Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
File:                     Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft (raw, json)
Hash identifier:          NHH2SpzF2ztZoHm/NPgbpO5vr1pWwbnP8X9KvBBRMSQ=
Subject key identifier:   8D:64:3A:1B:35:C9:5B:6F:09:E8:6F:8A:16:18:BF:A2:A4:4E:5B:AB
Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
Certificate issuer:       /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Certificate serial:       0198526855DD50085915F4AF28B62FFC0877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
Manifest number:          1089
Signing time:             Mon 28 Jul 2025 19:00:26 +0000
Manifest this update:     Mon 28 Jul 2025 19:00:26 +0000
Manifest next update:     Tue 29 Jul 2025 19:00:26 +0000
Files and hashes:         1: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl (hash: UfZLcQ1bZA2zQWGjQClAgI3vX4tJSi81d43YXtyYvks=)
                          2: o6lJ-qfhS9C09IpxbbRvCOiFoHM.roa (hash: s9YF0YMackzUIop5+kUK7Z2zh1o4IPsYyQyvrXKhSCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:68:55:dd:50:08:59:15:f4:af:28:b6:2f:fc:08:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
        Validity
            Not Before: Jul 28 19:00:26 2025 GMT
            Not After : Jul 29 19:00:26 2025 GMT
        Subject: CN=8d643a1b35c95b6f09e86f8a1618bfa2a44e5bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:1e:72:98:d2:02:f7:65:d3:9a:a9:8c:42:
                    f7:e9:83:d1:66:43:df:7f:85:e7:4a:86:9e:60:a1:
                    56:1d:d0:ec:a0:1c:d4:2a:3f:75:f3:62:28:e3:ec:
                    aa:0e:27:28:ca:4f:7f:ac:a3:fc:d5:d3:3e:41:2c:
                    05:33:fe:5d:02:63:df:f4:be:f3:7e:f5:c2:e3:09:
                    a8:44:53:bb:19:7f:5f:45:6e:63:f4:c2:b3:d2:5f:
                    87:cf:1f:8c:d3:be:08:67:b4:e2:fb:4f:81:01:93:
                    76:49:e0:03:11:a8:74:4c:ae:48:30:47:a7:c5:89:
                    9e:62:2d:bf:e8:82:19:42:f6:26:c7:e0:9f:12:15:
                    6a:93:ab:44:38:8f:8c:88:21:32:8a:51:ef:e9:0e:
                    5b:1f:6c:9c:39:d2:ea:db:7c:60:f6:86:7f:4e:7b:
                    a3:1a:5e:2b:c1:57:3b:30:71:1a:f0:cc:68:3f:47:
                    7e:18:23:4d:66:22:2c:65:07:e9:f1:01:a1:57:d3:
                    07:9b:ff:6c:72:16:cd:c0:0d:a0:df:f7:33:6c:71:
                    5d:18:b8:3e:ef:61:9a:f3:c9:23:78:6c:db:dd:45:
                    3c:74:70:6f:37:92:ed:f6:e6:cf:8d:08:ef:bf:d0:
                    c0:a4:47:68:4b:64:a2:98:50:53:69:dc:21:59:15:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:64:3A:1B:35:C9:5B:6F:09:E8:6F:8A:16:18:BF:A2:A4:4E:5B:AB
            X509v3 Authority Key Identifier:
                keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:42:bc:89:fd:b7:a7:9e:86:57:97:21:f6:5e:d1:86:7b:
         ce:56:39:81:cc:81:7e:14:37:88:a6:c3:70:f5:0a:3f:74:1c:
         cf:35:03:d9:b7:b9:d3:25:fd:d2:94:58:34:3f:3f:dc:f0:f2:
         ed:eb:6e:3f:6c:51:00:41:a2:05:c5:45:d5:a6:88:37:9c:9d:
         41:43:69:e4:fc:d8:0c:1b:ae:fd:8c:f2:8b:a3:b9:19:0c:37:
         f0:2d:62:42:d5:4a:3c:d4:f1:5b:d2:a2:8d:b5:fb:12:0f:47:
         21:1e:53:7d:8c:cb:4d:27:d0:3f:33:48:de:40:da:a6:1c:f0:
         cb:04:98:43:f8:48:aa:89:e6:e1:46:c8:bc:8b:67:80:80:86:
         a6:44:9f:82:38:7e:12:e5:8b:18:05:de:72:db:41:1f:54:63:
         fa:4d:ed:18:e1:f6:f0:6b:cf:72:68:26:a7:e8:1d:92:d0:69:
         91:f3:53:b6:85:de:d1:9f:20:6d:2b:de:8f:ba:46:e3:06:0a:
         fa:a6:b6:53:18:12:56:9e:a5:70:c6:7d:70:6c:a3:39:7c:cc:
         f2:87:19:49:01:5e:7d:19:62:6a:ad:6b:51:cb:64:e3:a6:cf:
         dc:f0:4d:f5:15:bc:f2:4d:86:4e:02:48:36:3b:51:1d:a3:5c:
         8e:6b:c6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:40:31 2025 by rpki-client