Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File:                     sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier:          30iKXBrPqqsC9ne64kYNCRC40vFQYLNhRhT5GIGQUv8=
Subject key identifier:   35:31:0D:41:48:C0:BB:B0:14:36:AE:9F:D5:6B:FC:07:FF:0D:BB:BD
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       019844E408C5B5BFD4EF28BB7D4F31FE0B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number:          0C87
Signing time:             Sat 26 Jul 2025 04:00:51 +0000
Manifest this update:     Sat 26 Jul 2025 04:00:51 +0000
Manifest next update:     Sun 27 Jul 2025 04:00:51 +0000
Files and hashes:         1: QmAm7-ckXWNCy_EyjMRgtbazq1M.roa (hash: cL7W6FgXh5+bmFrfSXRxDbf8HtHE6dFb//gf0dsJOB8=)
                          2: WdOqlklUlY-sNbaLSfkpvoRt0iM.roa (hash: nFChOa8TYCoMQ8iwf2JuylM1/1NoIavp13ZTbwdNwn8=)
                          3: kIN_jMTtiRLUszBNqKlNoyJk3dk.roa (hash: lHRqbJ9tYmnELEYhJx16n/sdjvBPGJLZ5vlonZ4KvjA=)
                          4: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: WoOTLwaRK+4Oo5j0JlrLRruCOpXtXOnUnJigsSiGGZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:e4:08:c5:b5:bf:d4:ef:28:bb:7d:4f:31:fe:0b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: Jul 26 04:00:51 2025 GMT
            Not After : Jul 27 04:00:51 2025 GMT
        Subject: CN=35310d4148c0bbb01436ae9fd56bfc07ff0dbbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:a2:29:62:b6:af:d5:5f:84:b3:39:4f:38:
                    27:db:18:94:a3:a0:3b:f3:31:ae:56:ba:02:b3:f2:
                    b3:17:48:ec:6b:c7:da:b6:55:80:f0:6d:a5:0b:a4:
                    59:5a:de:78:ba:ff:45:51:82:b0:db:d1:57:90:28:
                    1c:d0:4b:72:56:90:61:d2:a6:fc:32:38:af:f9:cd:
                    49:b4:64:c8:9b:05:14:39:69:0f:b8:5b:e3:bd:1b:
                    9a:76:ae:56:90:bc:86:2a:2d:3b:a0:03:79:68:58:
                    68:5a:e5:5a:79:8d:d5:fb:51:4b:19:54:24:08:d6:
                    f1:25:dc:47:9b:bc:f0:03:62:7f:7b:57:b5:d8:fa:
                    26:4d:33:1a:e0:4d:10:de:94:2b:93:18:9f:b0:22:
                    65:ab:8c:2a:99:0d:03:b5:04:2f:bd:9f:9f:55:28:
                    6c:54:19:af:c5:2f:49:b4:fd:38:4c:01:f1:93:a8:
                    bb:95:59:22:34:1c:dc:f2:0d:ea:ac:3f:41:60:42:
                    d0:72:0c:84:95:f2:c9:63:a3:03:98:e8:0a:32:95:
                    bb:72:a4:a6:a5:8d:02:20:40:43:69:7c:4b:c4:87:
                    b9:d0:44:88:65:2a:92:16:ef:1d:b8:e0:4b:ee:6e:
                    62:91:bf:b9:7a:a8:03:50:3a:f4:5e:50:57:b9:8c:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:31:0D:41:48:C0:BB:B0:14:36:AE:9F:D5:6B:FC:07:FF:0D:BB:BD
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a0:e8:c6:72:5e:da:54:fe:78:74:91:d0:b0:4b:6a:80:16:
         31:1e:b6:3e:9a:4e:3d:70:30:df:32:76:ca:4f:7a:61:45:a1:
         21:13:bb:c5:96:ca:a1:5a:40:ba:40:16:c4:32:10:c9:69:9a:
         fa:b7:e5:ae:f4:a0:bb:16:b5:69:d2:87:74:38:fa:0e:8d:e6:
         c8:d5:00:5c:1b:e8:3e:5a:29:b3:18:eb:c5:0c:4d:33:7f:66:
         48:c8:5f:40:da:c1:60:0e:35:e2:e4:db:ec:75:cc:05:bb:a6:
         c4:82:3d:14:f2:57:d6:7c:9d:7f:c6:e7:77:d8:40:22:52:23:
         8a:fd:bb:12:e0:86:5c:cb:c3:8f:39:3c:1f:c9:4e:39:a0:8c:
         ff:aa:a3:b6:a8:0b:cd:a7:da:4e:f7:d0:2f:ae:cd:10:5b:31:
         97:bc:8a:99:24:d5:40:ee:64:22:24:0c:d3:93:3e:a5:d9:35:
         c7:3f:83:fa:5d:ac:db:dd:01:69:1e:67:b1:4a:a4:65:c9:50:
         4b:8b:2f:b6:53:99:22:6b:21:54:91:a5:0e:96:d4:41:17:3a:
         0c:5a:8e:00:36:c1:e3:d0:7c:41:3e:b6:8b:30:83:d5:14:98:
         3a:99:4b:b0:eb:da:11:d2:b4:63:2a:8f:a8:0a:ff:b6:eb:fa:
         69:ff:60:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:05 2025 by rpki-client