Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File:                     gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier:          GGPP4kQ9TFwwBRg46ga7kRTtC+cDR2vm+lcBT2wWvAY=
Subject key identifier:   40:DB:54:4E:F9:7C:D5:D8:CB:F5:B5:89:D9:68:77:B8:33:C1:A7:A8
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer:       /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial:       01988EED2C2E305A3482725898E325CD098A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number:          0BC6
Signing time:             Sat 09 Aug 2025 13:02:44 +0000
Manifest this update:     Sat 09 Aug 2025 13:02:44 +0000
Manifest next update:     Sun 10 Aug 2025 13:02:44 +0000
Files and hashes:         1: KQTK1M5p1w2tgkimZwP7TTABtyY.roa (hash: LTRVwyOZnYQaG256SSamw/dl7HTrEkfEZ7OCXHYqevA=)
                          2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: xvUpzxqTlV9EjEsYDsghDMA96DRMQNJWYlGKeUFyEG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ed:2c:2e:30:5a:34:82:72:58:98:e3:25:cd:09:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
        Validity
            Not Before: Aug  9 13:02:44 2025 GMT
            Not After : Aug 10 13:02:44 2025 GMT
        Subject: CN=40db544ef97cd5d8cbf5b589d96877b833c1a7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:96:10:78:1e:f8:5e:31:1f:ac:34:37:85:
                    6d:38:50:9a:ba:d3:74:19:03:6b:9e:0e:be:bf:89:
                    e1:0f:23:f8:08:5a:89:90:a0:bf:46:76:ea:a8:cc:
                    62:ac:f9:2a:96:64:2a:6f:44:e8:63:18:cf:f9:3a:
                    10:8c:84:6e:e8:f0:9d:8e:5e:99:a4:07:8f:97:2d:
                    2c:3e:3b:a4:6a:12:96:84:66:06:7c:6e:58:32:e6:
                    00:c8:fb:3b:2b:8c:b3:0e:3b:1f:ae:45:82:3d:31:
                    61:b5:c7:42:b1:c0:eb:21:85:a4:d6:94:e0:c0:9d:
                    c9:6d:b7:5c:35:cd:e6:ff:3b:29:ad:2b:97:24:2c:
                    c9:7e:07:d8:89:41:1b:ff:f0:34:a0:8e:c8:5e:89:
                    15:cc:d0:d6:1b:0a:b0:b1:9f:f2:73:ea:9e:29:62:
                    78:39:8b:bd:c4:d4:81:f6:c2:c4:fe:8c:3e:6c:60:
                    8c:0e:32:31:af:8f:3e:40:06:0e:c1:a9:c6:50:8c:
                    b8:fd:d5:94:a0:fe:83:ae:3a:d1:d1:07:0c:82:26:
                    95:0a:58:e7:e4:7d:b8:92:8c:d8:63:b8:ca:49:21:
                    4c:43:e7:50:66:93:27:a3:59:52:8f:5b:f4:0b:76:
                    6d:04:ea:93:4b:6c:30:33:23:c8:c8:64:0c:08:43:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DB:54:4E:F9:7C:D5:D8:CB:F5:B5:89:D9:68:77:B8:33:C1:A7:A8
            X509v3 Authority Key Identifier:
                keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:74:89:d4:8f:29:3b:30:c0:1d:80:42:f6:d8:c8:70:c3:16:
         bf:04:d9:0e:db:8d:c3:a8:f7:e8:a4:3e:9e:c7:fa:df:4d:b9:
         2c:5e:f3:83:b8:7c:4b:f0:51:ab:4d:7e:b9:4c:4c:0e:1b:39:
         5a:83:b4:25:1b:9c:af:5b:cb:4e:70:be:e2:95:e6:87:24:e2:
         e8:07:c2:7b:8d:2a:5f:81:ba:ed:39:d2:36:01:29:8f:05:6f:
         69:e4:70:7f:45:ed:39:3a:8d:31:1c:6b:06:0f:a3:aa:d1:97:
         84:ab:41:13:93:c7:f1:aa:f3:d3:3f:e5:34:58:f4:e3:61:95:
         2b:bf:be:fb:79:1d:9a:f2:a3:81:b6:31:d1:30:66:6d:c3:55:
         39:97:8a:e5:a0:9e:b7:51:3d:b5:af:9c:7c:ce:e4:68:fd:4c:
         4f:d4:77:8c:80:ec:1d:40:39:86:de:ba:e0:38:ef:77:31:fa:
         8b:81:24:9b:2f:94:4b:86:98:3c:b5:f6:8d:4f:67:3b:4e:2f:
         ce:4c:4b:72:fb:bc:1c:f2:ac:8a:69:d5:4a:80:14:c3:e2:cc:
         55:e7:bd:5d:9e:e0:29:26:4e:82:64:b0:1f:28:22:ae:67:b9:
         dc:bd:bc:86:fb:6c:74:85:28:85:fc:b4:f3:1f:84:99:7a:d4:
         75:7d:74:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:22 2025 by rpki-client