Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File:                     y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier:          SfmBghQF4MVu5Qf/unk+UuhfBWk72HrBVgtm27+S3BI=
Subject key identifier:   D3:14:20:AC:71:FD:07:3E:57:C7:BA:4C:DA:C2:8E:11:59:21:72:C1
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer:       /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial:       01984966B9B0FA908839648539F08C83F1EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number:          0E0E
Signing time:             Sun 27 Jul 2025 01:02:05 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:05 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:05 +0000
Files and hashes:         1: NH3eFCO2z6iD8tqKH5j3jRrAVkU.roa (hash: ZXJCvBm8BnALLLtPx8hXRUmbjYU517MofZBHTTPZwAM=)
                          2: drCHGsFCH9gtO7i946SJRwJLVRQ.roa (hash: aSAJUF+FTsSFxUy1oN30ReyG2kXTHEsA0T+WTdOGVN8=)
                          3: r7MeXBD4h2cagNO6Vs8Qg7deiiI.roa (hash: ojLWPczZy5cMPxT49AEzAQruFXc/LPul28QPHpbW6P8=)
                          4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: lxvdMLcvKiYjt3JTqfjktgWJJ+DppOoaZ7ULh2qDWNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:b9:b0:fa:90:88:39:64:85:39:f0:8c:83:f1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
        Validity
            Not Before: Jul 27 01:02:05 2025 GMT
            Not After : Jul 28 01:02:05 2025 GMT
        Subject: CN=d31420ac71fd073e57c7ba4cdac28e11592172c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:96:c0:c8:1a:3a:28:47:42:b9:a0:c0:2f:
                    d9:d3:dd:85:02:4e:8c:7f:bf:ab:41:0b:9c:a5:2b:
                    e3:f5:51:ba:81:5d:c1:cb:03:c7:71:1d:22:9c:f0:
                    25:2e:2c:74:5f:3b:e4:a9:ca:38:56:da:5d:a2:5b:
                    c8:ec:87:c1:6f:0d:90:65:9d:dc:88:c6:08:c7:c2:
                    e0:b8:d7:f4:81:c0:38:da:56:da:e9:31:f4:65:61:
                    8a:6c:3e:0b:f1:8b:4c:3a:4a:f0:88:42:b4:eb:8b:
                    61:cf:f9:3e:00:ea:8c:f1:7e:eb:63:17:97:d6:8d:
                    53:93:03:11:5f:81:e4:65:c8:51:b6:49:90:93:ee:
                    a2:24:95:80:6c:e1:a6:02:0a:a0:93:9c:b3:cf:c1:
                    59:29:cc:aa:ee:f8:bd:9a:5b:ec:f0:b0:3b:2d:09:
                    9f:f7:c8:63:d2:39:1c:6e:9d:05:d7:a1:7b:2e:71:
                    78:c8:b4:0c:c1:f5:2a:97:de:3e:72:37:20:04:61:
                    5b:b0:c9:cb:15:29:7e:05:b9:91:9a:8b:c8:4e:17:
                    10:8b:ce:bd:d1:0a:d1:d0:19:df:15:99:dd:8b:00:
                    59:f9:c7:30:2c:6b:3f:ed:7c:03:cf:5e:a0:df:a4:
                    13:95:57:7c:d5:5b:eb:b6:c4:ae:e8:d4:61:3a:df:
                    6e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:14:20:AC:71:FD:07:3E:57:C7:BA:4C:DA:C2:8E:11:59:21:72:C1
            X509v3 Authority Key Identifier:
                keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:51:da:83:af:79:df:1e:bd:17:9f:2f:ee:71:a7:0d:f0:38:
         ac:23:5d:22:f6:b9:bd:b5:3d:58:f5:af:15:6b:aa:1d:57:72:
         5e:dd:6a:4c:fe:9a:3e:ab:5e:1e:72:d1:14:4d:e6:0a:1e:03:
         87:7f:bc:48:f5:e2:a6:bc:d8:41:0d:b5:72:20:c9:cc:8d:0c:
         00:d3:9e:5c:e1:15:7e:39:e3:bd:f1:3b:e3:56:fc:b6:af:b7:
         a5:92:5a:0d:95:12:97:a9:ab:7c:17:aa:f5:91:be:72:b5:41:
         59:3d:64:ce:1c:ed:3f:3d:28:fc:2a:42:0b:2d:09:74:38:74:
         6e:6d:98:a5:2d:bf:09:be:ee:b6:39:26:b6:46:e3:46:b0:1b:
         c8:ec:76:6f:95:e8:f5:0d:47:47:af:e3:6e:be:27:01:b1:98:
         43:72:f1:6c:a5:55:33:7d:98:4c:29:ff:d0:60:37:78:da:86:
         d7:6d:8b:9a:35:33:42:e3:0f:5f:02:f1:bc:f2:2c:bd:f4:a3:
         22:85:f9:56:e8:a8:39:fd:e7:c7:2d:77:18:02:d4:f9:2e:cc:
         4f:b3:38:19:85:a2:1e:a2:d3:1e:7b:f2:21:35:9a:ce:e7:01:
         7c:d4:f6:4c:b2:74:82:89:72:6e:2c:59:ee:68:58:63:6c:9d:
         d2:7e:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:36 2025 by rpki-client