Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
File:                     g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft (raw, json)
Hash identifier:          KsHD7ybBgRdEIuL4tRg2I40SOejPltVCycYrDsBO48E=
Subject key identifier:   5F:27:AF:1D:0E:E1:F3:99:D3:18:E7:5B:21:1A:69:36:86:74:44:4D
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Certificate issuer:       /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial:       01984889AC434F423D398BFB402B469EF21F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
Manifest number:          0CD6
Signing time:             Sat 26 Jul 2025 21:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:38 +0000
Files and hashes:         1: 20epV1j0HCMZ-uCYpk_kUZek4Go.roa (hash: 0IJbxaBTBJrWj2eiqCnd7zV+Z0NBZxwRizr0fkaGu8A=)
                          2: g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl (hash: wqeXT9+7WTZ+A5jYq4Iz3Z0vOjTNpeMiFQVNUUZAquQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:ac:43:4f:42:3d:39:8b:fb:40:2b:46:9e:f2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
        Validity
            Not Before: Jul 26 21:00:38 2025 GMT
            Not After : Jul 27 21:00:38 2025 GMT
        Subject: CN=5f27af1d0ee1f399d318e75b211a69368674444d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:0a:23:18:48:99:5f:eb:53:08:c8:ff:48:
                    69:54:fa:43:2e:7d:07:cf:ef:db:b3:2d:d4:1b:1a:
                    15:1f:12:e3:38:dc:f3:04:de:7a:b0:d1:47:58:42:
                    7d:f7:17:22:d3:a2:87:4c:e0:00:13:00:ed:36:14:
                    21:e0:fa:97:d9:de:d0:e9:61:dd:0c:c8:30:ed:b5:
                    76:60:bc:d7:70:5e:28:16:8e:6a:90:32:d5:56:32:
                    92:37:1f:f0:09:87:61:b4:4b:d5:72:c9:b1:36:30:
                    b8:ef:ae:0b:4c:1b:7a:5f:28:51:fd:dd:b9:1c:c0:
                    46:59:54:69:ca:c1:fe:29:96:0f:51:a3:7d:c8:5f:
                    3c:52:ab:c3:93:68:b8:2a:24:dd:04:ec:63:67:3f:
                    1f:cf:56:94:75:f9:30:0c:af:42:49:38:48:4e:9e:
                    d9:1e:18:73:c8:cf:1a:90:bb:73:e1:62:63:13:56:
                    40:ad:6a:f1:f4:61:2d:c9:1b:e4:76:22:b5:e3:8c:
                    9b:ae:08:a8:15:20:68:c7:32:0a:5f:50:9c:5b:0c:
                    80:08:6c:99:5f:31:49:1c:65:c2:c5:60:7e:d9:c3:
                    b0:99:da:4b:c4:07:c8:41:19:31:ef:b0:7d:da:8d:
                    ae:35:3d:44:26:71:6f:ee:71:17:48:32:55:4a:fb:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:27:AF:1D:0E:E1:F3:99:D3:18:E7:5B:21:1A:69:36:86:74:44:4D
            X509v3 Authority Key Identifier:
                keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:e9:1e:d3:9b:9c:90:c2:fe:a0:e5:4a:e1:13:3d:3b:cc:
         49:f6:84:31:b3:e6:b6:6c:ae:95:67:c0:e3:29:a6:c5:eb:6c:
         af:62:43:6a:83:f5:5c:30:ce:99:c7:c9:8e:4b:8a:19:76:f9:
         a1:00:7a:71:e6:98:dc:01:32:7c:9f:19:a6:c9:a4:92:21:34:
         63:86:a3:60:52:60:39:35:e0:b0:ba:12:75:0f:c8:a4:70:33:
         bd:2c:c2:b4:71:b4:98:4d:2e:46:6d:c0:6d:d8:56:e7:05:d5:
         9d:a3:e4:69:a9:bb:8f:41:c3:b6:af:f8:cc:73:85:c8:73:08:
         06:79:2c:5d:33:72:79:85:ec:44:48:7e:d6:76:46:05:25:5b:
         ba:d2:c4:b6:e8:fa:5b:e1:b5:86:ba:bf:00:fb:bb:ee:43:fc:
         6e:77:34:4f:47:03:39:cf:1d:87:01:d9:3c:59:6e:be:8f:71:
         ba:b3:b0:10:51:a5:9e:c8:b3:e4:be:27:2e:f7:67:43:9e:5f:
         b6:6a:9b:41:74:ca:b0:06:87:fd:3f:59:2c:fd:25:c3:d6:7d:
         7c:f1:82:93:01:4b:d9:53:c5:94:62:68:c3:e6:6c:cf:e6:a3:
         5a:c3:66:32:db:5b:a9:35:e7:37:3f:3f:d1:04:8c:5d:34:4f:
         e9:c5:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:05:15 2025 by rpki-client