Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File:                     mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier:          GWx7jvcjXPmHTHDWTprv7YMTDLDeg12duNz+accfpGU=
Subject key identifier:   8A:2C:84:11:13:28:BA:43:24:78:5D:5C:29:03:5A:5E:6A:1F:95:CD
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       01984DAFABAE32E4880B10CC6EA617E96F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number:          0B90
Signing time:             Sun 27 Jul 2025 21:00:15 +0000
Manifest this update:     Sun 27 Jul 2025 21:00:15 +0000
Manifest next update:     Mon 28 Jul 2025 21:00:15 +0000
Files and hashes:         1: 8bKL0IbQOSgAyNHMsOTwdqXxmBA.roa (hash: SiMZDaqzDjVBWVjWC+CfQKEVMp/aAzgNg3WOueNrYnY=)
                          2: TOZ32S2cTtEqOAugUTe4Diokmjc.roa (hash: ZfLvnSZb+3P/Lwkuj8mzNGrvWl0G71GHwv4eE3pKqaY=)
                          3: aWPrtGmH1Yyr9JygOmf8I8XXZSE.roa (hash: rxPNfyseh9mYpYa5sMESZMtb8GzaNyszUYWBRocITXE=)
                          4: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: h9s9IqmmfPvlXa/bRzjc1ClSl5DpDRsBMujWvdOuqYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:af:ab:ae:32:e4:88:0b:10:cc:6e:a6:17:e9:6f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: Jul 27 21:00:15 2025 GMT
            Not After : Jul 28 21:00:15 2025 GMT
        Subject: CN=8a2c84111328ba4324785d5c29035a5e6a1f95cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:3c:cc:6a:91:21:74:80:6b:4d:68:2f:40:
                    63:b0:2e:58:02:7f:57:81:4c:13:be:6c:d7:33:23:
                    1a:26:62:3f:1e:b4:67:a0:b6:19:69:73:79:fe:85:
                    03:be:e5:dd:4a:48:d9:3e:1f:de:79:99:07:67:23:
                    bc:d2:f8:a8:db:c5:05:1e:05:a6:50:a9:3f:61:6a:
                    14:38:51:ad:eb:70:cc:d2:80:30:73:65:2a:0c:3f:
                    d9:b3:85:f0:c1:aa:e0:0f:04:e5:28:4c:0c:09:9c:
                    3a:5b:e9:11:77:f3:cf:b8:6b:2f:31:2e:a5:f7:17:
                    89:a6:f3:b1:8f:47:ee:c7:2f:f4:f4:89:54:ac:d9:
                    fa:03:43:5d:1c:b1:55:10:7a:9c:81:e6:78:27:45:
                    da:4a:c2:e1:1c:e3:08:78:f9:d8:0d:3a:04:66:4d:
                    ce:f1:23:61:53:ed:b5:8b:94:9e:50:fc:32:d1:cf:
                    1d:9e:45:c6:2c:44:7b:96:c5:ff:62:99:aa:53:74:
                    62:00:2c:cb:00:58:ad:e0:42:d4:4c:0c:c8:6e:37:
                    d7:0e:c1:4a:37:44:63:9c:e5:c8:c9:77:47:2a:6c:
                    8a:8a:a2:2e:c2:70:be:6c:97:f5:83:e2:25:1e:21:
                    3c:d0:e3:33:38:d8:e5:e8:06:64:0c:60:4f:2a:96:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2C:84:11:13:28:BA:43:24:78:5D:5C:29:03:5A:5E:6A:1F:95:CD
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2e:7b:eb:c8:18:42:84:a2:23:97:24:87:ba:06:57:5e:27:
         a7:46:2e:ff:a3:0d:02:ef:5e:f0:bd:bb:c5:f6:85:2c:58:1d:
         5f:4b:20:14:5d:73:d6:cd:f5:30:69:38:fe:34:03:fa:6e:15:
         4d:2e:da:c7:35:90:ba:9a:2b:d6:93:b1:4d:00:03:0d:ea:56:
         5a:c2:df:ad:ff:a2:cc:6f:bb:a2:7c:e2:3c:13:ec:65:6b:74:
         73:8e:7e:6d:b2:49:d2:dc:64:3a:ec:49:81:d7:5f:a3:cd:86:
         ac:74:03:9a:88:11:76:f1:8e:52:37:05:14:76:0c:68:b3:48:
         55:3c:77:ca:03:17:d0:b5:f2:b1:05:ca:87:e7:f0:ea:83:15:
         33:9b:df:3b:b1:f0:2f:55:c0:00:c5:e2:05:ce:71:d2:d4:52:
         5f:31:2b:f5:ac:7b:a4:14:b6:21:6f:82:43:58:71:18:3c:f4:
         2c:31:10:e9:4c:4e:58:a3:35:be:34:bb:4b:ca:02:98:f9:52:
         50:91:34:2b:83:09:26:36:b5:75:b4:8b:a8:d6:5e:ec:12:9c:
         47:c0:0b:5f:f4:e7:d2:9b:a5:c4:d5:53:68:7f:37:c5:96:e7:
         1e:ef:da:45:59:77:67:1c:64:8a:66:5b:5f:54:56:b5:4b:6c:
         bc:34:d5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:54:23 2025 by rpki-client