Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File:                     dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier:          AYQM+RadfJBALMpTFg9fjTZhYD0Oe+r4vjoiDA+iDuQ=
Subject key identifier:   4C:21:8F:3B:0C:C2:E9:8B:21:DA:82:D3:F5:AA:E1:98:CC:7E:39:DB
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer:       /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial:       01983EE14F9898327B52E7753474A639FDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number:          09E1
Signing time:             Fri 25 Jul 2025 00:00:09 +0000
Manifest this update:     Fri 25 Jul 2025 00:00:09 +0000
Manifest next update:     Sat 26 Jul 2025 00:00:09 +0000
Files and hashes:         1: K2WTfNgGTgwLI8daJh2SwttMQ5w.roa (hash: kg2DGvsW5/IaD92YzOAMjHp8f1xtHOO7qcNliTfoKss=)
                          2: Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa (hash: pUR0ufw079uWlFJjSqIiEUz3vris4ZJFN/dXSNPf1bk=)
                          3: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: b1Kq4VaFXsiabc8t4R/fcKoFSW5R4Abn0CVz0mJLdck=)
                          4: gYinuUkN5-ijpn1rqGGqGii0p6g.roa (hash: lpzZyTHLuJfHa94o7AaeZ6AmXeDKqlRwU9KcssuE8rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:e1:4f:98:98:32:7b:52:e7:75:34:74:a6:39:fd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
        Validity
            Not Before: Jul 25 00:00:09 2025 GMT
            Not After : Jul 26 00:00:09 2025 GMT
        Subject: CN=4c218f3b0cc2e98b21da82d3f5aae198cc7e39db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:e8:89:33:76:b0:3c:43:22:f5:29:a5:54:
                    96:30:ee:9a:24:ce:b1:65:76:ed:70:19:b7:08:9c:
                    46:85:b6:51:59:8f:88:d9:85:55:84:85:9f:f1:6b:
                    b5:d4:eb:ee:1e:07:d5:28:f7:07:ca:d1:df:e3:0a:
                    47:14:be:46:b4:e8:5d:d2:62:71:67:8c:7a:fb:a9:
                    9b:a9:16:de:b5:30:2c:15:f9:91:08:be:49:35:b1:
                    9a:9c:99:82:0b:9d:01:d9:2d:14:2a:af:60:fe:de:
                    d2:19:37:01:44:21:01:f1:6f:3b:56:ee:e5:78:09:
                    35:6f:95:9a:5e:ea:ae:d8:d1:b2:78:ec:75:63:f6:
                    c8:df:44:49:7f:07:86:bb:96:5b:d5:1b:0c:10:0e:
                    f4:b4:f9:5a:2c:68:13:1b:84:0a:54:d2:9b:9e:ec:
                    68:52:41:6d:a5:3b:3b:8d:02:e1:d1:e7:a6:ad:d5:
                    56:14:23:02:30:3b:75:ea:62:a4:d7:ff:3c:09:a4:
                    c4:4a:f2:42:7f:b4:bc:27:69:ea:99:c3:16:50:3a:
                    e4:1c:84:ca:a5:f1:bf:7e:b7:29:0f:4c:4c:23:7b:
                    74:5e:33:8a:1a:cb:89:39:d5:8f:8b:44:10:fc:fb:
                    0d:82:0f:6b:19:a0:fa:6d:72:53:f1:c6:2e:c3:4d:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:21:8F:3B:0C:C2:E9:8B:21:DA:82:D3:F5:AA:E1:98:CC:7E:39:DB
            X509v3 Authority Key Identifier:
                keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:d5:a6:6c:c1:5c:68:06:c1:e2:91:fc:4e:76:a6:e3:59:
         4e:79:9a:47:1f:ca:f7:95:e4:2a:de:94:94:5f:70:8c:6c:e4:
         14:51:7f:ab:36:83:32:dd:55:d0:2b:e5:fb:3e:1d:98:34:09:
         d3:3d:66:2f:2f:1e:29:4d:79:9c:f8:20:a8:5f:d2:79:48:8d:
         f5:85:d4:68:cb:c2:ae:fe:c6:9b:a0:ce:43:cf:e1:ae:a8:37:
         35:23:91:99:2d:13:d9:bf:eb:93:dc:d3:80:98:a1:47:ad:80:
         60:3b:26:c9:e1:d8:cb:ab:1d:19:50:81:bd:f3:3b:08:2b:9f:
         6c:ae:91:30:6d:4c:b9:4b:62:ff:7e:33:0e:99:b8:cd:3d:2b:
         c6:35:ae:d3:c4:ae:3e:c4:ff:c8:63:f5:ee:58:6e:aa:a9:86:
         cf:d3:a1:23:26:3d:74:b6:1f:56:0b:e7:fd:c4:03:13:87:17:
         5c:bd:18:e0:ee:9f:83:0a:dc:ab:ed:50:5a:a6:42:9a:9f:30:
         97:4a:2b:22:dc:72:ec:b8:f1:e3:f9:93:b7:da:04:d7:24:2a:
         d8:f7:67:15:37:e8:15:44:ac:7e:c0:1f:53:06:d4:37:4a:a3:
         94:93:b9:bc:a6:79:86:dd:47:db:a6:50:c9:fd:99:0f:91:8e:
         4c:03:e9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:13:37 2025 by rpki-client