Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File:                     ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier:          D2lB8u8Qp1UB/+FUypG4msTeU1iYK1pP7u0fkvKEJ2k=
Subject key identifier:   03:8F:48:06:E0:40:AF:C7:22:23:BD:61:EA:8E:94:AF:FD:C6:31:5E
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer:       /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial:       01987450B21C35D2757BDDD710C92177671D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number:          15AB
Signing time:             Mon 04 Aug 2025 09:01:42 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:42 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:42 +0000
Files and hashes:         1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
                          2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: K4j7LcLaWIxsLZXAPl7FW3EEGeMjSaXWAhlMcJEGBnA=)
                          3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:b2:1c:35:d2:75:7b:dd:d7:10:c9:21:77:67:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
        Validity
            Not Before: Aug  4 09:01:42 2025 GMT
            Not After : Aug  5 09:01:42 2025 GMT
        Subject: CN=038f4806e040afc72223bd61ea8e94affdc6315e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:c8:ce:c5:c4:d4:37:81:11:03:c4:f1:74:
                    d6:14:18:c4:8f:fb:bb:f5:0d:3f:84:89:d5:2e:d3:
                    b6:13:22:0f:76:c1:5a:ea:5a:84:ad:eb:de:80:d7:
                    a3:6d:dd:6d:c6:e8:f7:97:b5:db:37:55:39:88:7e:
                    14:68:17:59:b8:a9:51:dd:3d:d3:8a:e2:11:d3:29:
                    96:91:80:0f:d2:73:ed:a8:1f:8f:cc:bd:92:17:ea:
                    e2:30:c6:65:f7:39:06:0f:23:56:68:2c:94:62:8b:
                    3e:4d:b9:4c:6d:78:3d:7e:0e:31:01:7c:1c:9c:4c:
                    6c:83:d5:fa:35:42:19:28:1f:e5:c6:2d:5e:39:2f:
                    2e:0a:d7:68:b8:2c:ea:8f:94:38:1a:37:fb:b6:83:
                    93:0f:75:06:36:d0:98:e7:ce:08:0b:7f:7f:19:45:
                    10:ab:83:97:4f:b0:f9:ed:28:2b:65:7c:69:bd:79:
                    d6:fd:10:0e:fc:90:f0:c0:bb:c8:48:46:4d:70:04:
                    b8:47:b3:d2:6e:45:55:5c:fb:1f:de:0a:a4:b3:bb:
                    46:ce:2c:d8:05:39:64:1a:e0:84:64:c5:da:3e:9d:
                    82:ea:b6:58:3a:45:7b:b6:86:58:8c:bb:10:80:88:
                    6c:5d:f5:b3:f7:40:cc:f4:9e:c8:c2:76:53:d2:80:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8F:48:06:E0:40:AF:C7:22:23:BD:61:EA:8E:94:AF:FD:C6:31:5E
            X509v3 Authority Key Identifier:
                keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:af:f0:2b:ec:79:4d:bd:80:58:eb:01:1b:67:85:22:41:
         9a:13:88:72:e1:e8:70:6a:f5:46:11:bd:9c:21:82:4b:cb:50:
         26:86:ef:3f:c9:5b:6f:6c:e4:dc:a1:69:47:00:3e:bf:08:d3:
         5a:9a:5c:a0:82:9d:86:ea:7f:32:b9:2e:21:f0:7c:ad:ca:c2:
         a8:76:6e:32:e0:5c:0e:31:28:5f:f9:d7:92:6a:0e:de:8e:6d:
         50:9a:7e:43:85:79:e3:4c:8e:80:41:10:61:85:13:b1:53:01:
         ee:3a:13:41:2e:51:72:52:6a:36:fd:ba:a8:97:dc:a3:46:46:
         db:55:30:67:4a:5e:3b:70:91:2b:02:0b:ac:7a:d8:08:e6:6c:
         bc:7a:d5:63:39:c9:3c:11:c7:8a:82:83:e8:f9:1a:92:20:5d:
         d7:86:7c:d2:2d:d2:7c:3a:45:43:e8:73:da:dc:21:fa:e4:8c:
         eb:04:91:09:32:dd:e1:a6:0f:9b:5e:cb:52:22:89:47:f4:db:
         49:91:37:6f:53:be:53:5c:d4:8b:b6:d7:f6:4e:c7:2c:06:e1:
         e5:18:31:cb:c3:4f:6b:a7:05:69:9e:bc:5e:0c:ce:f9:14:2a:
         2a:c6:4a:34:37:70:48:78:49:06:a9:37:98:a8:91:aa:86:44:
         ad:14:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:31 2025 by rpki-client