Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File:                     RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier:          a2ISLC7yvssxOeOOJo2WtdVWidEuWLyHBdn5WUR/0/Y=
Subject key identifier:   35:77:38:B9:3E:0F:06:70:69:9A:B1:6E:A3:1C:BB:86:A0:D4:39:F0
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       01983F187F83A4EFEB43708AC17863AD41E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number:          0DF5
Signing time:             Fri 25 Jul 2025 01:00:26 +0000
Manifest this update:     Fri 25 Jul 2025 01:00:26 +0000
Manifest next update:     Sat 26 Jul 2025 01:00:26 +0000
Files and hashes:         1: 6ZnfS565qYdUchLZCkFU7aS7slQ.roa (hash: 4t6UU9aRgFRSLJBVwUMaRIV03s5+6yeuigVjxM6Ktp4=)
                          2: 84g9kcbpLMOYWyAe0WNiCfk8rQ0.roa (hash: Op4AJknS0Y4sLCSDEIKA+ch9xkPiEHCr8XwgBypEB5o=)
                          3: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: ltLiOcDs3drDAXl5z8WqtN1nHVzAiF5N1DSnjzPkj0I=)
                          4: TApodEY8028DyJXWycbZvpKO2JY.roa (hash: U9oKSIIosuWZsZ0CYqCvqcMf8wzWuI0iOJauh9nwcac=)
                          5: U99JCnG6IDDb3fPb5RJU5lmsye0.roa (hash: X/Q6Sj4Oee6V3+wleBrfWWmYoSOrW6XOkN6eZj48NGo=)
                          6: UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa (hash: 50TOVRcOrToHPoin6f4jkSxKeLPlDyklnbx1BFOMka4=)
                          7: _VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa (hash: 185UhIin1qWAIQbRLAq/SfnBaaaHig76ZL9WselXS2I=)
                          8: bVG91rh6vJ7orCrWLltzoEytWu0.roa (hash: 6UY0Ua8DXjS9JwbhBNdYqbLcTNFaiJVgT0ORPNoYM64=)
                          9: d4dd63YvMop2w-g3LON2FgQkXGs.roa (hash: wFE27Pfyu6wjdlPpwECWgbJf/SI7T3ch1qMqz+WQODE=)
                          10: r5ZgGaHKIkFsDW5OTwwhK4tgAsQ.roa (hash: jLmSUGri8N356kUEE/tygoNrVgGIX4EqiZgEZdk/J6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3f:18:7f:83:a4:ef:eb:43:70:8a:c1:78:63:ad:41:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: Jul 25 01:00:26 2025 GMT
            Not After : Jul 26 01:00:26 2025 GMT
        Subject: CN=357738b93e0f0670699ab16ea31cbb86a0d439f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:77:c2:ba:fc:ac:29:21:5c:8f:3c:e9:6f:
                    ae:a9:9e:cc:38:3d:f1:eb:f1:de:40:3e:e9:29:46:
                    76:05:40:18:07:d8:bc:81:ac:41:0e:a5:f2:7a:69:
                    54:27:96:e9:70:6c:4d:6c:c0:b2:ad:df:f6:99:84:
                    4b:39:a5:fc:88:29:ad:36:ef:37:58:5d:41:eb:bd:
                    ff:d6:f7:06:5c:ca:cc:13:e5:44:e9:69:15:4b:bc:
                    c7:6a:60:58:ad:33:fe:6c:6d:d0:66:35:f2:00:41:
                    e2:98:f2:ba:47:72:d8:49:09:73:28:58:b7:0e:3f:
                    a7:6d:c3:69:6b:e7:8f:2f:60:2c:f8:3b:05:7e:fa:
                    cc:3f:de:b1:4f:97:13:e8:9c:bf:f6:96:33:c8:3f:
                    c9:aa:ad:23:3c:f9:25:6f:be:8e:ac:98:60:cb:f2:
                    19:7a:b6:ba:81:b6:68:3a:2f:4e:9f:a3:ab:9b:88:
                    50:07:13:01:af:f4:53:a6:e3:ad:87:9c:e9:5f:e2:
                    98:aa:6b:0e:62:d6:5e:e4:bf:4b:90:a5:54:3a:22:
                    bb:d7:22:78:5c:98:2e:d8:e6:48:88:d3:d5:a2:f3:
                    c7:51:06:7b:18:52:4f:ce:bb:e7:56:d2:30:cc:04:
                    db:4f:f8:cb:5c:5b:fa:6b:5f:a5:d6:2c:a9:0f:05:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:77:38:B9:3E:0F:06:70:69:9A:B1:6E:A3:1C:BB:86:A0:D4:39:F0
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2d:63:dd:90:bd:26:c0:07:28:a6:05:3d:6e:28:24:71:d2:
         88:ac:41:a4:36:40:30:a2:6a:f6:67:d1:49:4d:7c:90:bb:62:
         7b:db:65:58:58:91:04:5c:eb:24:26:c3:7d:a3:ec:66:38:51:
         66:7d:f9:aa:99:49:c6:f5:ad:3f:45:8f:b9:0b:55:ba:64:3d:
         1e:30:8c:e9:dd:ea:32:b0:6d:6c:4e:a4:0a:c7:33:a3:08:17:
         df:48:d2:a5:61:17:01:aa:0b:b7:b5:82:1b:f7:34:7b:1d:33:
         09:4a:23:c8:6c:69:61:f0:15:46:ed:00:c4:20:da:d5:1d:7d:
         55:df:ff:d2:29:88:81:9d:01:e9:11:f5:d6:dc:8e:d6:d7:95:
         3c:a6:6d:b0:d6:35:46:6f:5d:e7:49:b9:4a:eb:1d:c0:d0:b2:
         c7:d1:b5:18:e0:f2:fc:8f:c5:68:84:95:7d:85:19:54:03:4c:
         51:87:e4:e2:2c:d7:c6:b6:47:c4:d3:49:71:f0:8b:a5:08:50:
         50:48:91:74:12:36:39:d1:d2:38:04:42:6f:2a:5c:4d:dd:ce:
         db:f7:ed:8d:5c:f8:90:b5:7b:1b:88:e8:c8:1b:a7:20:75:72:
         4a:af:12:34:64:45:2b:d1:fe:59:ad:5c:5f:0f:3e:1a:8c:ac:
         12:da:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:56:58 2025 by rpki-client