Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File:                     MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier:          AH6gu/j5vj4137vZSv4zXgNAa2+1Ry1+zyc7y90h7UA=
Subject key identifier:   9F:8C:2A:91:62:96:E6:E9:F9:54:F2:31:2B:E8:D7:C9:7F:3F:42:0A
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer:       /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial:       019847783CE0358694F9AE773D9E99E2E98F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number:          0C1D
Signing time:             Sat 26 Jul 2025 16:01:58 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:58 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:58 +0000
Files and hashes:         1: 8q_1sdbmWayLtmP8mTZB8kLpDTw.roa (hash: uQTkc3VWGLAWZhJNFH53PtzgfyjjEyHOxqo6DRrQtqk=)
                          2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: xhVeBQm2K7YihoRwWbEdhzt47KxO9sP/cMzg8Rpn58s=)
                          3: YAbDv-nvwGeHChb6zA0HOhLQzuU.roa (hash: VK3+gni3RnR7xKTmJLnlw17ysmyb1yYsUhENUHdwkVo=)
                          4: tu5XYH6b7aUk4QwLTx8RlrN8pdA.roa (hash: UdM+cRgEm1VOucuDuMrXqMuyPx7BCYacYlYJHHlKn/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:3c:e0:35:86:94:f9:ae:77:3d:9e:99:e2:e9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
        Validity
            Not Before: Jul 26 16:01:58 2025 GMT
            Not After : Jul 27 16:01:58 2025 GMT
        Subject: CN=9f8c2a916296e6e9f954f2312be8d7c97f3f420a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:b5:98:dd:df:08:39:57:f1:35:a3:90:7c:
                    a2:3e:38:c1:50:52:28:06:02:be:9c:65:73:26:dc:
                    a6:3f:d5:00:dd:65:88:db:3c:d2:f4:45:a3:00:44:
                    ef:00:a2:9d:cd:de:ea:33:f4:93:e5:54:6c:8d:eb:
                    40:17:a7:01:bb:3c:f2:9a:7c:6e:b9:8b:f5:be:91:
                    3e:72:27:ee:d5:40:7c:3f:e4:b3:1e:33:a3:35:0f:
                    eb:89:0b:42:ea:96:e1:f3:f1:e3:b9:4a:66:4a:a7:
                    0d:81:60:9e:a2:8d:93:4d:8e:3f:15:1e:c4:7f:a0:
                    16:a7:f5:2c:32:8e:40:38:ba:e5:fd:73:17:54:64:
                    fe:f6:d4:a8:4f:75:21:a4:58:de:6e:8e:ee:bb:14:
                    60:a4:b1:37:f0:6e:08:a5:d6:83:83:b2:fd:b4:8b:
                    8d:86:8c:6a:47:41:d9:cd:22:6b:16:97:f7:be:bb:
                    b2:aa:d4:a3:fb:e5:c7:a1:4d:0b:c2:58:46:2e:c1:
                    6b:8e:69:40:8e:00:f0:dc:ab:f8:a6:34:4a:1c:72:
                    10:c6:88:2d:3e:0b:35:16:28:4a:b6:61:25:8a:13:
                    dc:0f:b9:a8:a1:11:c4:40:3f:0d:34:ce:7f:f9:a9:
                    23:8e:68:9d:24:47:3f:05:a3:dc:8f:de:27:7e:75:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:2A:91:62:96:E6:E9:F9:54:F2:31:2B:E8:D7:C9:7F:3F:42:0A
            X509v3 Authority Key Identifier:
                keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:f7:54:1d:e5:a9:98:00:c9:ab:53:4f:12:30:85:ad:51:
         be:ff:6b:f4:e8:45:29:53:ef:8b:a3:ee:b9:be:66:7f:2c:18:
         b5:08:53:72:be:c1:2f:8e:49:a7:f4:d4:26:8c:20:6d:87:34:
         f5:89:f1:de:f1:c2:7d:5b:72:bf:a4:3b:72:b0:54:54:84:1a:
         b0:17:b8:a9:28:a3:4a:00:ec:ff:a9:ac:fd:93:20:f5:47:53:
         2e:8e:ee:47:a1:b9:e4:be:7e:f1:c0:35:4f:e6:9c:b6:d5:56:
         64:8f:a7:c3:6f:40:4d:65:8f:7a:ed:43:90:71:66:fd:e6:38:
         8b:90:42:6d:c2:5f:a9:9c:a7:7e:83:d1:0b:58:bc:f7:c9:cf:
         1f:2e:91:16:9b:d4:b3:05:ee:06:4d:9f:2d:b9:5e:53:91:d9:
         85:0f:44:6a:24:d1:a1:86:d1:c3:f4:80:55:a5:48:ee:93:c8:
         7c:de:16:2a:ea:70:b0:e5:6f:2b:b7:8b:70:59:88:44:40:5a:
         d5:e0:8b:09:13:69:f3:c3:b0:84:82:29:ba:f1:52:4d:9d:2e:
         42:00:19:f6:b8:84:5c:80:ea:a2:02:79:93:c8:ea:62:ea:23:
         f2:90:63:ac:c1:01:8e:e4:8e:6e:39:4e:54:92:18:24:af:6a:
         2b:af:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:50:09 2025 by rpki-client