Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
File:                     9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft (raw, json)
Hash identifier:          /v0NGagFZGtaGOodWweiBt/A8RdB0lpZiXBBQ9lrt+4=
Subject key identifier:   94:37:2C:5F:86:1A:75:0F:DE:97:CD:C2:71:02:7B:11:2D:E2:BF:D5
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Certificate issuer:       /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial:       019867026DF1C7AD7ABC2FB17D06929626C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
Manifest number:          0B8E
Signing time:             Fri 01 Aug 2025 19:01:09 +0000
Manifest this update:     Fri 01 Aug 2025 19:01:09 +0000
Manifest next update:     Sat 02 Aug 2025 19:01:09 +0000
Files and hashes:         1: 8D0SgcE22-jKRyHTI51t7V8NcjA.roa (hash: ZXV9vvWvbV2B2BZGTQ3fbU0rYCU11Zmayta/6q9b25w=)
                          2: 9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl (hash: 0CDCc3cSsjZL5B2Ri1lovq9kNiiW06RfhbiYVN9Kiig=)
                          3: JB9Y7wnJwFNh42qjbGzSSoW0uhI.roa (hash: idOHiv8xfyir4aZA/b0dlRbG2HOO8hhEFkrMoBmk7Eg=)
                          4: mDXhl4dprarAsNvti4q46_kKZpM.roa (hash: nO7loNJnNWEy7qYEFwacKqwIKjogQXV6dHPxMdw1y3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 02 Aug 2025 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:67:02:6d:f1:c7:ad:7a:bc:2f:b1:7d:06:92:96:26:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
        Validity
            Not Before: Aug  1 19:01:09 2025 GMT
            Not After : Aug  2 19:01:09 2025 GMT
        Subject: CN=94372c5f861a750fde97cdc271027b112de2bfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bb:56:aa:1d:9c:4c:55:68:68:53:1e:63:3e:
                    10:89:6b:44:d6:b1:97:4a:e1:75:83:0e:24:c7:d9:
                    4f:77:ee:73:c9:43:d7:07:67:6f:f9:57:ad:a1:16:
                    46:22:6f:00:bd:2b:5a:f2:37:e7:a6:0a:30:b2:22:
                    c0:de:dd:19:b8:39:ba:6a:0e:09:2b:a5:cd:a4:74:
                    34:4f:07:ee:48:07:6d:95:79:a3:9b:7c:ca:8b:6f:
                    4f:04:52:6d:d8:91:1f:df:48:06:0f:0e:94:e2:f4:
                    c7:a1:89:18:37:82:4d:fe:7a:f8:d0:89:ca:d9:03:
                    f5:55:fd:26:84:28:92:20:74:c1:b9:fb:6b:91:1f:
                    1b:a4:f1:cc:21:0f:89:f0:a8:06:ae:2a:23:ba:f1:
                    ec:d8:e4:85:7b:98:01:6f:58:39:9e:03:9d:33:74:
                    16:d4:02:48:39:89:7b:8f:fe:f9:29:82:a4:1c:b6:
                    6b:01:86:46:0d:38:4f:37:a5:7b:64:ad:9f:fe:58:
                    45:9d:fd:65:b3:d7:cd:85:de:c3:79:47:d5:40:1d:
                    f3:da:bc:03:26:27:e9:a7:20:4c:08:d3:6a:6a:a7:
                    9a:63:a1:cf:fc:0d:a1:d0:1d:31:68:17:3a:ce:31:
                    bf:c9:bc:b8:b5:54:20:f1:19:83:df:96:e9:f8:d6:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:37:2C:5F:86:1A:75:0F:DE:97:CD:C2:71:02:7B:11:2D:E2:BF:D5
            X509v3 Authority Key Identifier:
                keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c8:82:ff:bb:ac:ec:a1:75:8b:87:3a:6e:6e:88:73:e0:87:
         f0:86:a5:f0:12:db:82:48:34:c2:c7:4b:7a:ea:ae:06:8c:9a:
         05:75:21:9d:61:23:39:31:c1:73:da:76:4c:d3:3d:62:bf:62:
         6a:48:3a:05:30:da:68:fc:ba:54:ac:84:37:d6:13:f3:e8:48:
         19:24:61:da:e5:88:a6:7a:1a:83:37:66:4a:93:3d:7a:29:33:
         3c:c4:41:a6:cb:89:df:21:16:56:bf:e5:df:c6:e3:fe:f2:80:
         b8:9a:2e:09:65:86:e5:66:86:01:17:77:8a:4d:0d:65:97:67:
         63:c4:ce:06:ab:9e:1d:28:2f:c5:cf:bf:87:e2:95:22:4c:22:
         2d:df:ff:8c:86:98:e2:54:16:53:71:3c:f2:3a:38:b3:08:25:
         00:e6:0f:99:76:ab:b0:7f:50:4c:3c:7f:0e:71:67:e8:78:f5:
         df:2b:dc:59:6c:49:e9:81:00:56:ce:ba:1b:96:29:d3:04:94:
         70:2b:e3:46:e9:91:de:88:7b:be:a5:d2:14:5d:50:57:6e:bb:
         b3:6d:cb:26:43:e5:2e:c9:ba:5e:16:8b:fd:ec:bf:ed:22:c3:
         ab:21:22:ae:79:b1:19:c3:eb:55:bb:c4:5a:61:fb:86:e3:5d:
         6c:96:91:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:24:49 2025 by rpki-client