Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File:                     q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier:          Jgwlu95KtD8M8ko4xRUR9HbaN6iUeCCmbT0bZoH3Ang=
Subject key identifier:   D4:C7:2D:52:F2:86:D8:6B:DF:C5:2B:3C:DE:A4:65:7C:4B:BD:84:4C
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer:       /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial:       019849D303E281F937968435BF0E23B88BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number:          0476
Signing time:             Sun 27 Jul 2025 03:00:22 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:22 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:22 +0000
Files and hashes:         1: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=)
                          2: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=)
                          3: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: 2DzuzlmnB5l5hOvEtVRDmKNBPMfyUWQ+eDb16H09ews=)
                          4: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (hash: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:03:e2:81:f9:37:96:84:35:bf:0e:23:b8:8b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
        Validity
            Not Before: Jul 27 03:00:22 2025 GMT
            Not After : Jul 28 03:00:22 2025 GMT
        Subject: CN=d4c72d52f286d86bdfc52b3cdea4657c4bbd844c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:3f:3a:49:82:34:9a:68:7c:d0:a0:ab:34:
                    1c:85:55:32:2f:bb:1d:98:27:8b:82:0f:c7:57:39:
                    cb:a0:77:ce:30:59:a5:ba:53:eb:f7:23:74:b5:44:
                    99:57:e2:25:d1:20:30:5c:d8:44:49:20:ad:52:da:
                    68:5b:67:f9:6f:b0:fb:c9:05:c5:92:14:c9:e7:76:
                    fd:b8:53:7e:fc:b0:3b:77:a9:23:aa:be:27:5f:18:
                    40:82:1e:9e:e9:ad:59:7a:3a:0f:25:d9:62:66:58:
                    a2:d8:5c:66:7e:7c:94:2a:21:a3:5b:b9:b2:4b:50:
                    f0:de:26:ee:31:22:90:fb:48:aa:ce:07:2a:fc:2d:
                    27:7e:f6:66:4e:fb:10:cb:45:f0:cd:5e:a6:10:83:
                    41:d7:88:c7:02:9a:00:8a:b9:4e:30:a2:ce:41:85:
                    d2:a7:63:39:39:fc:14:76:b5:a0:90:64:05:89:b0:
                    fb:fc:f7:16:72:76:b1:48:d4:f9:6d:a7:07:3e:7e:
                    99:d3:3c:d3:53:9d:fe:69:54:81:95:29:bc:73:cc:
                    2c:a0:7a:e9:05:cf:df:93:0b:a5:66:17:f4:5e:dd:
                    aa:6c:78:1a:f3:16:db:12:b2:35:2b:66:9a:ab:4a:
                    38:39:0d:39:4f:fc:2f:7d:48:3e:11:a2:f0:49:55:
                    4b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C7:2D:52:F2:86:D8:6B:DF:C5:2B:3C:DE:A4:65:7C:4B:BD:84:4C
            X509v3 Authority Key Identifier:
                keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e6:4d:1a:42:be:f0:3e:94:d4:37:de:67:c5:2d:f1:ae:3f:
         88:1f:60:7a:cc:69:83:4a:a7:d2:7b:22:67:5c:80:e5:ee:e0:
         13:68:de:74:9f:e6:45:a5:d9:af:11:4b:15:46:57:94:f1:48:
         5a:04:38:62:f2:60:b4:8b:94:53:38:6a:6c:1e:eb:0e:d3:ab:
         70:36:df:d1:81:17:e3:55:89:b7:c2:f2:e8:17:a1:cc:46:f8:
         9c:71:24:d9:f8:19:ca:5e:9c:27:b4:a1:65:a6:e7:d7:55:2c:
         90:fb:6d:7c:ea:0e:2f:8d:c6:40:7e:6b:5a:ea:12:b2:de:ed:
         ef:54:d5:a0:9d:55:97:f6:4e:60:84:4a:c9:dc:24:59:c9:2c:
         d0:16:66:8b:29:eb:4c:dd:11:27:b8:0f:4e:d5:86:7d:0c:e6:
         e0:2c:c2:3a:cc:18:86:92:e8:2c:bd:17:12:34:fd:ab:a5:bd:
         3c:60:33:34:59:b7:b5:a1:c0:97:86:63:ba:22:d6:0a:6b:39:
         ba:b9:cf:cf:31:4e:d1:6b:45:66:3e:a3:ab:40:a7:b2:b6:4b:
         23:c4:57:b0:b6:68:ee:9f:5c:5b:97:f9:13:2d:c5:e0:fb:94:
         c2:6c:67:ab:7a:db:53:8c:d2:d7:bb:49:48:a1:2c:87:0f:d0:
         0e:43:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:44:16 2025 by rpki-client