Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          U75H+nd/YU/VxJ3B9i/hNyqBmVJSfYvvorYz3huH9WE=
Subject key identifier:   68:A6:97:93:23:6D:12:70:AA:59:E4:DA:AE:B5:1B:B0:31:F0:07:C0
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       01987D8A5567E2DCD7145E347670BCB90D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          0F26
Signing time:             Wed 06 Aug 2025 04:01:14 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:14 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:14 +0000
Files and hashes:         1: 349zjBrXxWXdbWEBD0TY_PcES-4.roa (hash: dTkBBehXJumOuwcY3aMRaxc4m1QE9Au6OaxONrVwqa8=)
                          2: FGloAOGdHctONwf864BFw9r6804.roa (hash: idNgzg92xFKVGDg8Q8+8kqcQjJU43tGKLwcMZ1BO8+8=)
                          3: QeA9h5gc7h5TROkBqdTQKlfxGiI.roa (hash: wvC6P2mkgiV/WDCXbKURUPeQIyZPZgtW7FSvBfEWp/8=)
                          4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: 7SXGu10epnMBbkgZ3NK170dFSCHmQAPbMtwdCC7atgg=)
                          5: f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa (hash: BYRfPeQZzgZNAMB4knpfUfsNVjUgJWJmqeqw3IISPlY=)
                          6: rguLiIijQORjnghvpZcGDmu1SjU.roa (hash: JNesrlv42ZJgaFQwOxaZT3TmKgM6sVVqVrh2EttTKxs=)
                          7: zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa (hash: UIbGdiKmqLamnBzWNetbuRIAxAE+Pp02kC9Gg2VRxdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:55:67:e2:dc:d7:14:5e:34:76:70:bc:b9:0d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Aug  6 04:01:14 2025 GMT
            Not After : Aug  7 04:01:14 2025 GMT
        Subject: CN=68a69793236d1270aa59e4daaeb51bb031f007c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:61:f1:c7:50:c7:b1:93:06:ef:79:13:82:
                    f2:2b:0c:a1:39:7e:31:48:37:59:dd:00:bb:f2:5a:
                    c4:2b:21:7b:6b:7a:95:ab:f1:41:e5:02:56:6c:6a:
                    33:1b:94:07:09:be:95:d3:d5:ea:14:a1:ed:3e:67:
                    3a:81:e1:69:7c:4b:28:3b:1e:76:21:4c:5e:cd:02:
                    c2:c1:41:08:6a:a5:56:4a:a2:7e:a1:12:ca:c8:e6:
                    51:54:dc:77:32:f0:bf:f0:a3:2a:47:79:45:54:b8:
                    75:c8:b8:ae:75:d6:fe:15:7c:dd:f8:9b:d7:12:ff:
                    0b:36:c5:21:f6:3a:0a:b3:10:af:6f:b6:30:d0:37:
                    4b:53:fe:b9:68:be:b4:e5:52:ff:9e:71:cc:ac:a8:
                    53:26:16:9b:6a:e6:a2:d0:55:a8:6a:f2:a0:b0:f0:
                    74:bc:b5:cd:39:53:bf:3c:ed:d4:5c:ef:fa:b7:2d:
                    b6:3b:9c:b7:aa:ab:a1:32:19:1f:dd:45:39:40:71:
                    51:e9:a6:a2:b1:1b:fd:c5:eb:12:a3:a6:c5:c7:3b:
                    e6:ba:ee:2e:90:81:38:d2:2d:a3:d4:04:8d:fc:89:
                    79:1e:b4:34:59:e1:b4:a4:0f:79:6b:10:fd:d5:b1:
                    60:d6:38:13:25:a4:3c:0d:31:c2:d8:f3:00:a7:7f:
                    3f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A6:97:93:23:6D:12:70:AA:59:E4:DA:AE:B5:1B:B0:31:F0:07:C0
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ce:05:e4:e9:5a:2c:d2:b8:26:0a:1c:b8:4c:81:73:27:58:
         b5:89:f4:fe:a5:18:3d:5e:ff:47:72:93:2a:f3:9d:1f:85:51:
         70:32:6c:36:4d:85:90:db:f8:47:a5:72:e8:2d:3c:bd:16:90:
         74:d6:81:94:d3:9f:a1:0b:34:a0:12:a4:32:10:2c:fa:84:be:
         65:b4:c2:22:c6:ae:c5:fe:f1:50:e2:80:8e:25:72:3a:4f:47:
         aa:b6:50:b3:57:8b:02:3c:5c:5e:6b:82:74:c0:96:e4:33:d4:
         55:01:a8:f9:47:85:b0:59:d3:b4:d6:a0:95:b1:72:6e:53:4f:
         0d:fe:18:3b:f5:a5:d1:81:cb:d8:49:c4:64:6b:3a:0c:1c:40:
         f4:87:a0:9c:fa:1e:79:3d:93:59:54:c8:a0:c6:86:47:69:0a:
         f5:a4:00:06:3b:91:7a:32:97:fa:05:65:39:df:26:fb:03:9e:
         6d:5a:66:a5:b9:a7:a4:be:af:06:c7:0c:7a:23:24:67:d0:5e:
         15:fb:4f:6b:d0:cf:4c:9a:ab:4a:4c:d1:d5:49:71:de:48:b3:
         2b:52:25:08:f1:ef:78:6c:16:ea:1b:0c:22:a8:70:de:b3:8c:
         e2:61:14:b5:3f:30:d2:0f:18:45:5f:fe:ae:dd:79:1c:87:44:
         5c:bb:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:36 2025 by rpki-client