Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
File:                     DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft (raw, json)
Hash identifier:          FkdPhxUclr4tqIypSyflUT+HNRAE/BqzWLekIMwaND4=
Subject key identifier:   2A:DF:A9:E3:4E:49:B9:E7:56:06:F1:D2:70:AB:BA:15:82:0A:1A:C7
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Certificate issuer:       /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial:       0198499BEB67B8C8903D13A690A948795BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
Manifest number:          15AF
Signing time:             Sun 27 Jul 2025 02:00:11 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:11 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:11 +0000
Files and hashes:         1: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl (hash: U9h642TjvjDIvIYW+mB6XnV3R9EIrdbPzaoQqDlW38s=)
                          2: Ep2Tt2fI9ZnXq9dEoGDimlfX8vk.roa (hash: Yxb+HnJ6SVbEvdXrvuy0S0wlJigO7ITirWOkyZwJCfc=)
                          3: NsbQLlxjRX4R8d6qC52Mg0zJJ8I.roa (hash: 8GOI4hJ7xP6rg0LIYF04KTpO9lNuSPc9P1fdRwgO288=)
                          4: _Sk86eGU6RbYb2vHgW0Ui6wMfs0.roa (hash: Avs1rLJgkMJRxv1FINcH2aH5zw28kBN1QbSOsvT0vZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:eb:67:b8:c8:90:3d:13:a6:90:a9:48:79:5b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
        Validity
            Not Before: Jul 27 02:00:11 2025 GMT
            Not After : Jul 28 02:00:11 2025 GMT
        Subject: CN=2adfa9e34e49b9e75606f1d270abba15820a1ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:d9:25:49:dd:38:64:ed:51:cb:9d:31:b3:
                    a1:03:03:83:be:66:f9:b7:ad:fe:04:48:53:ce:3b:
                    84:bc:f9:30:f7:1d:45:b5:f9:e6:12:6e:17:28:5e:
                    eb:9e:a5:c2:e5:bd:70:3a:9d:2e:80:f2:17:94:74:
                    12:67:f8:32:5d:e7:1c:09:ac:6b:37:20:ab:4d:4a:
                    85:e3:b8:93:19:cb:dc:78:94:8b:bc:4a:cf:6e:1f:
                    b7:b9:9c:c2:99:ec:49:a1:41:a8:4f:4b:34:f5:05:
                    9f:d8:b3:e1:0f:40:7b:5c:9a:78:62:03:92:ed:7e:
                    9a:19:75:8a:92:a8:4b:55:68:72:3b:17:b0:3c:e3:
                    8b:16:00:77:47:16:21:66:b9:a4:79:14:d5:41:32:
                    1c:ff:ab:b5:4e:f8:21:87:21:28:c2:8e:6d:37:72:
                    8f:b5:c6:5e:0f:2f:df:25:88:2c:89:ab:75:4b:58:
                    42:e5:3b:f7:a4:27:60:bd:3f:aa:cb:1e:da:f5:39:
                    5e:b7:85:d7:a2:e5:18:d2:d3:1a:82:8f:78:87:46:
                    75:01:5e:e7:0e:02:2d:ae:55:22:d5:a6:63:7f:77:
                    80:d5:43:04:03:0c:76:d7:84:df:0d:28:93:4d:84:
                    79:2c:11:97:ac:26:ca:a3:6e:fb:15:1a:b8:7e:f6:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DF:A9:E3:4E:49:B9:E7:56:06:F1:D2:70:AB:BA:15:82:0A:1A:C7
            X509v3 Authority Key Identifier:
                keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:37:4f:3d:c3:7d:83:6b:5d:01:7f:11:4a:7a:9c:eb:49:
         3c:17:09:eb:76:3f:e9:dd:ea:12:cf:91:d7:12:e8:5d:17:4d:
         69:ce:9f:6b:74:71:de:68:e3:25:4d:d6:c3:f5:a4:a6:92:a4:
         f1:67:a4:0c:ba:b2:ad:55:c0:a1:60:6b:d3:e8:06:e0:fa:9e:
         31:e4:16:61:96:12:88:08:4f:16:6a:60:4e:88:f2:83:59:23:
         8b:75:80:04:9a:f8:c3:0c:01:c3:8c:81:d3:65:85:a9:f9:32:
         84:16:a8:b9:a7:e8:d7:4e:82:83:b1:a1:e6:b7:9a:50:89:8a:
         48:04:78:26:67:a5:f7:40:86:cf:f5:5c:e4:a8:db:fa:57:60:
         fe:e6:54:85:61:80:32:bd:d5:2e:c0:15:6a:b1:9a:14:ef:d2:
         78:8f:b9:ea:bc:fb:ba:ce:07:9a:84:ac:38:5f:b3:30:0d:e6:
         02:84:e1:f1:ae:40:23:d7:30:98:bd:88:6d:b3:1d:1b:8f:97:
         ff:5e:49:a5:3b:e5:da:7a:14:9e:4e:55:68:1d:60:55:77:3b:
         9a:c9:48:29:e5:93:6a:24:b2:e8:2b:07:66:76:ab:f2:d4:0b:
         ac:a1:8d:00:8d:9a:fe:f6:12:c5:a7:05:80:d5:63:b3:81:5d:
         19:84:72:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:31 2025 by rpki-client