Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File:                     xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier:          cdU45cZYvE1okBxMvihqHflMpMZuisqEn+HoAUtNZH4=
Subject key identifier:   C9:2D:6C:D3:E4:CE:1B:88:99:54:D4:E8:BB:0E:A7:12:4A:95:00:E3
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer:       /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial:       019845F65F72A3420BAD1E802462226CB2D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number:          0C66
Signing time:             Sat 26 Jul 2025 09:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:30 +0000
Files and hashes:         1: 3Krd3X8gM6K6uQN1pZPs1zNdYR4.roa (hash: fGcfj1MLOHaxsx+wYEI+CaMKulrmVPv7+yNp06XKMSk=)
                          2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: zTqmBx00ZwXjWYOaW8X1iDFNOw1U1LcoxOxFVtt4r5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:5f:72:a3:42:0b:ad:1e:80:24:62:22:6c:b2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
        Validity
            Not Before: Jul 26 09:00:30 2025 GMT
            Not After : Jul 27 09:00:30 2025 GMT
        Subject: CN=c92d6cd3e4ce1b889954d4e8bb0ea7124a9500e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:2f:99:a9:f2:bc:74:f1:25:c7:cf:4b:1b:
                    2d:a6:5b:ad:3d:6e:d5:d3:3f:00:f3:c9:a0:b6:54:
                    a5:7c:4e:ba:cf:e6:f3:02:cd:5a:0f:61:6c:ff:c6:
                    8a:64:92:c0:e5:e5:a3:8b:7c:06:ec:d5:91:b0:e3:
                    1e:62:82:88:c0:8e:9b:10:ed:fc:fd:33:96:8c:82:
                    c2:f4:26:d8:74:68:d0:cd:8e:97:32:19:e8:32:14:
                    3a:24:8a:df:d0:ae:54:85:cc:bd:39:24:2b:ce:01:
                    22:7d:fa:3a:c7:fb:55:d9:62:24:0b:67:4e:1a:8b:
                    ee:e4:54:87:8f:b2:ff:aa:ec:91:ca:5d:e2:3e:87:
                    51:70:70:7c:f5:7b:cd:76:9b:39:cc:1c:43:bc:87:
                    24:b1:02:bd:7f:74:e8:8b:38:2c:64:44:d4:1e:20:
                    cc:57:1d:7d:7e:fb:da:c1:64:9e:dc:cf:68:08:f7:
                    a6:cd:87:a0:62:74:eb:16:e1:4b:f3:26:50:3c:4a:
                    f3:e5:52:d0:82:16:5a:eb:2b:59:c3:4d:2e:34:57:
                    e9:0d:9a:12:ae:49:25:a5:8b:7c:e3:86:7b:7a:ff:
                    6a:8b:ac:40:17:48:ae:bc:06:3e:24:55:eb:fe:ed:
                    11:b9:95:21:53:63:08:0b:71:5b:66:ca:1c:04:95:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2D:6C:D3:E4:CE:1B:88:99:54:D4:E8:BB:0E:A7:12:4A:95:00:E3
            X509v3 Authority Key Identifier:
                keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0d:7f:66:f6:e0:9c:02:b7:35:e0:bc:3f:7b:ae:60:a6:27:
         3f:28:6a:51:18:58:dc:3e:93:a1:c4:7d:f2:ff:f6:fa:7c:31:
         2e:e6:d9:73:24:c2:b1:f0:34:13:4e:f6:b2:b9:bd:7f:58:0b:
         3b:80:4d:ec:36:8e:a5:84:dc:ab:9c:20:8c:a6:85:d5:7d:04:
         07:d8:d8:c4:f1:24:5a:97:e4:39:5a:3c:4b:a0:05:8f:52:27:
         6a:6d:a2:ca:b8:e1:ea:57:19:c1:dc:b4:49:98:73:bf:e2:e5:
         b8:23:7e:ce:ad:b6:eb:14:a2:67:b5:3d:52:11:7f:8f:7d:fa:
         84:67:73:72:6f:af:78:fc:8a:3e:31:36:ab:ed:a2:6b:9d:7a:
         e0:c5:79:df:b7:9c:42:4c:f9:c7:4d:a9:1e:f5:63:29:39:36:
         79:b8:46:37:e6:b2:ae:77:03:96:d2:e0:83:df:5f:4d:ad:da:
         0a:7c:c7:6e:ef:f6:fb:24:4a:ab:ef:e1:06:b3:90:3a:ff:48:
         a5:45:b7:4b:b9:e6:bd:a7:89:f7:fc:7b:64:18:54:d4:30:dd:
         9e:6e:36:b2:9e:d5:68:cf:0c:39:80:aa:17:fc:50:5a:bb:9d:
         14:4d:5a:12:a7:c6:24:7c:41:6c:6b:9d:23:d0:b1:19:22:cf:
         ab:4a:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:32:17 2025 by rpki-client