Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File:                     D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier:          EK24zzHhWKaNvGkCeLniEq+vRCp0jmUtCmYccWEYq7s=
Subject key identifier:   2E:44:26:7C:51:09:45:A4:CB:A4:62:1E:31:77:72:95:8F:2A:AB:55
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer:       /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial:       01984A0A37C39DF69A406F2242171F8781F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number:          05B2
Signing time:             Sun 27 Jul 2025 04:00:40 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:40 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:40 +0000
Files and hashes:         1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: HS5OukVx1B9C55dj3ygf0bsTGB3sKjGpNNdSPO8a93Y=)
                          2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:37:c3:9d:f6:9a:40:6f:22:42:17:1f:87:81:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
        Validity
            Not Before: Jul 27 04:00:40 2025 GMT
            Not After : Jul 28 04:00:40 2025 GMT
        Subject: CN=2e44267c510945a4cba4621e317772958f2aab55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:39:07:a7:66:5b:d0:63:33:1d:5e:19:6c:
                    ab:34:bf:cb:27:a3:5f:94:51:87:16:14:1f:71:44:
                    d6:17:17:82:fe:9e:78:4e:17:85:30:84:b3:87:43:
                    78:e8:c5:b7:2c:43:d4:a4:07:8b:77:68:65:b1:b8:
                    cf:48:51:3a:8d:0a:b2:34:b0:6a:22:0e:f0:a4:95:
                    ab:85:49:55:0b:ba:35:1c:c6:e6:61:c6:10:1b:34:
                    62:8c:43:b2:3a:77:3a:13:b5:37:b1:e3:ae:26:7b:
                    fb:0a:55:26:08:74:62:57:d4:cc:7a:b3:fd:e0:e9:
                    c1:b1:71:88:0c:1e:bd:3e:81:8e:9d:90:eb:12:e9:
                    c7:f3:e2:7a:a6:83:19:fd:52:5d:5c:a6:bc:dd:d6:
                    5c:d0:0b:1f:b4:61:f8:c3:13:ad:46:e2:20:dc:04:
                    52:97:05:94:a4:b5:de:d5:cc:82:8e:3a:40:e5:11:
                    27:d1:bd:f5:61:0d:17:d7:f8:fe:7c:49:30:ac:59:
                    47:84:44:8c:05:41:2b:03:e1:b2:12:2d:65:8f:47:
                    7e:2c:bf:df:ff:75:88:f5:65:e3:0d:fc:3a:bb:9b:
                    db:44:4e:c0:f0:81:77:3f:1a:77:73:e2:7e:a0:83:
                    a3:fd:e5:54:1a:9d:87:76:f2:93:57:1b:15:b9:a1:
                    9a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:44:26:7C:51:09:45:A4:CB:A4:62:1E:31:77:72:95:8F:2A:AB:55
            X509v3 Authority Key Identifier:
                keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:a2:e9:99:8c:df:4e:e2:b2:6b:18:de:60:61:a0:04:6a:
         53:b8:7b:14:31:d3:ac:9b:53:6e:a5:61:19:d0:e9:64:cc:fb:
         f1:06:37:7c:80:32:91:ad:3a:03:dc:f4:a6:00:3b:1c:b7:12:
         a8:98:48:f5:a5:07:41:2b:c2:e1:b7:b6:44:83:6a:47:1b:6c:
         61:3c:d5:5b:1e:d4:6f:12:c3:d9:6b:aa:a4:8d:b5:93:3f:57:
         b8:3c:ea:49:dd:d0:13:01:bb:10:dc:65:17:bf:5e:61:82:ae:
         16:5f:e0:39:7d:f2:1a:bf:55:d8:b4:1f:f2:6d:e3:2f:f9:01:
         2a:c0:58:55:56:d2:46:ca:d5:5a:3f:14:d1:50:39:ac:f3:18:
         77:1b:f6:3b:76:54:8c:75:18:0e:44:5c:2c:85:ac:24:13:2e:
         80:9d:4f:43:da:38:4d:2d:bd:7b:1a:5f:4d:a8:ee:f6:5c:4a:
         a5:58:d1:1f:42:d8:32:bb:44:a8:1b:be:5b:f8:04:bb:57:fe:
         75:d8:bd:77:1d:b6:e9:09:ad:5a:ba:ea:43:d5:5b:bc:cb:e0:
         78:bd:2b:86:a7:4e:82:63:66:96:61:2e:3c:3e:c7:ab:66:82:
         38:1e:9b:ac:bb:b2:24:02:44:26:73:d1:5f:f3:a3:29:bf:19:
         fc:0b:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:27 2025 by rpki-client