Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File:                     tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier:          ByMUvy/U9bspsqcT4ZWtvbRd129ZqQDjKSgvSfCqkKE=
Subject key identifier:   85:05:27:C4:30:80:92:E4:3E:8C:36:D3:8A:B6:8C:D8:D9:05:F7:C1
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer:       /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial:       019848F795342F686651BFE43C12C5A8234A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number:          12DA
Signing time:             Sat 26 Jul 2025 23:00:41 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:41 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:41 +0000
Files and hashes:         1: fOeHWLSvpiv5KgmUiK2xlWpmRm4.roa (hash: 70iF+LPpbMiVmu1EBYdz2CkmI0h0sZ5SaRk5YWSmNI0=)
                          2: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: fLVwXZ6Rd/0NlXB7CbYWUeVm27cxBb23Eu/Qn3E0rG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:95:34:2f:68:66:51:bf:e4:3c:12:c5:a8:23:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
        Validity
            Not Before: Jul 26 23:00:41 2025 GMT
            Not After : Jul 27 23:00:41 2025 GMT
        Subject: CN=850527c4308092e43e8c36d38ab68cd8d905f7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:58:bc:be:bd:71:9f:f3:8f:85:78:c0:46:
                    32:ef:47:b3:3b:ea:a6:4e:a7:86:70:41:47:ba:07:
                    b5:8a:e5:23:87:16:e1:0d:0b:ae:f4:65:9b:c2:19:
                    93:0a:02:a4:16:72:f5:18:ac:4c:fa:4e:79:0f:d3:
                    35:0c:65:2a:f9:3b:de:f0:ac:02:3c:e4:d0:24:00:
                    f7:0d:32:44:bc:df:23:7a:cf:5a:be:c1:4d:98:38:
                    72:ec:3e:53:0c:b1:56:16:d0:ce:d8:1b:e7:9b:9e:
                    e0:1a:73:9b:d7:fe:c3:bf:26:de:8c:c5:50:38:08:
                    89:39:c1:95:24:ee:bb:dd:81:f9:f0:89:4a:ce:cc:
                    51:72:c5:12:67:9c:f1:bf:ee:d0:9c:0c:00:11:6b:
                    f7:e4:67:97:54:41:4b:90:b8:7e:ee:45:08:12:7c:
                    b5:a7:51:56:87:52:37:4a:9a:b5:32:3a:e0:56:5c:
                    3b:e8:46:fd:e3:37:0b:1f:41:11:85:fd:99:54:15:
                    e2:70:ef:e0:60:5c:ff:af:26:96:c8:26:c5:36:20:
                    c3:d3:3c:9c:7f:f6:3e:24:d8:df:9f:ad:dc:cb:57:
                    71:0f:75:9a:8d:43:de:58:66:0a:81:a0:ac:64:99:
                    98:7a:a8:1c:7b:b8:88:9f:29:92:72:13:92:2f:8b:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:05:27:C4:30:80:92:E4:3E:8C:36:D3:8A:B6:8C:D8:D9:05:F7:C1
            X509v3 Authority Key Identifier:
                keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0a:21:73:5d:db:80:dc:93:29:59:7f:bb:c7:ab:a4:59:b5:
         49:27:2e:96:6f:3e:ec:ec:34:9b:f4:a2:33:70:11:9a:0d:a0:
         ff:af:4d:a6:11:98:06:65:5a:b7:d3:36:29:8c:08:e5:47:5d:
         fe:32:5d:72:3d:f4:5d:b5:fc:1a:0e:3f:f5:65:26:3d:d2:3f:
         10:66:8c:19:3b:32:a7:51:76:59:42:b3:fe:fd:a9:f0:3f:a5:
         01:81:52:89:5f:c2:a3:bf:59:28:1d:9b:cc:da:61:a8:f1:58:
         39:2e:16:4a:dc:64:89:ee:fa:84:53:0d:6a:65:eb:77:e4:e2:
         b6:a0:e0:41:7e:4a:d5:3d:65:fc:7d:83:52:bb:ae:f0:69:ee:
         dc:ff:44:ac:80:a7:9c:17:47:b3:52:d6:6d:84:31:dd:10:54:
         7d:76:b6:0a:1a:3a:85:d2:a0:88:78:b4:81:29:5c:60:9a:4e:
         05:59:cd:50:dd:86:43:6f:50:04:55:8c:b3:0d:ed:af:2b:d8:
         9a:9d:65:d8:52:9e:5c:6d:44:b0:ae:8d:11:6c:7d:bb:7e:86:
         7d:5c:1c:03:1b:f5:83:b3:18:38:f9:59:68:25:74:95:8b:82:
         26:24:90:f7:8f:ea:56:8f:16:d2:bf:38:27:2e:d0:e9:34:b1:
         fe:cd:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:53:16 2025 by rpki-client