Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
File:                     MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json)
Hash identifier:          +tOLULSxpuNrbbPSklNKk63o8RrYGhM8iJjJI5kEr9U=
Subject key identifier:   C4:10:B3:74:BC:D2:9F:D8:ED:DD:08:48:3C:1B:B0:FA:E0:B2:5A:BD
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Certificate issuer:       /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial:       01982AECFA55144CDAF90D1489721D3BADD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
Manifest number:          0AE9
Signing time:             Mon 21 Jul 2025 03:00:30 +0000
Manifest this update:     Mon 21 Jul 2025 03:00:30 +0000
Manifest next update:     Tue 22 Jul 2025 03:00:30 +0000
Files and hashes:         1: BhR4gh6niMuAg5TJ32ur0BjKaqs.roa (hash: Zv2rwkQ5zJHX1INCUgBx9oQ77dKwpoY1KIJrtlNZemo=)
                          2: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: 0zNRwsQl47pLdUCDCixQlWnhL+c7GzB3aIHT1DGGGSI=)
                          3: XXRk-2utC2qSFmq343z5VXrm2u4.roa (hash: ytRglwlu3WOrTr72XPTW+Woc0VzZSF5e3VxmBUNFs3g=)
                          4: Xp6Av0k8Jw85tGpea19kV0rC7zU.roa (hash: HoTKGzCgPJaXTFRgn8HDd9Uw/rl7lFS8MklAEJByUKE=)
                          5: uaxf2AGptn0k5nSChIQ5U9I-OzM.roa (hash: bH20ytgUK7nqS56x69xVlTEkEDFzbypHFv+jFwf5Z1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2a:ec:fa:55:14:4c:da:f9:0d:14:89:72:1d:3b:ad:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
        Validity
            Not Before: Jul 21 03:00:30 2025 GMT
            Not After : Jul 22 03:00:30 2025 GMT
        Subject: CN=c410b374bcd29fd8eddd08483c1bb0fae0b25abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d7:8b:37:be:7d:21:ec:94:24:c2:08:67:2a:
                    7d:cf:7b:4c:1a:21:03:7e:cf:7a:f0:e9:29:52:09:
                    cd:b4:f2:00:24:3f:a9:5b:24:b4:b1:2c:47:c6:ab:
                    b2:98:8a:cf:12:14:d9:e8:ad:db:77:a3:2a:42:5a:
                    e2:84:a4:b6:75:46:47:62:52:47:76:d8:0f:ed:f2:
                    de:7e:33:26:bf:3b:29:81:b3:2a:a6:b0:cc:b6:c0:
                    ab:a2:10:85:58:a2:43:1f:07:d3:43:da:16:d2:a8:
                    69:f9:ec:40:12:f8:a0:ec:f4:87:71:dd:1d:27:6f:
                    9b:2d:fe:42:04:f8:df:36:ad:00:7e:cf:5e:a6:9d:
                    ce:b3:59:ef:6c:ec:4e:4f:b6:f2:66:66:5e:01:ca:
                    f1:19:6c:0a:cc:77:6d:2c:d2:6c:0e:59:92:68:46:
                    b9:ed:b6:ad:6e:e6:fb:a1:ec:37:89:97:a5:50:ee:
                    41:fb:5c:19:75:3c:de:0a:1c:29:cf:1a:bf:3b:34:
                    75:bf:83:fc:3b:5e:38:99:f6:35:cb:32:af:9e:d1:
                    b9:6c:91:c3:a0:f6:49:e5:1a:60:20:65:70:8e:a3:
                    76:02:04:ab:44:94:b2:b2:3a:42:42:08:46:a4:65:
                    a7:13:e1:22:6b:cc:99:98:42:37:25:b0:8b:da:6e:
                    f2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:B3:74:BC:D2:9F:D8:ED:DD:08:48:3C:1B:B0:FA:E0:B2:5A:BD
            X509v3 Authority Key Identifier:
                keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8a:dc:a4:8a:13:3f:b6:06:ae:a6:c0:e3:9f:89:37:5f:20:
         6f:0c:69:7a:04:9b:62:79:ae:d4:bf:e3:11:56:f3:de:d8:8f:
         98:df:6d:b8:35:c6:fa:97:bb:98:b3:aa:84:e9:57:b0:b0:4c:
         09:3e:1f:9f:c4:1b:45:8b:cf:16:db:39:8d:8d:ab:1e:f6:bf:
         5d:ad:84:7b:d6:1b:7e:24:0e:1c:f3:f9:7e:a8:33:a5:eb:c1:
         36:26:30:de:5d:28:63:25:6f:b6:ae:98:63:d4:3a:e8:3e:93:
         3f:10:3e:60:39:85:31:9e:85:6e:3c:f8:cf:ed:47:8f:3a:ce:
         2c:a1:cd:72:34:46:b8:9c:78:23:68:f5:be:28:81:05:ad:e5:
         fd:7d:06:d2:57:72:c7:21:03:4a:5f:e2:68:0a:02:10:14:80:
         83:ea:bb:52:96:5c:e5:dd:9e:64:f8:5f:98:64:c5:04:7d:e9:
         0b:86:d6:68:ae:16:b2:7a:07:49:24:90:ac:89:a9:7c:cd:89:
         08:29:25:06:a5:60:4a:46:79:29:02:b1:c8:24:0c:7b:28:5c:
         02:bb:b0:43:19:2c:e5:74:33:05:c5:77:e7:1e:68:5c:2d:d9:
         28:0f:56:34:16:48:1f:cc:7d:5a:5c:c2:cb:44:0d:6a:60:1a:
         73:89:ea:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:25:02 2025 by rpki-client