Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
File:                     iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json)
Hash identifier:          s7MEJumtSuUmTxuw9Ih4l1KJV7Ca3reyBx4WuFE/7xo=
Subject key identifier:   EF:B7:B6:A2:EA:C5:CF:09:52:51:3D:5F:11:66:93:ED:7B:78:F4:16
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Certificate issuer:       /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial:       01987298E9AB5810A73AAE7BC0EA0793CD95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
Manifest number:          026A
Signing time:             Mon 04 Aug 2025 01:01:20 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:20 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:20 +0000
Files and hashes:         1: ZbzYnCdTKy9eNC3OK0DEdLUOyKk.roa (hash: oL/nHAdw2PWuZlbLqbaKwj0TlvoNl+Sz5bzNx/L6zWY=)
                          2: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: 7nj0VVAvEPtDizHQJ6P0kNZUcERSKN/8IuJe/8G9CkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:e9:ab:58:10:a7:3a:ae:7b:c0:ea:07:93:cd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
        Validity
            Not Before: Aug  4 01:01:20 2025 GMT
            Not After : Aug  5 01:01:20 2025 GMT
        Subject: CN=efb7b6a2eac5cf0952513d5f116693ed7b78f416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:80:5a:d4:d3:03:ca:71:1a:60:ad:51:a2:
                    67:8c:4e:c1:de:4f:a0:ce:1a:e0:93:e0:44:ed:29:
                    23:5a:bd:df:fa:02:0a:71:4b:00:4f:df:14:a9:3a:
                    bb:1c:28:44:3d:50:52:c8:c9:69:37:22:85:a6:87:
                    d8:43:c9:3d:7f:bf:41:4e:47:ee:ae:e3:b5:ea:63:
                    17:e7:ca:c2:51:fe:70:e6:1b:44:e2:e7:95:3e:57:
                    1d:23:52:d0:b9:47:11:da:45:e6:31:7c:e8:5d:b5:
                    6d:54:45:3f:d3:29:09:29:fb:89:d2:1f:51:7d:3a:
                    5d:f0:3c:2d:52:c3:7f:33:91:14:49:0b:2f:d2:8b:
                    ec:65:f2:24:06:24:40:91:80:c4:cd:ba:22:89:cc:
                    fd:bd:f9:6e:35:92:02:27:c5:19:cf:19:9f:dd:35:
                    00:0f:7c:d5:f3:43:b2:50:97:12:48:93:83:ae:a3:
                    86:52:3f:c6:de:e5:e4:e1:74:7a:bb:9c:45:cd:20:
                    f0:6c:33:99:a3:f1:56:f1:b1:f8:48:3d:f0:33:ea:
                    ca:eb:f7:43:0a:0e:af:d5:9a:13:61:69:ee:48:f7:
                    bc:bf:fd:d1:ee:c1:7f:96:7c:c0:25:9c:b6:70:f3:
                    39:dd:e9:6e:5f:e7:dc:72:77:2d:32:5c:4b:9b:ca:
                    9a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B7:B6:A2:EA:C5:CF:09:52:51:3D:5F:11:66:93:ED:7B:78:F4:16
            X509v3 Authority Key Identifier:
                keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e8:0e:a0:4d:ef:62:cb:4b:79:50:66:bf:48:44:f2:1f:35:
         97:f6:4e:60:6b:47:df:30:00:74:b0:13:65:bd:08:e0:cb:ee:
         13:3d:6f:5b:af:7d:c2:17:e6:33:2d:b2:6a:e0:21:11:e0:2d:
         a6:f6:b2:74:7a:8b:0b:d1:1a:1a:4d:f0:bd:ed:45:22:f6:5c:
         1a:b3:56:29:f1:b6:a9:15:5a:cd:07:0c:b2:3f:9d:e0:9b:3e:
         2d:d0:b9:f6:89:36:18:3e:e5:d6:6c:ec:4a:81:9e:87:5e:bc:
         91:d3:78:ae:ab:f3:62:6b:ba:95:87:e8:2f:bb:9c:1b:07:12:
         b8:c8:08:e9:80:70:e3:78:5d:08:7d:1e:08:09:c4:67:ed:0d:
         0b:21:45:4a:54:c3:69:09:b7:1c:1c:c0:34:65:68:a2:d4:e0:
         3e:b6:f3:ae:7e:86:e9:22:cc:d0:99:64:8a:fe:30:e2:97:94:
         e6:84:42:a5:2f:dd:16:d6:1f:11:8c:20:9e:cb:4c:50:23:58:
         97:86:af:dd:af:b0:68:70:11:96:40:99:07:b9:f7:b9:17:95:
         a9:44:7c:ba:bf:47:7c:58:f6:f3:4d:dc:e1:2e:f2:68:ba:47:
         36:b2:f0:64:93:f5:6e:f4:a0:00:dc:b4:d4:2f:f8:8b:e7:4f:
         03:f9:6c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:56 2025 by rpki-client