Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File:                     dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier:          8ihT/BrFVbOneAZ9S1YlLyTnzwnRQ9RGxNSxB75qvco=
Subject key identifier:   DF:0C:F8:4F:0A:5C:3B:BD:A5:B2:76:7C:AB:88:C1:B9:52:78:DB:B0
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       01984A779F0C265F92797EBDCECAEB9F2022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number:          0A4F
Signing time:             Sun 27 Jul 2025 06:00:10 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:10 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:10 +0000
Files and hashes:         1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
                          2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: 9g81/XB1c6cDgGQ3tqTKre5POPvGcrXS+67DTgmV2Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:9f:0c:26:5f:92:79:7e:bd:ce:ca:eb:9f:20:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Jul 27 06:00:10 2025 GMT
            Not After : Jul 28 06:00:10 2025 GMT
        Subject: CN=df0cf84f0a5c3bbda5b2767cab88c1b95278dbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:58:58:f2:7a:db:8d:0e:01:bb:65:d5:bb:
                    cb:bc:a1:8b:df:dd:57:99:aa:4d:99:82:bd:eb:d9:
                    9c:24:8d:b8:2c:6b:3f:e5:15:6f:15:be:3b:fd:3b:
                    be:77:bf:da:7b:71:b6:f9:c7:2a:03:bf:3b:a5:9e:
                    12:c8:f9:66:47:8e:2e:5c:68:0c:ca:93:b1:14:0a:
                    a6:22:6f:1f:07:2f:ad:35:fb:18:41:05:74:57:e3:
                    fc:ab:c9:2a:eb:93:04:43:65:d3:ee:31:2e:2d:8a:
                    12:b1:bd:d5:b8:a3:16:80:65:0a:7f:c5:1a:80:6f:
                    80:5a:61:e0:e9:96:94:91:ea:bb:14:69:8c:bd:be:
                    f0:c9:42:b6:b8:7c:56:22:42:53:d2:74:01:cd:72:
                    62:b4:6d:a2:7a:7e:3f:87:4e:69:25:ef:8e:e5:c6:
                    61:0b:d3:cd:22:b3:25:13:5a:24:30:cf:a8:c5:e8:
                    e9:43:b6:4c:c0:ae:97:e2:7f:91:f0:45:af:ef:1e:
                    61:2b:77:89:0b:b9:68:72:f6:f1:65:c5:ff:f9:59:
                    cd:69:5b:f7:42:6e:f6:ed:68:5d:87:38:01:28:17:
                    3d:d2:8b:9c:45:5b:44:d3:75:b4:b2:c7:df:5c:1e:
                    d8:b2:4c:90:77:c9:d9:53:a4:a5:d2:c2:fb:31:2b:
                    9c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0C:F8:4F:0A:5C:3B:BD:A5:B2:76:7C:AB:88:C1:B9:52:78:DB:B0
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e7:57:e2:6e:f1:08:6f:bc:d5:0a:a6:14:24:fb:d6:ab:5c:
         24:92:e9:e5:24:5d:8a:9c:8e:f0:90:1b:d3:db:f6:a4:6d:c3:
         c4:5c:c2:34:22:b4:70:13:25:da:ec:00:40:0b:11:3e:61:e8:
         90:eb:05:47:d8:b7:ee:b1:14:dd:da:ad:20:97:a7:c7:ab:1e:
         35:07:e6:c1:8d:3a:77:25:ba:52:5b:33:15:ea:b5:ee:1b:64:
         76:98:d7:7f:c5:7d:30:d1:51:13:01:c6:e8:83:31:09:21:ac:
         54:ee:ca:2e:f0:f6:28:08:5a:1e:bf:8a:f5:cd:15:e6:32:d0:
         ca:b1:cd:73:8a:24:99:03:e0:1a:52:b2:16:ae:53:d6:63:6d:
         ad:32:cf:dc:30:bc:f8:0c:00:f2:28:30:73:20:fa:d6:30:2f:
         69:1f:00:7a:7d:7e:9b:10:14:57:e1:e9:55:12:f7:17:a3:4e:
         64:fa:cf:62:f0:fe:10:38:82:52:d5:3f:4f:b0:59:da:db:8c:
         8a:89:8e:ec:19:57:1f:a5:87:48:38:3c:8e:6b:39:3b:6e:3a:
         0a:f1:ee:68:d2:bd:d0:fc:13:7e:5d:07:23:79:e1:ab:21:80:
         cc:97:68:d4:9f:8e:1c:b7:11:dc:43:b9:0f:27:5b:6b:b3:18:
         f9:7b:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:21:54 2025 by rpki-client