Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File:                     q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier:          WJDyyaAx348BV4ly41R5OYraXsh3KXbgyUBJyTtuCPM=
Subject key identifier:   8D:E1:2F:57:8D:A7:D5:91:EE:45:DB:EF:AA:63:8C:9B:E8:F3:2E:8B
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer:       /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial:       01993191ED724AA380C4DD93B53087132777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number:          04EE
Signing time:             Wed 10 Sep 2025 03:01:11 +0000
Manifest this update:     Wed 10 Sep 2025 03:01:11 +0000
Manifest next update:     Thu 11 Sep 2025 03:01:11 +0000
Files and hashes:         1: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=)
                          2: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=)
                          3: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: AXYeCGZ/Q1cu+50Yg6Y3GsI1E5+zAl8WdsjTSYTnPrY=)
                          4: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (hash: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:91:ed:72:4a:a3:80:c4:dd:93:b5:30:87:13:27:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
        Validity
            Not Before: Sep 10 03:01:11 2025 GMT
            Not After : Sep 11 03:01:11 2025 GMT
        Subject: CN=8de12f578da7d591ee45dbefaa638c9be8f32e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dc:3d:80:2c:81:cb:2d:1d:91:91:5e:b1:a7:
                    35:93:bf:4f:fc:b8:cc:37:54:b8:94:7e:18:cf:c7:
                    19:29:52:ae:a9:6d:49:ab:4c:6a:11:b8:24:ea:df:
                    b2:a7:37:2d:04:4e:fc:86:fb:b9:d2:7f:90:df:c8:
                    da:69:b6:33:3c:d7:1a:ac:16:0d:7d:d1:d4:8d:fd:
                    7a:38:b3:a4:ac:57:09:8a:57:a8:01:74:53:37:77:
                    4f:6b:15:a4:1b:b4:26:2f:10:18:84:d8:6e:8c:96:
                    e2:44:71:d4:f2:e5:42:05:46:27:63:4e:92:1c:91:
                    5a:9e:2f:2b:85:ff:bb:22:ca:7b:d5:67:bb:a0:d9:
                    51:ab:38:b1:5d:2a:c1:16:c0:ae:0b:27:13:d5:fa:
                    fd:bc:22:55:dd:7c:c2:2b:2c:63:dd:4a:87:7c:9a:
                    24:a8:a2:9b:03:85:9d:8e:b0:52:bf:9c:50:68:6f:
                    c8:5b:00:b2:e3:ff:96:bc:e9:ff:b3:5f:e3:8d:19:
                    31:0b:d5:bb:8f:30:3d:50:49:00:c5:44:7d:01:da:
                    51:0f:be:5f:0e:fc:c8:85:9c:5f:e9:0b:82:c4:d9:
                    c7:aa:fc:76:cf:fe:45:64:10:ed:8d:7c:f8:00:8c:
                    75:1c:43:11:3e:2f:7b:70:ae:64:71:bc:e7:4f:39:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E1:2F:57:8D:A7:D5:91:EE:45:DB:EF:AA:63:8C:9B:E8:F3:2E:8B
            X509v3 Authority Key Identifier:
                keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:ca:c8:20:28:00:4e:99:e3:f2:e9:0d:16:ad:24:c8:95:
         64:1f:9f:bb:41:42:7f:59:c7:fc:67:0d:6f:b2:89:09:df:bd:
         50:bb:4f:2e:27:fa:7c:86:6d:d2:30:83:0c:e0:21:29:5f:f2:
         4b:2c:01:c4:30:95:a4:ff:dd:94:78:dc:cf:8e:b4:83:a9:f1:
         3a:bb:47:94:86:95:6c:35:9e:bd:02:2a:df:3f:23:49:4a:68:
         56:b5:88:22:84:05:c3:a0:6c:6a:36:37:56:17:ef:35:74:35:
         b6:bb:68:66:62:5b:04:49:49:08:92:84:cc:e5:fe:60:f1:bc:
         ee:c8:33:28:b7:0a:ec:41:22:ab:57:40:e8:21:7a:a9:26:f4:
         07:1a:42:14:c7:c5:ec:af:d8:1f:5a:c5:e5:1c:51:59:fb:82:
         de:e5:dd:7a:1d:46:4d:36:39:2e:16:9f:12:7f:3e:ff:c0:c3:
         80:86:8b:50:9a:5c:74:0d:c9:39:db:14:ee:b1:ab:04:ec:9f:
         6e:d2:5c:29:e8:45:16:d3:c9:74:2c:81:e2:19:f4:ee:ba:d9:
         d1:0f:6f:29:98:ce:24:e5:8b:92:0f:8f:2f:23:b9:4d:71:b5:
         cc:18:0d:cc:43:46:a1:76:59:d2:1f:08:69:85:4f:2d:75:88:
         18:e5:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:00:08 2025 by rpki-client