Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
File:                     aNogbIPVBeJUs-88dlD5-5NFNDU.mft (raw, json)
Hash identifier:          dP49TIXt6+sZG3Is0nQbOR/9uVsRBeho2YupBI4yniM=
Subject key identifier:   00:A5:B7:C2:D5:D4:79:BE:B6:AB:37:64:13:8E:12:93:79:4A:09:B0
Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
Certificate issuer:       /CN=68da206c83d505e254b3ef3c7650f9fb93453435
Certificate serial:       019849D3A0C23BA29330DA22E2F58C9E33FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
Manifest number:          08F0
Signing time:             Sun 27 Jul 2025 03:01:02 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:02 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:02 +0000
Files and hashes:         1: 9yjOyCjaNQvZmslgCNfY4UdjDvM.roa (hash: BLcuMbjq4mGuK5Vn41A+M+OAou14cd2H96ukojI5mmM=)
                          2: aNogbIPVBeJUs-88dlD5-5NFNDU.crl (hash: fWxIL7P29LF6PNzId++irT1FEX3elUvTl9pMskXP90I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:a0:c2:3b:a2:93:30:da:22:e2:f5:8c:9e:33:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435
        Validity
            Not Before: Jul 27 03:01:02 2025 GMT
            Not After : Jul 28 03:01:02 2025 GMT
        Subject: CN=00a5b7c2d5d479beb6ab3764138e1293794a09b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d4:25:c3:d8:af:41:4d:e4:99:a7:c9:dd:5b:
                    8b:06:1e:ee:6e:53:42:33:18:e9:4e:71:d1:d9:9c:
                    0a:36:aa:a3:07:a3:52:3b:2d:e9:5c:43:b5:81:3d:
                    a5:b5:8e:a2:74:c3:4e:f6:1e:7a:90:10:37:29:ca:
                    5e:d2:5e:8c:ca:6e:05:1d:36:20:4b:17:9e:0b:fd:
                    b1:d0:16:84:13:83:b8:00:49:15:a0:79:32:a3:52:
                    f4:a7:93:9d:3a:81:51:2d:01:08:52:62:63:55:59:
                    1c:e1:88:3e:57:04:45:47:9d:23:88:78:57:3f:4d:
                    b2:9a:5b:ab:86:fb:b4:d6:43:7f:e5:c7:8b:90:ad:
                    50:bd:22:ac:26:7e:4c:5a:4c:42:3b:f0:49:78:8f:
                    df:58:1e:1b:86:6e:b3:12:7c:b9:ed:17:b2:d9:55:
                    1b:4f:d4:ef:bb:83:e0:42:ae:c5:37:82:f7:fe:20:
                    8d:32:1a:de:c9:ff:81:df:10:f7:df:b4:9c:81:2f:
                    47:39:77:2d:bb:d5:75:5b:01:95:5b:45:47:7f:83:
                    8e:33:e6:63:9d:fe:9e:1b:fa:c4:b1:ff:56:ea:37:
                    5a:91:b6:df:3b:29:24:18:1e:4d:a4:b1:cb:84:6a:
                    c7:d9:bf:5c:42:b9:a8:28:de:d1:f5:0c:df:23:1b:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A5:B7:C2:D5:D4:79:BE:B6:AB:37:64:13:8E:12:93:79:4A:09:B0
            X509v3 Authority Key Identifier:
                keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:52:9d:6e:ab:8d:be:ce:a7:a9:11:e4:f3:aa:9f:79:c2:ee:
         99:d8:a8:16:5f:e6:5a:e2:f7:f2:82:36:77:d9:bd:ed:76:20:
         54:29:49:85:17:69:2d:79:c2:96:03:ba:02:56:03:6c:35:57:
         eb:12:7e:f7:d2:cb:7f:6c:b3:e1:e9:b5:59:81:d3:ec:a0:d8:
         ea:b5:75:8c:69:03:7a:4d:8c:0e:a4:0f:00:61:be:e2:74:b4:
         52:44:63:ad:1d:18:f4:0c:89:76:45:84:d2:1f:53:b0:33:09:
         47:a2:51:03:e7:b9:55:65:2c:c8:82:11:0e:8a:9a:9c:ba:37:
         1b:63:33:79:26:18:4c:dc:f6:76:bf:fb:ea:c1:9f:08:9e:bc:
         30:6c:02:78:85:1d:d9:87:30:51:79:83:de:41:08:b5:e5:49:
         71:6a:80:06:47:b3:fa:26:e8:55:27:0a:d0:81:fe:fd:fe:1b:
         f1:cd:e1:4a:6c:df:aa:9d:0f:cf:ac:54:b2:d0:32:55:0b:5c:
         74:63:31:4b:da:9b:29:9d:06:97:f0:95:b7:29:7c:cb:e0:81:
         4f:b3:f1:1f:bc:fc:42:e6:11:56:ab:8f:ef:8a:5d:6e:23:25:
         20:73:17:77:81:34:80:dd:00:20:86:bd:8b:58:eb:69:73:dc:
         1e:f2:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:29:04 2025 by rpki-client