Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File:                     ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier:          ft+tqyufJpjVH0Hii5OhkKVCGLtPargRd67cLZqs7uU=
Subject key identifier:   DB:FD:97:34:8C:7F:92:FE:FA:0D:F0:5C:53:F1:56:0B:FB:24:6D:22
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer:       /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial:       019849D32107410A54C364E0C0BA4DF5965C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number:          0745
Signing time:             Sun 27 Jul 2025 03:00:29 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:29 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:29 +0000
Files and hashes:         1: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (hash: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=)
                          2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: f02mQGgXgS9jrhc9mW0v1MbnFWLvt03vFOTA3NNhK4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:21:07:41:0a:54:c3:64:e0:c0:ba:4d:f5:96:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
        Validity
            Not Before: Jul 27 03:00:29 2025 GMT
            Not After : Jul 28 03:00:29 2025 GMT
        Subject: CN=dbfd97348c7f92fefa0df05c53f1560bfb246d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:24:83:17:9f:f2:9d:1a:f2:fe:bf:2c:a6:
                    9e:2e:32:d1:7e:66:1a:8c:72:7d:16:bd:20:06:c8:
                    e3:8b:bc:37:0f:dc:b0:07:00:9d:77:f3:5b:b1:66:
                    eb:18:19:01:3c:72:8f:bc:67:a0:72:64:ed:d7:c5:
                    d2:36:64:0b:0d:8f:41:b9:39:65:fd:44:28:2b:6b:
                    b6:4f:2e:b0:80:34:d1:20:2c:f0:b2:20:26:c8:24:
                    52:b2:fe:ab:34:0d:ab:66:fd:24:4a:2c:97:f6:35:
                    8f:99:47:a7:40:15:a3:e2:79:60:ea:2a:4b:57:51:
                    b3:33:a7:09:17:87:52:67:e0:d2:ed:5b:74:b8:27:
                    ca:e6:da:9d:cb:1d:a6:5b:5d:59:08:ab:75:ca:dd:
                    88:47:87:e4:b2:ba:1a:22:29:b6:20:65:31:2a:29:
                    40:c0:c7:85:3c:59:90:9e:37:6d:8a:a0:12:47:79:
                    b0:f8:96:a4:32:bb:24:47:58:a7:48:0e:c3:ef:f2:
                    62:0b:66:b4:b8:15:c6:cd:48:3e:95:ff:b3:05:42:
                    16:4a:61:9e:67:ee:fd:2c:6c:ec:07:43:90:84:2e:
                    c2:34:77:43:5b:01:62:a1:8f:02:8d:b7:c7:ba:1d:
                    8e:54:dd:e6:00:d5:6f:1a:57:62:c8:7c:18:c8:da:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FD:97:34:8C:7F:92:FE:FA:0D:F0:5C:53:F1:56:0B:FB:24:6D:22
            X509v3 Authority Key Identifier:
                keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:25:df:9e:f3:6a:a6:75:df:e8:80:95:b2:5d:18:90:a3:1b:
         eb:6d:a0:37:b6:40:c8:f4:85:92:f1:44:f6:07:4c:5c:bc:8b:
         9b:2c:0c:51:bd:a2:8e:38:33:e8:82:7e:dc:c8:10:b0:a6:f4:
         c4:17:8b:9e:9e:1a:6b:05:7c:32:e1:5f:50:41:f5:eb:b0:2b:
         ad:64:4d:7f:ee:ad:93:07:cb:4e:2b:0f:c4:a6:5c:79:c4:58:
         d5:dc:a7:f3:17:3b:1f:8b:fc:0a:f5:0b:4b:1d:09:bb:25:d8:
         be:f1:b1:8e:d8:c5:90:09:f9:63:db:ca:06:8c:93:01:f0:73:
         8e:11:34:78:c6:18:4b:51:39:ec:ea:ec:8e:91:94:e5:50:55:
         78:da:dd:e8:34:05:0d:79:a7:c2:99:ae:5e:05:9d:f5:aa:af:
         fc:27:ed:a6:a9:70:bc:f6:32:67:75:40:1e:33:3d:ef:15:b6:
         3c:c6:62:98:0c:d9:08:72:c1:bd:b1:b4:ae:15:35:51:df:69:
         8f:6a:d5:06:b5:ec:4b:78:ea:87:26:b4:10:fb:57:de:1c:7f:
         55:89:91:9b:f4:2b:72:48:61:af:13:25:b5:fe:ba:46:ea:0d:
         6c:ef:2d:bc:50:32:e8:fd:eb:8f:f6:8f:39:c6:5d:1d:ab:90:
         21:35:10:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:11 2025 by rpki-client