Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
File:                     V8dqgOwpEqVok1y1e2plDwPf2NI.mft (raw, json)
Hash identifier:          VYkcDMp6L3nLAjHRq4rnE1hPKSw0VCgRrVYP2EtRoA8=
Subject key identifier:   D4:B3:44:EC:E5:DC:E0:AF:08:A2:B7:B8:2E:33:31:85:3E:46:2D:71
Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
Certificate issuer:       /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Certificate serial:       019845BF70CC5BE1604319DAE58D16CC61B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
Manifest number:          0C2B
Signing time:             Sat 26 Jul 2025 08:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 08:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 08:00:30 +0000
Files and hashes:         1: V8dqgOwpEqVok1y1e2plDwPf2NI.crl (hash: TQ89HZ8LG9KwgVkpz8BAftWb1EUyKii1yrE6fqKLL0g=)
                          2: c0WcDmEa-I3e6oejtEWp5xBEKhk.roa (hash: gv5nn6HuxLobRhPQtfW9QLB/XRSSApZbiTBp/n9p8eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:bf:70:cc:5b:e1:60:43:19:da:e5:8d:16:cc:61:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
        Validity
            Not Before: Jul 26 08:00:30 2025 GMT
            Not After : Jul 27 08:00:30 2025 GMT
        Subject: CN=d4b344ece5dce0af08a2b7b82e3331853e462d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:fe:93:7a:54:b6:98:e1:d7:5f:4c:80:c7:
                    7a:6c:ce:3f:a1:2b:53:9b:28:6b:02:50:35:c1:5f:
                    24:f6:61:b1:fc:2c:08:cb:42:7a:80:82:2a:e1:27:
                    2c:e4:c0:3e:d4:3f:35:7b:96:b8:01:5f:14:ae:54:
                    ca:09:c8:24:cb:3e:83:9d:0f:29:ce:94:97:64:34:
                    2d:98:4a:8c:58:76:42:21:6d:6b:91:59:6e:23:5d:
                    96:d4:d4:6d:b8:4a:df:33:01:f4:b7:b9:e7:1c:0a:
                    26:37:08:b8:9f:1c:ad:66:d2:78:c0:86:84:22:2c:
                    0e:42:ae:10:d7:58:a9:6d:cc:23:e9:a7:82:8b:17:
                    15:5b:36:e6:22:06:e9:73:ac:90:be:0b:f0:6a:48:
                    e4:81:45:2b:96:8e:ad:ba:5a:3b:22:c5:81:d5:a8:
                    6b:57:22:93:f8:bf:c0:3f:ff:bd:e2:ff:49:65:12:
                    d1:bf:26:d1:75:8b:96:64:44:9a:ce:50:22:81:5c:
                    7a:8b:c0:b7:ed:ef:8e:a9:09:08:22:73:6b:61:f4:
                    c0:a3:6b:ec:1d:cd:33:6b:b7:d4:d9:16:f1:9e:df:
                    85:cc:1a:0e:e7:95:ff:3a:20:06:94:27:97:36:6c:
                    7b:f8:17:4e:0a:b9:25:63:f4:c3:bc:7e:33:f9:40:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B3:44:EC:E5:DC:E0:AF:08:A2:B7:B8:2E:33:31:85:3E:46:2D:71
            X509v3 Authority Key Identifier:
                keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:81:f0:c8:bd:38:bb:58:74:10:0b:ab:a1:19:ae:11:b8:ab:
         d7:e7:e6:41:21:88:d7:cb:82:e2:02:9e:79:97:9e:68:32:4a:
         0e:87:6e:a6:33:45:17:e6:3d:e9:fc:93:dc:9a:5a:e6:de:1e:
         81:eb:ef:ca:e0:16:33:aa:99:a1:71:16:ad:a9:fe:44:34:74:
         4e:8e:02:c7:d4:39:52:d0:04:77:94:ef:3c:15:08:45:9b:e0:
         56:c0:5d:f5:92:d5:43:65:bc:a0:1d:ae:75:4d:58:ac:c4:21:
         a2:d3:19:08:c3:e1:7c:90:92:7d:7e:c7:d7:6d:bf:cb:97:bf:
         b2:73:4f:39:43:f1:32:d9:03:f4:12:b9:67:9c:27:e6:e7:1d:
         14:f3:15:ff:bf:55:58:9d:d4:5f:1e:ee:0f:1c:3c:b6:8d:6f:
         9a:ec:44:b2:8b:04:dc:53:3e:fc:43:b4:91:5b:f6:39:50:0d:
         b1:3c:ef:70:05:fc:b4:f8:6a:e6:11:8a:23:30:8b:56:fc:05:
         69:f9:6e:ee:c2:c4:44:6a:df:52:bb:6e:00:d5:e2:8c:7a:4c:
         0a:bd:08:30:38:bc:ff:8a:07:c1:91:70:1f:16:2e:fc:6e:7d:
         11:ee:30:72:84:e8:65:bf:59:29:b1:ec:bd:7c:f4:ca:6d:23:
         22:d8:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:17:08 2025 by rpki-client