Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
File:                     gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json)
Hash identifier:          yhvqkV9cf7Kq+qlG13/B5IOcCpNGhv3JGvy9Aq9AZG4=
Subject key identifier:   D5:B1:85:95:E2:58:7E:B6:B7:86:14:D3:22:80:1D:56:61:80:4D:67
Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
Certificate issuer:       /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Certificate serial:       019918E45DA136E2EEF6C8E37991AE8946DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
Manifest number:          8A
Signing time:             Fri 05 Sep 2025 08:00:43 +0000
Manifest this update:     Fri 05 Sep 2025 08:00:43 +0000
Manifest next update:     Sat 06 Sep 2025 08:00:43 +0000
Files and hashes:         1: e-MtPgvXf9TMD6AQT6xVlb5-tKw.roa (hash: ZhGyG48OfYzWOI1fUa8RuQTHe0urOKcyCwaxAUpZZKs=)
                          2: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: g8dl3CEZka8SNre5lyFzeO/j287xVUXSbGUuG4COme8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:e4:5d:a1:36:e2:ee:f6:c8:e3:79:91:ae:89:46:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
        Validity
            Not Before: Sep  5 08:00:43 2025 GMT
            Not After : Sep  6 08:00:43 2025 GMT
        Subject: CN=d5b18595e2587eb6b78614d322801d5661804d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:c9:93:3d:a7:1a:23:a4:23:58:df:cc:c8:
                    0f:51:ed:48:80:3a:d0:b1:03:9f:8a:87:fe:0f:23:
                    98:69:be:e4:fa:99:9c:55:f8:71:7c:a7:b7:f3:06:
                    66:ca:63:28:7e:f0:fe:58:c0:9f:b7:41:89:4c:ad:
                    21:9b:90:0c:dd:db:37:0c:8e:73:f9:1d:26:f7:65:
                    36:e7:b5:5a:09:82:85:78:6f:53:ad:26:21:09:12:
                    4c:7f:f4:bf:c4:c5:1f:6d:90:60:e7:e1:12:24:69:
                    1e:03:6c:7b:ca:d9:80:59:ac:46:de:c2:ba:c5:6d:
                    47:bb:80:0c:2d:cf:50:46:43:20:ac:25:e8:f8:f5:
                    f4:44:92:60:41:39:73:03:47:b6:5f:f3:9b:c1:2c:
                    af:19:ab:10:d6:c2:2d:87:9c:ae:99:ee:f9:c1:2b:
                    24:88:0d:a0:0d:dd:a6:b9:3f:d8:14:6b:60:af:1e:
                    df:52:55:65:d4:b7:d1:4e:84:a0:15:c1:48:1f:4e:
                    b7:2f:f1:13:4c:22:c9:48:ec:6e:ff:2b:72:bd:e5:
                    5e:8d:9f:04:78:20:1a:59:8b:e3:62:ab:1b:45:5d:
                    39:4b:f5:c6:96:75:31:4c:3b:32:f3:84:a6:9d:21:
                    86:78:f6:ca:76:41:2d:79:3f:d3:bc:f0:f1:81:d7:
                    8b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B1:85:95:E2:58:7E:B6:B7:86:14:D3:22:80:1D:56:61:80:4D:67
            X509v3 Authority Key Identifier:
                keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:af:53:fd:43:06:43:7f:e6:31:05:5d:89:50:3a:e8:b3:bc:
         34:1e:ab:3e:49:95:56:f0:94:ab:6b:4c:d6:fd:b9:99:6f:3c:
         d2:60:fd:65:ff:4c:41:fe:c9:17:16:59:4d:b2:ec:1e:ef:52:
         ea:27:2b:d0:99:8d:d2:0a:e1:1f:ec:c9:2f:3b:76:94:b6:6b:
         41:59:d7:b7:cb:a4:73:b8:7e:33:48:ae:ce:28:af:b7:9e:56:
         f0:55:90:ba:19:cd:9d:6b:ac:9a:13:95:7b:fa:6b:62:a3:4e:
         24:8b:31:79:b0:98:e4:35:af:b2:fc:ea:52:08:65:75:8f:8f:
         7b:8d:69:92:94:60:f1:a8:46:6a:ba:81:82:68:07:a9:58:6c:
         03:1e:f7:86:c5:d0:b5:99:c4:07:eb:da:b1:10:74:45:ac:05:
         12:fd:9b:8c:63:49:94:87:8e:e6:3d:cf:f1:31:32:2f:b6:81:
         96:a3:64:0f:97:eb:96:82:93:d1:92:eb:51:a4:33:59:26:f5:
         0b:46:b6:26:62:58:e0:be:64:8c:aa:f6:a9:39:9b:7b:fb:c4:
         e6:5a:1f:2e:e7:64:7e:ce:e2:ec:90:02:c2:4e:68:10:ff:7c:
         eb:ca:01:ac:9f:65:94:d9:09:11:1a:32:a4:8a:09:38:6e:15:
         90:19:80:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:28:19 2025 by rpki-client