Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File:                     05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier:          UN8I+db8dH1NsFmjUIuXsd3U1mueunLFoQ/ZhwwhDSA=
Subject key identifier:   B0:60:09:2D:24:12:E8:6F:76:83:87:1A:E1:E7:30:A7:92:AD:1D:8C
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer:       /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial:       01984B5489D8AE03690A4DCF7ABB534C2BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number:          10F3
Signing time:             Sun 27 Jul 2025 10:01:28 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:28 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:28 +0000
Files and hashes:         1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: Spp+KO/tbKiR2+yT24u2WZbecuo4B2Mk4fAWqVppv7Q=)
                          2: rB2INOwVRpDLnI62nHFRLMGjim8.roa (hash: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:89:d8:ae:03:69:0a:4d:cf:7a:bb:53:4c:2b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
        Validity
            Not Before: Jul 27 10:01:28 2025 GMT
            Not After : Jul 28 10:01:28 2025 GMT
        Subject: CN=b060092d2412e86f7683871ae1e730a792ad1d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:60:fb:a2:70:48:f8:6d:00:81:7d:fb:74:
                    74:76:f5:f6:1a:44:d8:58:5c:ce:8b:40:ce:bb:19:
                    8c:a4:23:a1:22:83:e4:01:c3:f6:fc:3c:e3:d2:6c:
                    46:d4:95:54:2c:03:cb:93:72:72:c3:84:e5:b2:32:
                    87:3b:6c:26:b9:ff:40:a4:9a:16:cc:6b:09:8a:ba:
                    c7:fd:96:b5:8b:58:c3:75:54:d3:b6:e7:ae:c2:5b:
                    6a:7d:3a:e0:43:d9:7a:e2:74:ba:e5:89:39:14:0e:
                    36:15:d2:0f:e8:1e:6f:54:45:71:3b:bf:cb:c4:78:
                    2a:5c:b2:45:e1:85:b7:a2:bc:fe:ac:83:95:a0:2f:
                    35:74:6e:60:5d:1e:3b:c7:61:c8:09:ca:6a:2f:3b:
                    f8:fd:59:01:b7:76:c9:f6:58:2b:39:25:29:b6:7b:
                    32:49:30:ee:45:b6:88:81:81:a9:d3:43:a2:22:a6:
                    9c:6d:08:39:24:01:86:5c:92:e1:00:06:b1:20:22:
                    fb:9b:8d:25:9a:3a:73:86:4a:a2:7e:38:bf:f4:f8:
                    d6:06:d2:b5:11:3d:b5:5b:cb:12:86:95:bf:82:ba:
                    65:dd:57:60:27:50:cf:76:6e:37:f0:ca:12:28:7d:
                    33:17:75:88:85:5b:f7:92:20:a1:2c:c7:e4:6a:d5:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:60:09:2D:24:12:E8:6F:76:83:87:1A:E1:E7:30:A7:92:AD:1D:8C
            X509v3 Authority Key Identifier:
                keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:25:0a:3a:cc:d0:8c:d6:c7:bd:48:39:1b:ae:e0:3c:a8:24:
         94:2e:4f:2e:af:a9:ae:2a:a9:b5:49:7b:df:1f:87:d5:f1:f7:
         bf:08:26:e7:71:ef:06:ef:3c:56:ea:97:16:4b:96:1a:84:70:
         4e:e3:b5:b6:31:c1:b9:ca:35:82:07:6c:46:51:1a:e0:a4:77:
         ff:87:97:8f:7c:ff:bb:7f:eb:ba:92:54:81:44:5b:45:43:94:
         ac:17:86:74:21:27:72:1d:19:b5:2e:41:3f:59:d3:18:6c:da:
         11:a1:e9:06:66:21:6c:45:b1:ff:63:65:65:0d:31:74:67:e3:
         fb:28:03:98:17:ca:08:8b:c3:ea:7f:07:7c:63:b4:ee:0d:2b:
         74:7a:b2:49:e7:9e:fd:26:f4:07:0f:2c:e3:d0:65:5b:ca:4d:
         bb:fc:17:9e:36:e3:69:ea:aa:5b:66:68:c5:94:6d:0b:b3:3e:
         44:6d:87:76:b7:f9:60:e6:6a:45:fa:63:24:2d:ee:c2:90:ca:
         76:bd:46:11:6f:77:40:3c:df:6d:ff:fd:e3:7c:73:fc:6e:1b:
         c4:c3:3d:99:07:32:b5:8e:c8:bb:73:7c:32:63:c4:e3:7a:85:
         b8:99:77:cb:c8:53:5d:11:c9:c9:0f:9d:11:ab:bb:7f:fc:30:
         f4:1d:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:57 2025 by rpki-client