Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
File:                     0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json)
Hash identifier:          WYovIkQj/HsuFQucEWqRR0ORrdeSJC10gRUcUcCTwBM=
Subject key identifier:   20:33:EA:F2:48:D0:73:C7:F6:A0:8B:63:ED:78:EE:54:D6:22:04:B3
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Certificate issuer:       /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial:       01984AAF0BA67E41988B50EDE058E335B6BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
Manifest number:          0DC6
Signing time:             Sun 27 Jul 2025 07:00:42 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:42 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:42 +0000
Files and hashes:         1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: npo/RrySBqf+W/RyAwJc+5xP+SciUgUVF6j2FsGZG3A=)
                          2: iNP53awYopMvAC4_B7BQl71kOxY.roa (hash: bB0RVg76/44F7S9NnPgzE3dfYBZqeAvXewkbyz58CrI=)
                          3: lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa (hash: H6uKA8IXZMicdWaKzhjJe9pvq8QiwubQ+Jp2iPiiq2o=)
                          4: tO7FKCFax-gtGeKJuusgZ6pHQQ8.roa (hash: o1Lh17vyaKAVv+dEziVl9qAFWYzZNADmVMYgNFzVQxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:0b:a6:7e:41:98:8b:50:ed:e0:58:e3:35:b6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
        Validity
            Not Before: Jul 27 07:00:42 2025 GMT
            Not After : Jul 28 07:00:42 2025 GMT
        Subject: CN=2033eaf248d073c7f6a08b63ed78ee54d62204b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:d1:fc:55:09:fc:6a:5a:d2:0c:91:7e:77:
                    85:70:54:fd:a5:74:5f:50:1a:13:73:c7:a6:2f:b1:
                    c2:e0:aa:a5:40:63:82:9b:b5:07:54:90:86:17:16:
                    75:1f:36:28:d8:3e:bf:22:25:d3:c0:bc:cd:cc:fb:
                    c9:63:7b:a4:b7:b5:d4:07:25:ae:d8:3f:ce:47:bc:
                    9e:6e:8f:ee:61:45:d0:10:27:6a:f7:9b:1a:e5:a4:
                    e1:57:38:eb:af:2e:70:7b:64:a5:42:69:55:f8:57:
                    cb:3c:cc:f4:a0:cd:90:4b:a2:de:39:3d:48:e8:e8:
                    88:60:c4:14:e2:c7:f9:65:38:e6:23:c1:1e:a7:f2:
                    2a:a3:73:e8:d1:6d:61:ee:8e:f9:27:32:ff:07:98:
                    35:b8:26:c3:1e:a7:c9:ff:8b:65:3b:67:cb:b9:4f:
                    bc:65:49:e0:ab:52:d5:39:80:fb:72:d1:fa:d1:17:
                    8a:54:33:4b:4a:49:1b:d6:4f:e1:f3:9e:0f:cc:5d:
                    c1:16:a7:1f:47:28:b3:06:73:f1:6b:a0:cc:50:dc:
                    7c:ba:89:b8:39:c8:5c:66:0d:1b:47:f1:55:81:5b:
                    73:2d:55:21:ea:2f:70:06:2f:8d:68:16:85:2e:10:
                    12:b0:46:38:24:27:2f:42:fc:b5:22:e7:f6:5d:ac:
                    dc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:33:EA:F2:48:D0:73:C7:F6:A0:8B:63:ED:78:EE:54:D6:22:04:B3
            X509v3 Authority Key Identifier:
                keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d6:07:48:1e:48:63:4a:12:9c:52:78:bf:77:c4:65:91:e7:
         22:e2:bb:39:88:c6:e2:d3:7c:2a:8d:b1:dd:82:6a:ce:5e:58:
         48:6f:2f:9b:e7:da:37:b4:0a:c9:04:e3:70:9c:e0:e0:93:4f:
         23:f5:bf:e6:44:01:c4:be:07:51:89:f1:ff:b2:bc:06:54:03:
         44:e4:c5:7e:62:87:4b:fb:40:d4:86:87:08:ca:f7:2e:de:29:
         e7:a9:62:61:da:87:f9:d2:2b:b2:16:54:1b:9f:06:c5:05:e8:
         0b:1a:8b:60:0b:af:b6:36:84:fb:9b:8f:ba:af:97:46:9c:90:
         70:e6:9f:82:c6:ab:69:0d:34:cc:09:35:81:1a:fb:16:11:5e:
         28:f0:24:a0:02:f5:5f:86:07:41:16:f8:8f:0a:63:15:c3:b4:
         93:a4:51:2a:98:60:bb:b6:fd:03:5d:a8:1a:24:d9:3e:ee:93:
         2f:9e:49:f3:dc:18:bd:a8:d3:02:58:0b:89:f6:61:cd:ef:bb:
         fa:58:0f:12:fb:75:81:61:1c:0c:9a:94:22:8d:94:a1:63:ff:
         f9:40:c3:e1:4e:85:3b:ec:e8:c8:3f:c1:af:38:eb:b4:95:9e:
         a4:a6:44:04:ed:18:d2:52:f3:5e:0f:28:15:98:be:40:83:8d:
         58:20:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:45:25 2025 by rpki-client