Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File:                     p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier:          0/C/t4GfpE1UpsMuRtPQCmLSclT+oFRhBiI+jVLFag0=
Subject key identifier:   13:C2:90:79:41:C6:9C:27:67:F5:A9:34:EB:01:E7:97:EE:62:0A:78
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer:       /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial:       01984AAED33180945DC6F79BAAEACC653D36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number:          06EF
Signing time:             Sun 27 Jul 2025 07:00:28 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:28 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:28 +0000
Files and hashes:         1: YH9rgvwa_c5tkfoIds2w3LcyxQU.roa (hash: O5b96K5UqDPwtmiTY4ipuOfWppIds6W4j/eFK50+Z/0=)
                          2: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: XuhXJyBf9npib/MpjMaGnsdcbga+n8RwIq8F3Z3aJAQ=)
                          3: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=)
                          4: vi8z9iHTOaB2FWHQdJejTeAcw5Y.roa (hash: TDy4p0/0R2wjKaBRPb/eq3sprSVIkaJesmw7dyJ2VEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:d3:31:80:94:5d:c6:f7:9b:aa:ea:cc:65:3d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
        Validity
            Not Before: Jul 27 07:00:28 2025 GMT
            Not After : Jul 28 07:00:28 2025 GMT
        Subject: CN=13c2907941c69c2767f5a934eb01e797ee620a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:fe:62:5d:ff:7f:57:e9:ce:15:8d:9f:f3:
                    a8:34:32:89:5d:62:53:4e:ef:dd:80:b4:45:c8:66:
                    e9:ef:af:1d:52:59:fd:06:8e:6f:fc:19:2e:a3:ec:
                    81:f6:c6:17:9e:c8:78:95:9d:d1:f4:12:b5:84:54:
                    21:06:d0:88:11:03:7b:be:ea:c6:ff:9b:de:c9:31:
                    dc:cb:54:35:b7:f6:ea:12:31:8a:92:97:aa:68:97:
                    4a:7c:9e:f6:43:c0:b7:19:db:2e:43:92:56:73:04:
                    0e:d8:a6:5f:97:86:90:18:ec:de:3c:fa:c8:7d:51:
                    53:82:ca:7f:34:06:33:57:f6:42:f6:89:23:97:1a:
                    48:6c:7b:4f:e7:f9:d3:64:91:89:f6:82:45:74:1d:
                    2f:48:73:7a:d3:e8:cc:01:cf:e9:d5:7d:44:ef:f7:
                    f2:c5:e8:72:b8:dc:7b:b2:84:5b:ee:1d:66:5d:47:
                    3e:f5:76:b1:78:bf:60:77:1e:59:10:54:90:78:4f:
                    3e:8b:a0:0f:bb:88:c0:5b:24:15:38:99:b7:0f:c8:
                    d9:b9:ac:31:7d:74:27:58:d5:4c:d7:f8:63:cd:ed:
                    13:da:9a:e9:3f:ac:f1:55:6b:1f:8f:ce:84:b5:cb:
                    39:08:1f:88:a8:d1:0f:c9:b2:13:3d:be:72:63:ef:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C2:90:79:41:C6:9C:27:67:F5:A9:34:EB:01:E7:97:EE:62:0A:78
            X509v3 Authority Key Identifier:
                keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:13:be:6b:fa:a2:b3:59:21:c6:6c:ee:97:89:d3:aa:58:37:
         54:25:32:03:ff:c8:25:45:4f:4d:27:f8:d6:5c:88:b0:0d:e1:
         11:52:43:6d:19:be:96:a3:ea:98:95:11:fe:28:b7:df:f8:c3:
         f0:f4:a7:f3:9a:18:8b:19:ca:7d:1f:db:da:85:6b:ac:f6:61:
         23:e0:e2:5b:39:fe:06:0e:8e:69:2f:07:55:1e:f4:2e:b1:f5:
         d2:3b:81:61:01:cf:38:05:0b:e8:b4:13:e2:9c:b8:dd:08:44:
         eb:23:d7:c2:a2:29:58:28:4e:99:01:dd:5d:b4:a6:14:76:f2:
         81:cd:3c:cd:88:61:e8:62:e4:d2:49:83:d8:0d:9f:5d:cf:62:
         86:5b:ae:5d:02:31:93:f4:61:d8:d8:46:86:eb:34:05:54:5b:
         68:9f:06:06:0e:03:66:ee:74:cd:dc:16:f4:8c:3a:c8:47:27:
         5e:84:9f:0d:d2:a7:4f:d3:c7:24:27:70:30:b9:0a:09:72:d8:
         68:f3:69:6c:62:af:4c:fb:85:8f:72:f4:83:e1:31:c8:4a:64:
         7a:34:f7:24:ca:c9:61:d4:d7:7b:a7:9e:c5:9f:c5:40:4b:57:
         f7:70:d7:bd:14:b8:34:76:06:eb:5d:85:c1:96:54:01:f0:90:
         da:1d:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:25 2025 by rpki-client