e8:97:
         f6:d9:a3:9b:f0:35:fa:59:10:b8:d1:51:66:c2:66:4f:bb:f4:
         2c:e8:58:fa:3f:1c:3a:3b:12:0b:9a:6c:f0:bc:e1:50:98:00:
         f8:3a:d7:ca:b3:4a:f2:0b:c2:1c:b2:8a:f7:01:f0:a1:f9:5b:
         2d:b9:87:37:5e:b4:63:c9:4e:8e:e6:0a:18:9b:99:7b:27:cc:
         1f:97:44:a2:55:a3:52:13:9d:e7:92:38:97:a6:21:a9:8a:19:
         76:a3:bc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:37:32 2025 by rpki-client