Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File:                     0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier:          YCw2sVDMF6AEogKy48e5pNQwPN9IK0o1gQH/WP7p3fw=
Subject key identifier:   C1:6A:C8:7D:28:09:A9:FA:4B:DE:81:EE:A3:94:87:48:AA:9C:67:B3
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer:       /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial:       019848C04A2F8FA68738DA0DDE33B5EEC5D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number:          0DB2
Signing time:             Sat 26 Jul 2025 22:00:18 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:18 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:18 +0000
Files and hashes:         1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: Kpsc7faGv7PsRmkaBUuUI0RdqHs0wn2Cx6qlmBIY9eM=)
                          2: ED7irA7lmwh5tHPGbkFIIeJv-bg.roa (hash: Ig5tcq1zw9JQCpzSA6FZ4ETNZF6mc/oaQxjv4KTG32g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:4a:2f:8f:a6:87:38:da:0d:de:33:b5:ee:c5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
        Validity
            Not Before: Jul 26 22:00:18 2025 GMT
            Not After : Jul 27 22:00:18 2025 GMT
        Subject: CN=c16ac87d2809a9fa4bde81eea3948748aa9c67b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:72:b3:f8:68:58:a0:d2:a4:77:d2:ca:e8:26:
                    db:db:97:6e:e5:ee:2e:05:12:60:db:bd:63:48:2d:
                    de:14:28:76:08:91:2d:64:e4:ed:8b:14:64:4b:66:
                    7c:b2:c5:c2:c1:a3:01:0b:77:8c:35:30:66:bc:bd:
                    06:71:7a:b8:89:2b:de:f7:55:0d:9e:ee:4d:7a:68:
                    3c:cf:bd:19:75:f3:ff:7a:ac:3f:2b:0c:8c:d5:85:
                    ee:47:60:3f:bc:ad:4f:38:d1:b4:fb:3e:10:c0:6b:
                    af:15:f0:0e:89:3c:d9:ab:76:47:e9:75:f8:21:c0:
                    2f:ab:fd:d3:15:b5:bf:fa:09:69:ee:e0:c5:38:c7:
                    4f:51:e8:a1:b1:66:5e:6e:3a:ee:77:65:28:c1:55:
                    5b:fd:01:11:ae:65:57:0c:55:37:e8:6b:5b:99:b5:
                    f8:15:8a:ea:57:2c:50:c0:12:4e:37:b5:3e:38:27:
                    26:6c:f6:12:b3:4d:7b:35:8a:de:de:90:ec:28:7b:
                    b2:1b:e7:c9:88:89:bb:06:57:62:2f:cc:9d:84:19:
                    ac:bc:af:51:aa:71:47:84:41:08:7e:04:fe:17:00:
                    cb:9b:89:b1:57:5f:3a:60:60:f3:23:5b:f1:a9:30:
                    e8:44:c3:a5:f5:d0:8c:29:0e:70:02:96:23:20:c8:
                    a5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6A:C8:7D:28:09:A9:FA:4B:DE:81:EE:A3:94:87:48:AA:9C:67:B3
            X509v3 Authority Key Identifier:
                keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:bf:0d:18:c4:4b:22:6f:95:fc:a0:bc:2c:55:73:1a:bb:2f:
         95:0e:27:68:c7:9a:f3:7f:b0:28:d3:4f:6e:87:94:a2:b3:ca:
         81:7a:e3:47:79:26:8c:c5:a1:53:b4:fb:b0:51:85:5a:f4:bf:
         5c:e6:64:dd:06:a1:2d:c0:01:0e:5d:98:1d:5f:ae:0e:1d:c5:
         ef:ec:ae:22:d1:8b:e4:73:9d:d5:da:b8:f8:36:a1:a3:d5:e0:
         29:c6:7d:54:b5:b4:dd:89:65:59:6d:9f:07:c6:aa:a8:75:8b:
         ab:c9:d7:ed:12:6f:86:df:b9:a2:f6:64:e2:41:96:82:99:b6:
         2b:14:af:05:0e:ca:7d:84:92:aa:23:98:c8:b0:3e:cd:f5:fa:
         13:77:61:55:b7:94:b0:70:ef:17:85:8a:e7:79:db:c9:96:68:
         05:6c:67:22:2f:87:12:f1:38:49:44:6e:76:91:9d:2b:b1:c2:
         c3:9f:86:a8:2c:ba:ab:1a:9c:be:d8:7c:83:54:80:a8:43:86:
         33:18:66:24:93:75:d8:8e:f1:b7:68:f3:3a:f9:4e:f4:a3:a6:
         93:e4:b1:c0:35:ae:7a:f1:6d:70:59:9c:c9:63:e4:69:1b:b5:
         99:97:40:6f:86:eb:62:e5:4d:39:ff:f1:3c:59:d7:50:58:43:
         32:2d:b6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:52:27 2025 by rpki-client