Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
File:                     M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json)
Hash identifier:          075m7peOLy8IcZArg3ALL0hy2C+5fHlLMd22uOcV3gM=
Subject key identifier:   C7:76:9B:EA:E6:B3:18:03:9F:EC:E9:FE:CC:4D:16:4D:28:C8:F9:6E
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Certificate issuer:       /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial:       019854FC7B1ACDE0CF4889DB6CE6EDA674EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
Manifest number:          0F1D
Signing time:             Tue 29 Jul 2025 07:01:29 +0000
Manifest this update:     Tue 29 Jul 2025 07:01:29 +0000
Manifest next update:     Wed 30 Jul 2025 07:01:29 +0000
Files and hashes:         1: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: AR/2hOOVgo7Ao5tXySiPgHRthWD93tlgcrmKH9aD1CU=)
                          2: dXRP_DXzvkSVasQi7xjSi_GeSe8.roa (hash: e9TN5cLdjdYdVfizmweJUa1TiVL/jCcB00INSV37pZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:fc:7b:1a:cd:e0:cf:48:89:db:6c:e6:ed:a6:74:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
        Validity
            Not Before: Jul 29 07:01:29 2025 GMT
            Not After : Jul 30 07:01:29 2025 GMT
        Subject: CN=c7769beae6b318039fece9fecc4d164d28c8f96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:b9:21:06:41:6b:31:af:3f:21:ad:2d:ba:
                    c7:5c:ec:2f:eb:db:e4:c5:9b:c0:2d:e7:56:d6:3b:
                    af:55:a5:33:8a:f2:82:52:a7:99:71:9b:27:c7:d3:
                    fd:fe:f9:f2:0e:fc:bd:59:4f:c4:59:e8:79:a3:bd:
                    fc:c8:ee:22:1e:51:d5:63:44:3c:a4:3d:ff:30:75:
                    17:cc:9e:1e:cf:8f:15:2c:69:fa:44:2c:75:a2:5f:
                    7e:5d:06:7b:53:75:92:c2:d2:79:a7:e2:1d:3b:fd:
                    8f:7b:ee:6d:8e:d6:f8:6f:b4:36:df:70:fe:6e:63:
                    c4:78:1d:00:80:52:3f:35:27:26:fd:81:03:f7:0a:
                    ee:78:b2:3e:af:ba:56:e6:6a:6f:e2:14:50:39:ac:
                    d5:1f:50:aa:89:05:9f:d2:7d:dd:dd:7b:76:05:7a:
                    ab:59:9a:72:18:e5:49:97:ef:1e:2f:20:ff:0a:9c:
                    00:68:d6:6e:89:7d:6e:bb:2c:d8:ec:de:ee:0c:34:
                    9d:f3:8f:01:4a:24:45:c8:63:1c:f8:b3:5f:90:09:
                    f6:98:88:6f:00:bd:25:6c:29:ca:31:f9:3e:70:2c:
                    6e:70:48:c8:9b:e6:c6:c4:62:dd:b0:c7:cf:50:30:
                    ee:ac:59:83:a1:f3:b7:1b:78:ab:ea:fb:a8:3a:15:
                    34:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:76:9B:EA:E6:B3:18:03:9F:EC:E9:FE:CC:4D:16:4D:28:C8:F9:6E
            X509v3 Authority Key Identifier:
                keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b6:e7:21:68:fb:3e:ef:da:bd:fb:01:73:5c:fb:3e:f4:4f:
         0f:6f:94:41:c1:15:d0:dc:fa:be:a1:ab:d8:7d:28:d3:d5:e2:
         c5:16:8a:de:7d:33:03:98:c1:a3:01:a1:24:c8:de:c0:28:51:
         59:f7:45:ba:9e:a0:97:4b:6f:55:2e:1b:14:74:31:08:ed:3d:
         07:14:ff:71:a0:07:4c:37:7a:82:09:17:eb:80:0e:db:bd:29:
         be:ad:ca:c2:5a:2e:74:ed:1e:ee:fc:3f:e2:b3:5a:07:61:e6:
         da:da:5a:5f:48:11:28:87:a9:ef:65:f8:8f:06:cf:9c:b3:20:
         ab:da:8f:1a:7c:f8:d4:8c:58:79:57:00:a8:05:f8:06:ba:f0:
         4b:55:39:27:cc:e6:cc:64:40:78:5d:88:c7:92:ec:80:e1:0f:
         f7:c1:5c:4a:60:1b:b0:20:14:ec:23:3a:96:aa:dc:06:88:be:
         b3:9d:57:e5:49:ca:6d:91:e3:a6:8f:90:2c:44:01:16:3a:77:
         ea:94:93:c5:09:96:71:45:72:e3:00:a6:1f:2f:95:bf:38:45:
         ac:30:83:ba:fe:c2:f7:5c:ff:a8:67:4c:2a:54:d2:13:e7:25:
         c0:8f:73:ff:d9:7f:ce:78:d3:a5:e6:34:62:46:3b:eb:9f:14:
         56:d3:a2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 09:59:07 2025 by rpki-client