Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File:                     pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier:          v+bs0ug2QYXWqZQ4BUS1Xtzd8/Kn5ppsn1bU7gssI7s=
Subject key identifier:   8D:62:7B:4A:DB:C8:B8:E5:81:F1:95:28:BE:93:3D:60:43:53:A4:D0
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer:       /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial:       019849D32CFFA6CD156D0375005EA7BF6A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number:          06C4
Signing time:             Sun 27 Jul 2025 03:00:33 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:33 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:33 +0000
Files and hashes:         1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=)
                          2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=)
                          3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=)
                          4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=)
                          5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: QnJ4UbtdQn32ir7ES00Kb6femtnzsMKNiS5z7os9mXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:2c:ff:a6:cd:15:6d:03:75:00:5e:a7:bf:6a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
        Validity
            Not Before: Jul 27 03:00:33 2025 GMT
            Not After : Jul 28 03:00:33 2025 GMT
        Subject: CN=8d627b4adbc8b8e581f19528be933d604353a4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:65:37:0c:f0:43:15:fd:39:9a:7c:3a:96:
                    ef:10:42:f7:e8:6f:70:f3:60:71:6c:a6:42:69:c7:
                    ee:7f:58:d9:59:eb:8f:6c:00:86:3d:56:a0:de:69:
                    32:1d:cb:67:43:78:a5:97:b1:81:01:b7:80:46:44:
                    aa:85:ba:aa:1b:dc:b5:38:30:2e:c6:46:05:bf:aa:
                    97:98:95:e5:73:f1:7f:12:2b:29:5b:65:43:53:b7:
                    83:e7:74:52:59:d9:0d:a1:52:7a:0a:f1:4a:f4:0c:
                    c2:1b:81:96:5f:97:ab:50:1c:9b:d1:c4:f1:01:a9:
                    bb:2d:42:c6:03:b0:83:4b:51:4f:3d:cb:84:6d:06:
                    1f:ec:38:41:ea:0f:be:51:98:f7:48:3c:e2:3c:bf:
                    7d:b9:88:f2:05:ad:8c:56:16:d9:1f:e2:23:e0:8a:
                    92:ee:30:99:7e:e1:0e:c2:61:f9:57:48:6e:c0:2b:
                    97:a7:cb:95:c9:fe:3a:87:1b:3d:0a:f3:b5:8d:3a:
                    74:19:05:bb:a6:1f:a8:3b:20:8d:15:69:0d:28:ad:
                    84:56:62:b7:8f:62:62:45:11:fd:ad:98:2f:b2:b9:
                    da:43:3e:5f:99:cd:6f:53:52:81:52:15:16:4f:d2:
                    cc:e9:b1:a0:43:ce:e7:e8:f7:d6:b2:90:ab:a8:5a:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:62:7B:4A:DB:C8:B8:E5:81:F1:95:28:BE:93:3D:60:43:53:A4:D0
            X509v3 Authority Key Identifier:
                keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c0:0c:11:1a:34:e3:4a:4b:f2:d3:9e:b8:fc:fb:2b:36:5b:
         d2:5f:a9:14:65:15:ff:b9:5e:b9:e9:01:d5:06:95:fb:54:8f:
         e9:d2:df:99:12:86:86:76:97:70:95:ce:51:56:15:be:31:68:
         72:68:7f:b0:f0:8c:e1:76:c7:28:7e:4c:f3:38:2f:90:4b:bb:
         9f:73:54:09:e9:53:3b:4c:55:87:49:c3:5f:2e:02:85:48:33:
         ba:ed:c9:74:c5:dc:59:a0:f9:09:62:71:9d:64:34:84:15:d0:
         b4:30:e0:cb:67:6a:ef:d4:2c:44:a4:25:33:8a:55:b4:c5:68:
         ee:0a:a6:3f:f6:92:b2:8a:76:9e:8e:75:44:51:44:56:cd:7f:
         8e:12:6c:91:9e:c5:52:12:81:98:f1:c6:0b:2d:81:49:50:75:
         df:69:69:76:ea:dd:54:06:b9:f5:eb:1c:05:bc:cc:09:7f:cf:
         4c:82:2b:1c:89:eb:cc:73:fa:e6:6c:3f:f3:11:0e:2a:2a:ec:
         b3:c6:db:fa:08:ef:8d:aa:49:31:21:c4:14:2d:eb:df:bd:3e:
         6e:60:28:e6:ed:2b:d9:aa:a1:07:18:ad:8d:06:b4:aa:f9:1f:
         81:3c:bc:26:31:4e:f8:3f:6e:91:21:1e:ea:a5:99:bf:5f:02:
         85:a0:8a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:15 2025 by rpki-client