Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
File:                     Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json)
Hash identifier:          nCNMxKy7UZluCOwPigJobPtutS0W2CY88dMy9qO/dIk=
Subject key identifier:   6E:DE:C7:D6:A9:1B:71:E4:C0:E1:C6:C6:24:A0:61:11:DF:E6:FC:FC
Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
Certificate issuer:       /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Certificate serial:       019826D99C2D9A906607341679AEC96C12B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
Manifest number:          0A
Signing time:             Sun 20 Jul 2025 08:00:52 +0000
Manifest this update:     Sun 20 Jul 2025 08:00:52 +0000
Manifest next update:     Mon 21 Jul 2025 08:00:52 +0000
Files and hashes:         1: 91ZCHXFl5UUzytD2oCxDOo7Vf-U.roa (hash: GiWWhZLSNM54YFftILgBMiQnN9xd6n0FvV41BvORBF0=)
                          2: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: +7ysOUpB0NLB2DCzyNCiW4XRAkSpVUxhBn/A22SKDck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:26:d9:9c:2d:9a:90:66:07:34:16:79:ae:c9:6c:12:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
        Validity
            Not Before: Jul 20 08:00:52 2025 GMT
            Not After : Jul 21 08:00:52 2025 GMT
        Subject: CN=6edec7d6a91b71e4c0e1c6c624a06111dfe6fcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:47:0b:cc:25:7b:df:6c:2c:0c:59:94:3a:
                    d1:f2:db:8b:2c:e9:2d:b6:21:0b:b4:05:08:5a:d2:
                    1d:2a:46:4d:47:9f:6b:88:b4:dd:23:48:29:37:04:
                    d4:4b:28:36:83:ad:06:fb:52:f6:c5:29:c6:10:81:
                    cb:ff:2d:25:f9:67:0c:bd:10:b9:ba:4d:91:6d:2b:
                    77:52:33:c6:e9:51:e9:4e:6b:1e:72:52:fd:b6:45:
                    2f:bd:c3:44:14:69:9b:79:58:f2:f8:da:de:16:e4:
                    29:72:79:35:d2:f1:aa:19:e7:f9:1a:bc:cf:9d:3f:
                    43:15:85:5e:c8:82:18:e7:b8:bc:6f:c6:80:bd:57:
                    6a:c1:e8:5b:9a:c0:e7:95:86:2c:35:6f:e9:ff:4f:
                    fb:13:20:3e:86:fa:13:ec:78:f6:ed:3e:3b:f7:46:
                    d4:92:cb:89:51:67:a9:6e:3b:47:24:cb:9d:3a:3a:
                    fb:6a:18:6b:f6:3b:fa:32:6d:4f:3b:de:37:f1:9e:
                    45:05:72:62:74:4b:53:c6:e7:76:c1:69:c5:de:bc:
                    bb:38:0e:a3:f8:76:6b:63:60:09:e9:59:bb:48:0b:
                    7d:b2:c2:db:4b:7a:b2:f2:a1:3d:5b:f9:34:7c:5e:
                    75:93:88:58:8d:33:8b:99:e6:a1:c9:f5:5d:4f:f9:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DE:C7:D6:A9:1B:71:E4:C0:E1:C6:C6:24:A0:61:11:DF:E6:FC:FC
            X509v3 Authority Key Identifier:
                keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:3b:68:aa:5d:36:fb:56:f8:1d:d0:cf:f2:31:13:c0:5f:45:
         15:ef:43:e7:e7:ba:74:4f:f5:12:a4:fb:97:e9:d1:79:d3:25:
         b1:7c:03:88:3d:60:b5:96:26:ea:ae:b6:d0:82:fb:ed:dd:c7:
         36:a8:1f:4c:cb:92:c6:54:93:5f:3a:ae:a8:98:7d:e1:0c:8b:
         24:13:52:9f:16:92:62:de:59:20:f0:4c:db:e0:0a:7a:66:94:
         69:d3:8f:e7:3f:47:51:67:cb:8a:20:23:0b:13:85:78:42:ea:
         46:ee:68:cd:78:cb:c7:af:34:b2:1e:25:a1:09:ce:b5:21:3b:
         cf:2c:7e:02:86:a8:12:cb:d2:63:82:0a:5a:a1:5f:01:68:70:
         30:d9:25:58:4b:e5:71:c3:88:88:e3:8f:34:35:78:55:61:d7:
         64:36:3e:83:f3:35:0c:8e:ff:ce:76:e2:be:d0:22:c0:1f:ac:
         f4:dd:d0:80:92:50:59:24:a1:04:7f:0b:5c:6f:42:c9:d1:a1:
         74:a2:2a:a7:3e:48:06:64:e5:ef:00:98:4c:fd:4d:3b:0f:24:
         3f:72:57:b6:eb:51:d9:be:b2:ba:34:d2:26:0a:01:97:1f:0a:
         6d:d5:5d:8f:de:68:f2:9b:b7:f9:b2:53:ab:98:a6:63:69:6e:
         fa:aa:77:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:30:33 2025 by rpki-client