Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
File:                     iOuqLxdpo932X4c9wx81HvB4rSU.mft (raw, json)
Hash identifier:          67hr/5+QLgYOr/UO9ac5Wz9DmUVpbnKRkc8RUjmLhj4=
Subject key identifier:   65:DE:BB:F1:F2:71:77:AA:5F:EC:7B:07:C5:24:14:DE:11:02:20:AF
Authority key identifier: 88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
Certificate issuer:       /CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Certificate serial:       0199225561AC41660518B6D369519143B992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
Manifest number:          0E0F
Signing time:             Sun 07 Sep 2025 04:00:44 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:44 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:44 +0000
Files and hashes:         1: P5TwA4gqR6DNAZ9Tx38K6wVBeSw.roa (hash: JFHWlXs6ts8+WEohOsphMs0bmJPDZeURLkqEXMqad1U=)
                          2: iOuqLxdpo932X4c9wx81HvB4rSU.crl (hash: Fa9V2zX/W/dNXBw+6HmsbPFBgywnPCAE+coC1VdiTrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:61:ac:41:66:05:18:b6:d3:69:51:91:43:b9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
        Validity
            Not Before: Sep  7 04:00:44 2025 GMT
            Not After : Sep  8 04:00:44 2025 GMT
        Subject: CN=65debbf1f27177aa5fec7b07c52414de110220af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:7d:bb:40:d4:e1:64:58:72:6c:3f:ea:a3:
                    45:c0:51:aa:1c:1a:53:dc:9f:7d:7c:c7:e0:56:65:
                    f4:21:7c:b8:c5:4f:a8:40:1f:9b:86:ee:4f:c9:8f:
                    44:f3:7c:94:3b:ce:ea:d2:8a:83:71:00:95:ca:b7:
                    28:f6:85:52:a7:50:30:20:59:bd:48:27:5f:0e:44:
                    f1:93:d7:9e:ff:01:74:ef:cc:cf:47:0e:42:2f:01:
                    25:19:83:76:13:60:1f:07:b0:0d:aa:4e:55:2f:88:
                    1f:e9:e3:15:7b:38:15:92:67:f0:62:9c:a5:58:7f:
                    27:9c:af:6a:06:8a:27:9b:b8:40:fe:04:48:d4:32:
                    ad:d7:b6:48:5f:01:32:9a:8d:66:a4:f1:e2:69:ac:
                    50:28:3c:23:9a:25:08:b8:2b:fd:99:e5:e7:42:1f:
                    0f:fe:69:30:95:89:3b:96:ca:85:9a:38:e1:48:c2:
                    1c:4f:50:48:78:47:96:80:90:18:7e:05:7e:86:cc:
                    4a:69:ee:b5:09:f8:66:9e:29:2f:18:5c:aa:c5:4b:
                    c1:d3:ae:08:6a:08:aa:83:b2:5c:b6:7b:9b:9b:10:
                    3b:a8:3b:8b:96:98:7f:c6:fc:bc:ef:75:c1:4f:bf:
                    6b:43:4f:1f:93:3e:12:6a:20:c0:e0:db:cf:16:e3:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DE:BB:F1:F2:71:77:AA:5F:EC:7B:07:C5:24:14:DE:11:02:20:AF
            X509v3 Authority Key Identifier:
                keyid:88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:81:a5:cd:0e:2a:29:4c:b6:f5:f5:61:ad:a4:e2:81:e1:cd:
         56:02:71:70:9e:54:af:bb:4f:b0:b2:65:0b:08:31:ff:9d:9b:
         bd:38:0f:ba:0f:2d:0c:ac:c9:0d:0c:d3:16:6f:b7:76:4b:11:
         73:eb:3c:1c:2a:f3:18:41:7e:ed:14:9d:79:96:e5:02:db:9e:
         29:9c:af:b8:93:68:e7:51:f1:fd:c6:f2:b4:91:57:fd:56:f9:
         d9:57:c8:d8:50:51:36:2e:06:f3:9e:f7:7d:bd:a0:13:31:39:
         17:e2:3e:ea:18:cc:a4:82:42:60:ad:64:b9:76:54:f0:31:f5:
         10:03:d2:fb:2a:b4:03:4f:e4:16:09:74:9c:38:62:23:1a:68:
         a8:0c:db:83:8b:10:db:3b:29:d6:49:f2:f5:62:cc:f8:f9:95:
         86:50:39:be:74:bf:70:d4:8a:5b:67:2c:3b:5c:d7:b7:7b:5a:
         fc:c1:5f:e8:6b:a5:ae:59:84:fa:ce:1e:b3:1d:b0:0b:b1:7f:
         a9:48:64:7a:95:f7:5e:6f:38:b3:d5:4d:3c:35:26:26:64:18:
         04:5e:d9:d0:e6:58:54:ff:34:ee:18:22:33:f3:5e:f3:ca:b5:
         c9:47:d1:cd:1b:c7:43:13:28:52:48:26:c9:42:05:38:aa:74:
         fa:d4:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:16 2025 by rpki-client