Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File:                     CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier:          KSaB1Db50ppNeaKaNmG3dfEBURFztbxudWwzuLZRhSk=
Subject key identifier:   F2:8D:F7:5B:B0:19:B0:BA:40:C1:81:09:35:BD:4F:8F:F3:8D:73:8E
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer:       /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial:       019845F62215D347FD9BD3C5B1EA2963DD39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number:          1127
Signing time:             Sat 26 Jul 2025 09:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:15 +0000
Files and hashes:         1: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (hash: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=)
                          2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: sGwlPav8bgfP91HWXZ9cKAXkZNDPvqg7BvHLAgPP0aY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 09:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:22:15:d3:47:fd:9b:d3:c5:b1:ea:29:63:dd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
        Validity
            Not Before: Jul 26 09:00:15 2025 GMT
            Not After : Jul 27 09:00:15 2025 GMT
        Subject: CN=f28df75bb019b0ba40c1810935bd4f8ff38d738e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:4c:a0:93:00:11:da:da:4d:a4:52:be:0a:
                    4b:6f:36:cd:a1:87:d2:a2:32:b1:b7:b3:ee:78:15:
                    45:fa:43:d9:65:bc:f3:57:3a:ff:43:90:81:ef:e2:
                    e0:46:15:da:d0:ee:d1:f1:db:ba:b9:73:97:00:d6:
                    b3:de:9e:8d:16:4a:29:ea:32:7b:e2:62:08:66:10:
                    21:47:a1:84:c9:73:68:6e:49:f6:8e:40:4f:99:03:
                    e5:56:44:93:fd:df:ba:fd:67:b7:ec:a2:08:24:af:
                    c2:f3:9e:ab:5a:dc:c9:50:35:4d:a9:d8:03:38:cc:
                    c5:ea:25:d1:2e:04:b8:08:c0:ad:5f:57:31:98:5e:
                    b5:81:0f:32:51:21:35:70:3c:01:7a:e4:cc:5a:c6:
                    66:65:0f:8c:30:48:7b:c4:ad:e6:c8:d9:a6:21:6e:
                    26:a1:d1:eb:98:6d:3e:3d:55:98:95:ba:a3:b5:d8:
                    75:2a:71:ab:47:ce:fc:83:f4:78:7a:e1:0a:4e:cc:
                    76:da:fb:59:f0:6b:46:5e:2a:3f:29:c2:9e:dc:41:
                    c2:b8:11:b3:8c:b1:cd:cc:55:e0:0e:af:e8:1f:d3:
                    71:c0:02:60:94:e8:df:02:02:d1:f4:d5:fd:7a:ac:
                    b6:16:60:3a:7b:b5:07:38:32:db:72:05:83:b0:20:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8D:F7:5B:B0:19:B0:BA:40:C1:81:09:35:BD:4F:8F:F3:8D:73:8E
            X509v3 Authority Key Identifier:
                keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:02:52:58:10:9d:03:2d:0b:e2:97:09:f5:11:3c:cc:ed:af:
         71:e1:44:82:33:dc:9c:b6:20:85:62:79:6b:8e:51:4f:1c:0a:
         d8:2a:7c:ef:68:0c:e4:40:a6:f2:6d:dc:db:0a:01:95:f8:ac:
         19:68:43:c1:96:89:e3:8e:cb:07:82:ab:54:c1:2e:10:69:ee:
         63:7f:a0:1b:b6:b1:6c:d6:27:fe:33:b4:1b:86:fc:c3:9c:bb:
         1c:25:6a:93:c2:96:c3:1f:ad:0e:f5:71:d7:fc:43:d5:f5:b3:
         98:06:ff:a6:84:08:57:79:45:b2:1b:1d:63:02:03:bf:ad:d1:
         6f:ec:d0:f1:36:5a:62:45:92:c6:72:fd:fd:06:b2:3c:a8:19:
         85:9d:32:87:8e:03:8c:c6:ec:a8:43:4d:ef:ee:26:d8:ec:35:
         4b:33:0a:a9:25:0a:82:d3:55:44:32:55:87:c1:ef:84:aa:53:
         5d:da:84:5e:fa:04:57:e5:73:24:12:4b:60:10:31:73:a9:5c:
         f1:c8:71:11:f9:0a:84:a4:3f:c6:12:66:4b:cb:0e:af:58:8e:
         f4:02:25:0b:d8:78:97:58:5c:46:36:40:b7:55:8d:76:0d:2d:
         f5:4b:14:48:fa:08:13:3d:36:61:5c:c0:4b:ec:00:fd:e3:89:
         2f:e2:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:19:27 2025 by rpki-client