Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File:                     datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier:          zTXZgk0A7z0ijKcnr+YEyL9wUMbABixnkU6WSJZySc0=
Subject key identifier:   1D:89:D2:20:97:E0:82:4F:A2:9C:30:8D:BF:56:8C:E8:D7:67:DD:96
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer:       /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial:       01993425432E9665726BA2ADE4D380E2E954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number:          035E
Signing time:             Wed 10 Sep 2025 15:01:21 +0000
Manifest this update:     Wed 10 Sep 2025 15:01:21 +0000
Manifest next update:     Thu 11 Sep 2025 15:01:21 +0000
Files and hashes:         1: 14NM_hJ73U6vGuk5H4RP54-eZBY.roa (hash: lie+0t/dSukUm9OoNgztT3EnggVtNQOhf9gAShVS0rI=)
                          2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: oW2qQ13vOIf9PU4iZwtyD6i3b+q/qJzU9uYRBZINPqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:25:43:2e:96:65:72:6b:a2:ad:e4:d3:80:e2:e9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
        Validity
            Not Before: Sep 10 15:01:21 2025 GMT
            Not After : Sep 11 15:01:21 2025 GMT
        Subject: CN=1d89d22097e0824fa29c308dbf568ce8d767dd96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:b3:a7:83:0c:8b:29:ca:b4:31:b2:62:d4:
                    a0:21:4c:98:5f:c8:ff:d7:58:07:74:ef:fd:e4:4d:
                    12:cf:8d:4f:2e:07:6d:4f:a7:00:de:80:0d:87:f8:
                    39:5e:8f:29:ac:1a:7d:82:5f:91:6b:39:bd:bc:fd:
                    5a:c5:e4:a8:d1:2d:0b:31:c2:42:28:e2:9b:93:a3:
                    48:4c:29:19:ae:14:bd:97:e6:06:a6:ed:d6:90:88:
                    c5:a7:e8:d3:0b:8f:28:44:29:70:9d:01:bf:d0:11:
                    39:f7:a6:df:54:3a:30:58:b6:66:1c:8a:e4:00:27:
                    da:ee:22:db:d5:db:22:a7:d2:47:08:2d:43:fa:c9:
                    0c:37:e0:ef:f7:49:f5:f6:db:66:92:14:c9:32:f2:
                    36:2b:20:77:97:0b:4a:35:c2:ac:13:9e:35:24:6e:
                    9a:ae:d9:de:6b:63:cc:c3:7e:ed:df:dc:73:89:fc:
                    be:12:ad:92:31:a1:5a:0b:df:0e:61:65:23:cd:ff:
                    1a:18:21:4f:1e:7f:c5:2d:ad:b8:1a:57:0c:b7:0b:
                    4e:e2:aa:57:2e:f2:64:9c:8c:12:a0:b9:59:ae:08:
                    a3:a6:a1:91:b7:b1:b8:2c:ba:af:4f:a7:eb:b9:d5:
                    f0:7f:bf:ca:0b:6c:4b:fe:68:f4:09:91:15:4b:30:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:89:D2:20:97:E0:82:4F:A2:9C:30:8D:BF:56:8C:E8:D7:67:DD:96
            X509v3 Authority Key Identifier:
                keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:14:90:79:4b:70:80:e2:3c:0a:6c:f1:ec:02:3e:8d:f8:62:
         0f:19:29:45:29:62:e1:0c:c3:aa:2a:a8:ae:52:3e:2a:20:03:
         f4:be:20:51:0a:ce:e5:74:fc:da:fe:ef:d6:05:94:04:35:e0:
         fc:67:62:10:29:b2:9e:18:11:b6:d1:2b:7d:0b:ac:5d:5a:cc:
         ac:8b:34:c9:3e:41:78:db:a9:f8:cf:47:e0:56:49:3d:fb:2a:
         4f:1a:06:49:25:5a:a9:3b:c5:3c:b8:e1:17:fe:2d:47:dd:7e:
         1d:12:f9:8c:bb:89:2d:75:ae:4e:02:4f:c5:87:4a:9e:28:e5:
         f2:f8:d6:33:8e:6d:8b:2a:6c:f7:2c:18:2e:33:d1:d8:9b:95:
         ee:7d:db:b7:00:28:a2:3f:02:75:29:ac:e8:37:29:98:49:33:
         c4:8e:b1:72:cf:2f:21:12:63:49:da:ae:f1:05:9c:b2:d4:fe:
         81:2e:ca:a3:7d:db:04:7b:17:77:a1:b6:b9:35:03:33:00:69:
         c7:bc:91:8e:9f:a4:8b:03:de:5b:0c:00:3e:e3:a7:ce:38:75:
         15:91:fc:04:ab:4f:7b:3f:2b:11:0a:75:98:39:fa:2d:f4:cb:
         ed:aa:4b:f9:42:c1:f4:e2:78:5b:70:bf:d0:e5:bd:0f:27:ea:
         9d:a1:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:53:34 2025 by rpki-client