Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File:                     Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier:          1tinb2oTrB/8ziZsarddBNBRsnS9zqz3+e6P2MB5WJY=
Subject key identifier:   23:3F:22:CE:AB:2E:9E:BC:9F:2D:73:0D:2D:FA:B3:1C:20:19:93:8A
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer:       /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial:       019848C0D6DD5A3B75E8977AE4306E3BAA71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number:          0FFB
Signing time:             Sat 26 Jul 2025 22:00:54 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:54 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:54 +0000
Files and hashes:         1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=)
                          2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: LKHM52NdbbnFb4EcpEZhGSBbR0jMtdB4hJSQc5PZyw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:d6:dd:5a:3b:75:e8:97:7a:e4:30:6e:3b:aa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
        Validity
            Not Before: Jul 26 22:00:54 2025 GMT
            Not After : Jul 27 22:00:54 2025 GMT
        Subject: CN=233f22ceab2e9ebc9f2d730d2dfab31c2019938a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:cc:a7:a8:43:e1:b3:e8:38:14:83:56:c5:
                    e4:a0:56:7e:68:0c:9a:db:5e:40:eb:31:f1:0f:1c:
                    77:dd:90:69:5d:3a:d2:77:d5:f6:d7:70:fa:eb:a2:
                    71:f4:c4:ea:6b:a1:8d:e2:ec:a5:ef:4d:4d:20:fd:
                    57:9e:5a:94:6a:1f:c0:3d:36:57:a7:e7:61:d5:93:
                    61:75:eb:ff:d5:22:3e:dc:11:ee:a9:3b:73:74:15:
                    24:98:67:68:44:f6:dc:88:7c:f8:37:a7:2d:c4:81:
                    d4:a8:31:34:d6:da:2d:47:42:e9:a1:a1:50:c7:81:
                    f7:9d:d5:f9:2e:0f:62:5c:5f:20:99:56:b2:65:72:
                    90:d6:0f:68:b6:64:98:ff:fe:ab:4f:de:3c:52:89:
                    9b:9f:8e:2f:46:b3:04:6b:03:9f:e6:4b:53:18:6c:
                    58:1b:31:f9:e9:6f:98:f6:30:0c:e4:05:97:4b:13:
                    d7:c6:79:46:4c:b4:fa:88:27:a7:3a:e3:42:95:d6:
                    d3:44:ce:1b:5a:b2:c2:2f:69:7c:3e:d1:af:26:89:
                    e9:43:89:5a:6b:da:44:4f:d4:40:f0:24:eb:67:0a:
                    30:86:8f:02:9f:a3:ef:4b:16:eb:3f:42:3b:9e:5d:
                    3c:88:a2:ae:d3:43:bd:23:08:0f:5a:2c:a3:6e:55:
                    76:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:22:CE:AB:2E:9E:BC:9F:2D:73:0D:2D:FA:B3:1C:20:19:93:8A
            X509v3 Authority Key Identifier:
                keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:41:51:87:15:89:44:b5:e2:1e:b4:7e:e5:db:3e:95:1e:13:
         20:fd:19:c7:d1:e9:34:4d:e2:97:45:6b:a0:fe:ad:9d:9e:16:
         76:60:ba:ab:2b:5f:0e:5f:ec:79:9a:18:4d:e1:c6:7b:88:dc:
         82:28:8d:fb:67:6e:8e:f8:53:b1:24:a7:b0:52:cc:12:df:ea:
         0c:8a:81:77:c5:aa:00:7b:ab:c8:39:8b:5b:43:de:48:b9:60:
         75:ee:31:ce:6e:5d:fa:09:f2:dd:7c:28:64:ec:5a:87:6b:0b:
         17:20:ca:9b:59:4c:3d:52:0c:fb:3b:53:78:c3:bf:8b:3d:a3:
         82:bd:be:c7:74:f9:59:01:88:8e:18:cd:f4:82:06:c5:b5:c1:
         03:2a:63:35:0f:89:7b:fd:0d:48:42:d5:c2:8a:96:2f:8b:87:
         ef:18:03:59:59:36:7d:be:00:79:98:9d:81:4b:1a:a4:46:bb:
         38:eb:d9:5a:65:d7:53:80:68:96:d3:18:a2:5b:bd:12:b5:91:
         e8:43:f2:15:7f:46:e5:46:8a:6f:5a:19:ee:3e:53:3e:0e:b7:
         9f:a2:04:2f:65:81:56:fc:02:47:8f:24:1d:1c:77:67:5a:73:
         46:10:97:60:0d:8e:f0:f9:9d:b2:f9:02:59:e6:22:c9:16:31:
         97:76:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:15:33 2025 by rpki-client