Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File:                     TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier:          NlcfWC6GbPLkqFuaFqS6jibAmolNG8kvuSOEhfqUEu4=
Subject key identifier:   26:92:71:73:E5:61:55:13:CF:72:24:08:6A:D4:D1:C8:22:9C:C7:93
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer:       /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial:       019847E5643699E569F903F3F075DF249C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number:          0DFE
Signing time:             Sat 26 Jul 2025 18:01:12 +0000
Manifest this update:     Sat 26 Jul 2025 18:01:12 +0000
Manifest next update:     Sun 27 Jul 2025 18:01:12 +0000
Files and hashes:         1: 4Jp18k3WgZxFLlIl31FziAZ_pyE.roa (hash: Rdy6GJGskKOgLLcQAYAa6TgfgY93QdTyE4LXA4WR8FE=)
                          2: J-mZDParjvz3ljIfTzlhasavsBo.roa (hash: X+bwHIE0wlCUwYusUU0uKi4Yc/Kz9/L2eOGJbsIOXJw=)
                          3: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: BbZqxfsoTdAhcFIVM1ghVDOhqii8h4lCJ16+HYbT7Us=)
                          4: XKw10zVnmlXuQgWSHmsWy3UInkA.roa (hash: fA8gDGCZEPwWssK0Gw9sjd95kghYgprLAypP9MmGqjE=)
                          5: cxjVghHfKz7r8jK0ajPAm20QF-U.roa (hash: HPsMihI6S6ZtrZUoih477ooLtwdT/SYfO2io/vTyfY8=)
                          6: d852wo13D922O1kxvHO2L_8C0MU.roa (hash: HBCOzohfyjSX600EtZoiv9El3W7QzIDEos4plB6TxSI=)
                          7: jIbMiSFlsQdlGZXR1HxPoO5c35o.roa (hash: QE4Ii8v6WxF41ed0I+H7egny9WwHZOU3Z66ypjFLn7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e5:64:36:99:e5:69:f9:03:f3:f0:75:df:24:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
        Validity
            Not Before: Jul 26 18:01:12 2025 GMT
            Not After : Jul 27 18:01:12 2025 GMT
        Subject: CN=26927173e5615513cf7224086ad4d1c8229cc793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:6c:c5:b1:cb:18:40:03:50:e9:4d:86:c7:
                    6f:bd:ea:12:ba:b2:b7:0f:e2:69:43:d7:ec:2b:04:
                    bd:0d:88:e6:68:80:24:7a:10:bc:ae:cc:03:0a:ec:
                    4c:7b:65:9c:fb:9b:0b:64:02:00:c2:be:a6:1e:a2:
                    c4:c7:ab:d6:9a:fc:3e:ba:9b:a4:bb:17:85:0e:59:
                    d4:8e:9a:d0:c9:00:3d:a5:03:bb:61:3f:20:8e:13:
                    21:65:a2:e9:ed:99:af:1b:aa:89:34:9c:39:b6:79:
                    8e:da:cc:a1:1f:0d:6f:32:c4:30:ea:94:aa:1c:f0:
                    88:ac:4f:5e:86:3b:ac:78:87:b0:8c:07:2c:7a:0b:
                    9e:6f:03:18:d0:3c:6c:b7:e8:1a:d0:30:73:a8:09:
                    b6:62:4b:3e:73:19:ed:a2:2b:10:7a:1b:47:e7:a4:
                    c0:94:3a:0c:27:54:80:02:96:61:eb:0e:78:f7:99:
                    85:9b:5b:90:40:a1:d2:0c:a3:80:cc:2c:6b:64:08:
                    13:ef:42:ff:f7:a1:51:61:4e:67:3f:14:88:54:6c:
                    9f:66:57:6e:8b:82:59:d3:5a:9e:ab:96:7e:81:22:
                    5b:c9:74:6a:0a:76:24:a3:10:e5:df:46:39:e2:ff:
                    61:58:3a:37:2d:56:fd:34:8b:89:55:fa:a9:bf:41:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:92:71:73:E5:61:55:13:CF:72:24:08:6A:D4:D1:C8:22:9C:C7:93
            X509v3 Authority Key Identifier:
                keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:98:28:3a:36:a3:45:9c:e4:cc:65:9e:32:94:e3:31:ab:81:
         30:22:f6:b2:63:54:9f:c5:c0:e0:33:ec:99:1e:f4:99:72:93:
         9a:c9:52:e9:e2:45:2c:37:49:5d:2c:ea:ed:f9:2e:8b:9d:85:
         0d:06:e4:a6:a5:7d:76:97:4b:7e:cc:fd:b4:bb:75:52:55:3a:
         75:e8:b9:71:45:38:c3:cf:04:55:6f:07:a6:a5:16:06:4e:99:
         0a:6c:f4:eb:4e:00:71:75:11:a4:1f:57:ee:ff:90:0e:e3:91:
         f0:10:c7:5a:30:62:36:24:90:83:4d:5a:d9:41:12:9d:39:a8:
         cd:21:68:03:f0:77:be:89:29:02:ce:aa:ac:db:4b:a6:f4:d3:
         86:1a:d7:fa:e9:f1:f0:49:cd:81:b7:19:6b:12:c7:85:c1:96:
         16:20:84:e9:c7:03:20:a6:e4:38:09:02:42:03:7e:9e:0e:94:
         9b:6b:21:1a:f6:8a:8f:76:c5:ae:46:6e:68:43:02:15:e9:da:
         e4:6b:a5:c8:ca:ab:c0:ed:77:a3:6f:c6:0b:21:af:71:bc:11:
         1d:0b:4a:ad:5e:50:89:0b:c5:21:1f:c7:d2:23:42:ac:53:98:
         a0:f0:da:e1:9a:f7:f5:cf:e3:88:c3:77:64:8d:a7:60:70:97:
         04:48:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:38:17 2025 by rpki-client