Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
File:                     g103QIoiXxqJZPjXK8mdm75TMjQ.mft (raw, json)
Hash identifier:          ro2hfZOtVcflngImeW97MEiFj+nbSbwh2WOXPhBkt3U=
Subject key identifier:   BB:D5:8A:E2:40:3F:6C:89:50:1B:C2:B5:5D:32:A4:C4:58:A9:3C:28
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Certificate issuer:       /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial:       01987B9C8AE552B7437AB2670DCEA91DB254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
Manifest number:          15EB
Signing time:             Tue 05 Aug 2025 19:01:53 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:53 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:53 +0000
Files and hashes:         1: g103QIoiXxqJZPjXK8mdm75TMjQ.crl (hash: ZQhlGKdWA2z8T62GuKbzQ+SkyWWooY9eUJiDMA6dJwU=)
                          2: wmXlcNkh_2vesQLMJed5vd6SqTE.roa (hash: yFr4o4FxK8GJrbTrCTeUvkik35biGf8xB3yfWuA7Ue8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:8a:e5:52:b7:43:7a:b2:67:0d:ce:a9:1d:b2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
        Validity
            Not Before: Aug  5 19:01:53 2025 GMT
            Not After : Aug  6 19:01:53 2025 GMT
        Subject: CN=bbd58ae2403f6c89501bc2b55d32a4c458a93c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:4e:ec:3c:d8:c0:04:02:57:d9:07:7e:6b:
                    0e:8e:bb:04:49:ca:af:83:6f:b9:1b:fa:3d:44:1e:
                    91:01:d7:61:c7:c9:5e:f3:5a:a8:83:4e:12:d6:5c:
                    8e:ce:98:7f:2d:d7:f8:8a:7e:ae:50:90:16:89:f5:
                    a4:4a:07:a2:60:ac:84:7f:76:1e:57:43:b6:7c:1b:
                    49:28:48:ed:9e:03:71:a0:1c:56:f0:40:89:ec:30:
                    36:97:65:2b:b6:70:4e:7d:69:59:0f:b7:2c:aa:d0:
                    bf:2f:ef:ec:5e:ac:f0:66:e1:5b:99:8b:af:e5:17:
                    32:56:42:49:64:cf:8a:ef:61:92:1e:7d:ad:58:9c:
                    4c:2b:3b:e3:04:5e:d1:79:3e:ee:9b:aa:6b:68:24:
                    08:64:6f:51:a1:57:a2:a2:1a:75:c3:6c:dc:e6:26:
                    66:e0:2a:61:46:1a:e7:0c:a4:c1:d8:14:cb:42:cc:
                    21:bc:44:04:f0:f6:91:af:79:87:8e:43:dd:2f:a8:
                    ae:73:bc:e2:48:39:1f:98:02:5a:91:e1:c1:0f:c0:
                    61:4f:67:94:d3:f9:fe:a9:6a:22:cf:c4:07:e2:f9:
                    2a:8d:92:8d:7c:f3:c9:29:29:a9:32:23:a2:4a:f0:
                    7f:51:64:e7:cb:cf:9f:ea:d9:59:fc:13:ca:b9:43:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D5:8A:E2:40:3F:6C:89:50:1B:C2:B5:5D:32:A4:C4:58:A9:3C:28
            X509v3 Authority Key Identifier:
                keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:91:21:ba:16:73:52:fa:bf:4b:ac:0d:01:05:ce:f4:3e:b5:
         06:32:1f:1d:0a:f7:9e:d0:ba:7e:c3:8c:df:62:8c:58:5f:8b:
         a6:dc:ff:4b:de:5a:9c:b2:01:54:89:de:d2:d3:a7:b2:79:d9:
         68:69:91:60:c6:5d:2f:19:52:1a:f8:23:1b:61:37:74:b9:14:
         45:3a:46:00:11:bc:46:d0:ff:85:d7:eb:be:72:8e:a0:e0:39:
         4b:8a:bb:d3:13:99:1a:fa:64:45:17:a7:6c:cb:87:a2:fb:53:
         a9:36:df:30:5f:a9:90:cd:72:6e:14:7c:7b:6b:42:f7:6d:a2:
         c5:18:a9:a9:fe:3b:b8:3b:22:84:de:32:8d:a2:f8:16:a5:17:
         fe:97:2b:a2:24:9d:59:0f:35:5f:ce:d9:78:0a:0a:98:69:57:
         63:74:aa:6d:06:59:ee:c8:d5:b7:e6:4a:37:7a:9b:e5:fa:b6:
         39:f1:1f:8f:06:7f:81:e5:9f:f5:76:05:5b:c2:f4:25:94:38:
         08:b6:07:df:81:eb:a2:b5:47:59:b0:da:b0:d8:06:8d:ce:f2:
         51:dd:17:fa:fa:fa:61:bc:45:d1:10:69:a2:6b:00:2d:e4:74:
         af:9a:db:65:87:80:ba:98:48:e4:21:b7:7c:d1:0a:b6:75:b5:
         b8:0e:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:21 2025 by rpki-client