Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File:                     d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier:          ivW8UUhYLeZhuKgtUy8836ec8LVvfGXh5YF2QX4IoHI=
Subject key identifier:   55:43:1C:78:BD:D6:C0:F9:30:B9:D1:09:4E:72:26:99:10:09:8D:17
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer:       /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial:       01984852D0864324598D19A2E30B361737C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number:          1325
Signing time:             Sat 26 Jul 2025 20:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:43 +0000
Files and hashes:         1: BIbyN6MobH1STyCEPdXKcXxO-0I.roa (hash: Os4l0m9oxr0hmnuszsL7ZwnRaiayTTQWv9r3AFurnXg=)
                          2: Bbz0bBQb7OvBUdzdUU2fR0aTHW0.roa (hash: oXnG95uJE4GWCusPMitN/8TOoOTM8j2qb4pX4QMQ5u0=)
                          3: bdDCotOAfO1kv_FK4imM3A-Vth0.roa (hash: SflKXIddgIp/qAd1Zs2morymiezh6i6wy0uu+gUqlSk=)
                          4: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: xerXR2A8Ii+e1o4+lG/ykATd7D4+HkBQYI36jnG3D3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:d0:86:43:24:59:8d:19:a2:e3:0b:36:17:37:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
        Validity
            Not Before: Jul 26 20:00:43 2025 GMT
            Not After : Jul 27 20:00:43 2025 GMT
        Subject: CN=55431c78bdd6c0f930b9d1094e72269910098d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:c9:16:54:b8:26:cd:dd:ed:f4:73:f2:d6:
                    db:ad:ad:f8:07:d9:f3:aa:bc:dc:11:0d:2b:60:0d:
                    22:b2:d8:f2:71:59:8f:ec:07:e4:6e:75:58:4b:e4:
                    f0:c7:e6:60:35:81:2e:2f:7f:54:0e:8d:41:69:9e:
                    cb:49:2e:f7:29:af:94:68:0f:05:ec:1f:b3:74:0f:
                    c5:a4:08:c8:a3:24:b4:92:d6:aa:4f:e2:c1:c0:d3:
                    22:2c:d6:dd:c4:99:fc:27:8f:c3:12:02:e1:a7:e1:
                    57:f4:b8:bc:cd:f2:4c:3a:a4:d8:82:6f:b8:51:90:
                    fa:18:45:54:55:6b:1e:70:51:77:19:21:b2:b0:ee:
                    1c:88:17:af:3e:54:50:5f:c5:40:46:59:03:0e:29:
                    5b:3a:65:58:3f:ee:4d:3f:27:70:f0:3b:26:40:42:
                    84:79:b1:6a:de:66:18:95:d2:49:f8:48:20:24:72:
                    7c:bd:10:d7:6b:2d:e6:01:84:a9:d8:32:3a:87:e4:
                    84:8d:aa:4e:b3:0f:74:ad:6d:dc:97:9b:14:45:7d:
                    b8:bb:6a:c6:b0:4c:93:0b:d2:8d:fb:1b:9c:fe:9f:
                    4c:02:b6:cf:e3:29:c1:37:07:e3:20:2e:b3:c5:60:
                    19:51:ae:d6:17:eb:21:ba:a1:ec:0a:24:36:1d:ca:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:43:1C:78:BD:D6:C0:F9:30:B9:D1:09:4E:72:26:99:10:09:8D:17
            X509v3 Authority Key Identifier:
                keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:24:7a:82:dd:13:fc:5f:2d:bb:9b:cb:32:ba:91:38:72:41:
         24:0b:57:58:aa:d9:b6:2a:16:4a:f8:e7:9b:38:12:3c:18:36:
         27:f1:8c:8d:7e:17:2c:a1:c7:cc:54:f6:41:e0:19:fb:6e:e9:
         6c:4f:9f:68:49:aa:eb:58:9c:13:45:3a:79:a4:b9:51:64:b3:
         87:38:89:c7:80:d2:dc:32:18:8a:e1:96:5e:0e:32:18:c0:2c:
         28:f3:40:36:24:ae:ca:07:82:a0:44:03:f0:7f:70:c7:6a:1e:
         d5:3d:9f:d9:4c:21:c5:98:26:68:43:04:b4:a1:96:e0:14:f6:
         53:b3:21:12:50:b2:f0:29:8c:ee:51:aa:c9:6c:7d:a5:df:81:
         a6:14:db:80:75:a5:bd:bf:e7:d9:57:29:ba:7b:01:3d:10:c7:
         c1:cc:1a:5c:dd:82:14:2b:5c:4a:ac:31:c9:3f:1c:ca:fa:0b:
         f8:70:6d:6a:94:3f:4d:7c:a6:da:75:4c:d7:d6:f8:83:a0:0d:
         0d:cd:83:01:eb:fb:4d:06:10:86:69:58:b1:c7:59:68:fe:a2:
         3a:19:af:0d:b9:4c:30:9a:03:13:48:2a:f1:3e:23:92:71:55:
         95:27:eb:58:45:6e:df:8b:20:99:f1:6b:d4:2e:ca:9c:12:43:
         34:4e:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:37:06 2025 by rpki-client