Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File:                     rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier:          ohcmi5SrEwCTzUYqUoTN6krrj05ebeY0ay1iS0ZUJSI=
Subject key identifier:   B3:ED:58:68:6B:08:DC:64:61:27:4B:B8:21:77:E3:B5:BB:AA:D0:B4
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer:       /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial:       01988C8F65A0FFFAECBD0F7F1393D52FA7F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number:          1622
Signing time:             Sat 09 Aug 2025 02:01:04 +0000
Manifest this update:     Sat 09 Aug 2025 02:01:04 +0000
Manifest next update:     Sun 10 Aug 2025 02:01:04 +0000
Files and hashes:         1: hDXJqHhRVakrUpAy2mxJpw32amA.roa (hash: Q2fYQzDzeuJHoaVaTN2Do0bb6ba0BBCZfekXkM6wQUY=)
                          2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: xM/yGcevzL2TMy0FVShCMCGQvSElzC80h7L8eH5yM+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:8f:65:a0:ff:fa:ec:bd:0f:7f:13:93:d5:2f:a7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
        Validity
            Not Before: Aug  9 02:01:04 2025 GMT
            Not After : Aug 10 02:01:04 2025 GMT
        Subject: CN=b3ed58686b08dc6461274bb82177e3b5bbaad0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:25:55:5d:38:e9:80:fb:a5:b2:ea:93:2e:
                    bd:51:79:f6:cc:dc:14:f5:68:7e:86:c7:b7:de:b4:
                    c6:61:79:fd:28:3b:f6:a5:f2:41:fd:88:51:dc:06:
                    2e:92:39:df:d7:74:07:0c:68:95:04:e8:9d:79:fb:
                    6e:cf:d6:b9:02:fd:f8:fd:0e:9f:54:c6:56:35:73:
                    15:6a:d1:b4:51:dd:9b:b8:8f:b0:a4:cb:dc:72:75:
                    95:43:16:50:db:2c:fd:b6:8e:1f:af:37:c4:0d:c4:
                    78:89:ae:40:b2:a1:b8:fd:e3:ef:41:0d:ce:5d:c3:
                    4e:e6:fa:de:ba:18:a8:b2:62:a0:57:14:26:80:3f:
                    2a:94:15:fc:cc:e9:32:ad:8c:40:67:74:84:b6:11:
                    70:5c:6c:8b:ac:f4:63:7e:3e:f5:6c:89:7c:ab:06:
                    84:c6:ce:f3:55:a6:91:ab:8e:ad:a7:e4:d9:74:82:
                    5a:8d:4c:f4:94:f7:5f:22:07:08:6d:3d:ce:ba:02:
                    fe:a2:e4:b3:5c:0c:ce:6f:b1:1e:24:96:c4:a9:c1:
                    b8:f8:bf:90:ed:35:dd:e7:df:db:9c:b8:45:30:2e:
                    0f:92:f5:01:58:54:89:c2:7f:11:f5:d4:7c:e0:36:
                    a5:6b:8d:da:0b:68:b3:ac:73:e3:ea:60:78:26:ab:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:ED:58:68:6B:08:DC:64:61:27:4B:B8:21:77:E3:B5:BB:AA:D0:B4
            X509v3 Authority Key Identifier:
                keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:24:98:35:4e:93:7c:bf:b2:11:30:bd:33:65:4a:c6:cc:05:
         d0:86:aa:28:23:bc:d2:bc:06:2f:92:a6:18:77:4a:75:2a:d4:
         de:cb:b9:1a:b3:f0:d2:6b:f8:09:54:f7:b2:44:4f:bf:20:72:
         88:c1:cd:0e:fb:7f:e0:4f:9f:41:e8:d9:6e:39:da:71:1e:25:
         69:ec:6d:ef:f0:12:0c:06:74:f7:dc:20:af:8f:48:3d:b2:4f:
         16:8e:58:ec:77:f0:5b:1e:bc:aa:85:96:89:5f:cf:96:d5:56:
         cb:68:52:2e:7a:97:b9:f1:dc:e1:47:7c:11:d0:dd:68:db:93:
         42:95:aa:6c:d0:34:c4:14:69:dd:94:d5:02:1f:3f:7e:06:57:
         56:c1:14:f7:29:b2:cf:b6:22:31:99:6b:50:7e:9e:5c:fe:2c:
         39:77:c3:0f:12:1b:61:db:3a:8d:2b:fe:89:06:c9:fa:88:fa:
         a1:7f:65:5b:93:6a:a5:2a:7e:37:fb:6f:7c:f2:f3:e3:b2:dc:
         7e:2a:91:97:a7:b9:56:5b:4a:bf:7d:81:e9:36:08:e1:46:39:
         82:68:1a:91:e0:ce:db:19:14:d5:19:0a:d0:f2:48:57:48:d9:
         a2:21:2a:83:3e:19:05:d1:ed:aa:09:71:aa:da:4c:93:df:a0:
         e1:c5:24:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:19 2025 by rpki-client