Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File:                     dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier:          G2JkfkF69b6/70cfEWGkC8JonhWRpzME5HxzQLIuK5Q=
Subject key identifier:   26:F7:59:B0:EA:C6:6D:D6:11:C7:67:8E:27:35:12:5F:10:7B:64:56
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer:       /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial:       01983B051A83A3F900B342881881B998F7A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number:          09DF
Signing time:             Thu 24 Jul 2025 06:00:46 +0000
Manifest this update:     Thu 24 Jul 2025 06:00:46 +0000
Manifest next update:     Fri 25 Jul 2025 06:00:46 +0000
Files and hashes:         1: K2WTfNgGTgwLI8daJh2SwttMQ5w.roa (hash: kg2DGvsW5/IaD92YzOAMjHp8f1xtHOO7qcNliTfoKss=)
                          2: Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa (hash: pUR0ufw079uWlFJjSqIiEUz3vris4ZJFN/dXSNPf1bk=)
                          3: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: P32vNyOml/X2MNljun4i+soKWLMrwPhtG/6JG17YcRM=)
                          4: gYinuUkN5-ijpn1rqGGqGii0p6g.roa (hash: lpzZyTHLuJfHa94o7AaeZ6AmXeDKqlRwU9KcssuE8rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3b:05:1a:83:a3:f9:00:b3:42:88:18:81:b9:98:f7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
        Validity
            Not Before: Jul 24 06:00:46 2025 GMT
            Not After : Jul 25 06:00:46 2025 GMT
        Subject: CN=26f759b0eac66dd611c7678e2735125f107b6456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:10:01:73:65:b1:b2:ca:28:3c:56:a9:bd:
                    c0:76:b1:2d:80:4e:fd:72:ad:d7:d7:61:c0:72:1d:
                    f4:85:fd:c3:20:73:74:cd:ed:40:4b:b0:8b:31:75:
                    39:d4:be:13:64:ed:cb:3f:69:0b:e2:ab:03:91:3b:
                    28:4a:2b:71:91:08:49:68:2a:78:1e:b4:d3:e1:13:
                    64:c1:24:8c:ad:d1:b1:b7:19:55:45:39:a4:4a:b0:
                    89:9c:c6:a5:97:45:82:ca:ca:1b:3d:d2:78:26:88:
                    1b:0b:b5:f3:8b:d0:a6:ee:23:26:41:d4:40:6c:e1:
                    76:a2:0c:5e:70:7e:83:16:7a:76:d6:26:cc:59:5b:
                    3a:4d:aa:61:0c:14:89:7e:a7:b3:2e:42:61:0d:c4:
                    05:b7:08:8d:da:82:02:94:24:e5:8a:63:94:f2:21:
                    9f:c9:2f:33:6b:dd:26:22:9e:3c:11:69:24:f0:f1:
                    c5:7f:13:4b:66:91:6a:d6:96:67:3d:30:29:4f:94:
                    50:39:38:26:fd:e8:e4:5c:2f:9d:5a:a7:ab:26:d4:
                    c6:31:af:0e:3f:5e:76:99:07:12:f8:45:87:30:d2:
                    b2:16:f8:f0:0a:c7:fe:37:05:23:92:b1:21:06:bd:
                    ef:e0:7e:0c:ac:b6:42:2d:d5:53:b4:bb:a4:a4:93:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F7:59:B0:EA:C6:6D:D6:11:C7:67:8E:27:35:12:5F:10:7B:64:56
            X509v3 Authority Key Identifier:
                keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:18:e2:dc:ba:37:62:19:d7:3e:5d:03:85:33:ac:ed:ca:a2:
         e8:ca:7c:64:b9:bc:09:1e:dc:51:1d:41:71:eb:a5:f3:47:8b:
         fa:79:7e:3c:a1:a7:9b:44:ba:e0:7a:be:93:49:60:91:3c:d2:
         d8:13:94:d4:3a:28:e0:ef:53:f0:f1:c4:56:b2:c2:9d:73:1b:
         47:1a:57:b8:9b:0e:9e:f4:12:7f:58:3d:5f:05:f6:f2:e4:56:
         3f:78:75:6b:1d:65:aa:23:1e:40:32:8e:1d:c7:42:0b:17:89:
         6b:4b:13:2a:86:2a:1d:85:e2:a4:87:0e:2a:5c:e6:9a:af:f8:
         0e:e6:00:81:8a:37:7c:e1:84:f5:2a:be:5c:1f:bd:3a:b2:9a:
         08:12:ff:0a:ec:f8:2c:23:91:3f:87:9d:c5:e8:34:53:c5:20:
         98:03:31:bf:2a:d5:5a:67:bd:7f:03:a3:d1:6e:af:d7:b6:e9:
         c4:bc:31:db:df:28:82:e8:eb:0c:90:cb:de:2e:14:09:dd:08:
         7e:a0:7a:a8:96:e0:f6:5d:0d:67:47:3b:e9:67:de:1a:ca:93:
         10:5b:dd:5d:56:bc:77:fb:04:6b:37:68:95:a6:71:28:bf:89:
         48:6e:26:61:95:da:75:1c:d7:a8:14:e9:10:df:f9:ad:c8:11:
         54:32:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:52:26 2025 by rpki-client