Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File:                     piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier:          YPO1m3wSzXOQPHNT9b0w/7p9AXHomLi7g6wtQOL9STU=
Subject key identifier:   2E:FF:4F:E9:4B:5F:E8:FC:E5:D9:B3:27:D5:87:43:AB:57:55:DA:4F
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       01984777C6989937DEB3569520F571675007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number:          0A43
Signing time:             Sat 26 Jul 2025 16:01:28 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:28 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:28 +0000
Files and hashes:         1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
                          2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
                          3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: QAnpH+WYfxFZxOF4/zKhxE3fMoYbDeljVh5AX73DMJw=)
                          4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:c6:98:99:37:de:b3:56:95:20:f5:71:67:50:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: Jul 26 16:01:28 2025 GMT
            Not After : Jul 27 16:01:28 2025 GMT
        Subject: CN=2eff4fe94b5fe8fce5d9b327d58743ab5755da4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:66:62:de:a3:c8:34:ba:75:be:4e:81:57:
                    2a:cf:5b:ae:de:34:e4:a2:3a:08:b0:91:fd:89:5e:
                    69:01:ef:2e:39:05:7a:1e:2c:47:4f:b3:57:31:f2:
                    d9:14:e7:66:30:b9:ea:c3:c4:99:5f:ae:bb:e0:eb:
                    79:47:54:b9:30:8c:96:80:87:a6:32:0b:b2:72:18:
                    37:53:3e:4b:bf:80:ba:c7:e9:67:93:e2:67:85:b9:
                    2b:ce:cc:a4:9d:38:e7:96:77:b3:3b:61:38:c3:aa:
                    be:f2:aa:50:e1:f2:61:07:0e:4c:2c:d3:bd:b5:b1:
                    a4:ad:71:1d:d5:62:03:39:60:52:2b:f2:eb:bd:cf:
                    e4:03:9b:16:b7:9b:1e:4d:05:59:96:e4:03:71:5f:
                    15:cb:65:bd:9e:21:8d:04:fc:8f:1a:ee:bf:c5:77:
                    b3:b3:24:35:e7:ec:7e:6c:f8:fb:45:1e:97:e1:ba:
                    5f:42:90:2d:1f:b2:1d:54:4e:f5:6f:49:a1:ac:cc:
                    fd:5c:93:6f:2d:78:17:26:42:da:45:c8:eb:5a:8b:
                    eb:27:92:9e:64:a6:65:6d:89:dc:e2:f6:20:03:a3:
                    83:1c:95:d6:5d:80:6f:5b:fc:cc:7c:66:6a:dd:1a:
                    ae:92:51:50:00:c6:24:d3:87:43:6e:aa:61:48:91:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FF:4F:E9:4B:5F:E8:FC:E5:D9:B3:27:D5:87:43:AB:57:55:DA:4F
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:d5:e3:d1:de:75:75:41:ca:dc:b4:c9:cf:b9:62:e4:be:07:
         6f:cd:59:17:d8:01:fe:7b:88:c0:9b:53:b0:fe:d9:fa:1a:f5:
         3e:b8:8d:3b:b7:3f:e4:79:5b:a5:3b:7f:6e:cc:b8:27:b2:f2:
         26:7b:64:ab:e8:5a:a4:5d:da:ba:b5:51:81:d9:c0:ff:dc:7c:
         83:02:d0:2a:6f:7e:fb:54:29:e0:38:95:79:52:94:20:2f:5e:
         34:da:32:b8:33:39:4d:18:fd:c1:39:74:b0:5b:88:53:6c:04:
         08:ee:05:d9:64:63:94:ab:1a:96:f4:2a:b4:d0:b4:a0:a1:df:
         dc:80:01:6e:84:6b:2e:4c:ba:ad:d8:2a:de:c0:16:fa:16:24:
         3b:77:ad:9b:59:ad:58:2d:bb:31:3c:71:d2:d8:5e:ea:ad:c1:
         85:df:f6:12:86:d5:af:b3:0b:c9:75:d2:04:5a:c3:ee:d0:4a:
         a2:e4:df:37:f4:65:40:4d:07:2f:fd:da:e6:2b:5c:4a:72:ee:
         90:18:88:6e:82:82:e6:f1:4d:2d:66:1e:69:51:0a:59:77:fb:
         27:2e:5b:4e:8f:3b:94:27:58:07:91:42:8b:1e:34:f6:46:93:
         ea:d0:9c:8a:fb:ee:c0:e5:b8:0b:1e:df:07:16:e6:ea:68:80:
         1a:e8:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:52:00 2025 by rpki-client