Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File:                     CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier:          kMpZEh+ZOazosw8T97R5PgwRyrWr8ZgN7lE604BvgbQ=
Subject key identifier:   F1:74:04:F0:55:3A:DA:4D:80:60:84:2D:97:53:D6:8F:FD:C3:8B:60
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer:       /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial:       019858DA753E427AFC43DA68A2936E33E5C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number:          127F
Signing time:             Wed 30 Jul 2025 01:02:48 +0000
Manifest this update:     Wed 30 Jul 2025 01:02:48 +0000
Manifest next update:     Thu 31 Jul 2025 01:02:48 +0000
Files and hashes:         1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: UQ0tjHwNwyHuf2ded0333aMghKnjd7d1Cy/tg7XObfo=)
                          2: jusxHEEIsrLZpxHa35fyPkAqK7s.roa (hash: ZFDdzLmEvnMxmWT9XlxYhopgvJv0aQjuJRSBRhLyOC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:58:da:75:3e:42:7a:fc:43:da:68:a2:93:6e:33:e5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
        Validity
            Not Before: Jul 30 01:02:48 2025 GMT
            Not After : Jul 31 01:02:48 2025 GMT
        Subject: CN=f17404f0553ada4d8060842d9753d68ffdc38b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:81:11:eb:5a:6d:dd:15:94:91:af:46:19:
                    bb:56:18:9d:69:80:d7:14:c2:ab:b5:85:4d:9a:c7:
                    39:5c:f1:cc:88:0f:9c:a5:fc:57:6b:80:3b:85:cb:
                    58:b6:90:40:b6:bd:dd:49:06:5f:ed:8b:9b:92:31:
                    f2:1c:d7:8b:03:e2:3c:2b:99:07:56:06:6f:ec:40:
                    da:41:e0:e2:1b:4c:af:3b:ad:b5:13:22:e3:06:4d:
                    7d:a8:db:e8:8b:e4:67:d8:a5:32:01:a4:84:e0:02:
                    a8:1a:f0:0e:d6:e5:0f:83:47:12:74:f8:d7:12:3e:
                    cb:0d:ee:29:81:36:66:05:f6:d4:50:eb:04:1f:aa:
                    ee:49:7a:60:8d:90:3b:14:b9:5a:7d:a6:73:ed:03:
                    71:b8:4f:c4:b8:7b:de:b0:ff:c3:f9:06:6b:46:92:
                    c7:36:b8:8f:10:d0:56:b0:b9:a2:b3:45:6f:77:79:
                    f5:01:1a:be:10:a2:e0:03:d6:ca:e6:14:2c:74:f2:
                    eb:77:fc:0f:d1:6f:64:c7:dc:e0:e5:00:a4:a6:5d:
                    de:d6:ab:bc:10:30:8c:f6:27:4e:5b:cd:c6:74:0e:
                    07:a1:b0:5e:b7:2b:ee:8f:2c:a6:b5:1c:40:39:b5:
                    9b:14:e2:cd:23:b0:a4:5c:a6:2e:5c:27:74:20:cf:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:74:04:F0:55:3A:DA:4D:80:60:84:2D:97:53:D6:8F:FD:C3:8B:60
            X509v3 Authority Key Identifier:
                keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:eb:51:38:17:0b:48:e7:dc:b1:f2:42:36:50:59:c0:8e:5d:
         08:19:72:b6:aa:1c:74:86:71:cd:be:9d:06:10:d1:b3:32:38:
         7d:c2:57:25:e8:04:93:67:4f:fd:65:d5:06:78:a6:9f:1e:ce:
         6f:b7:d9:f4:60:56:62:3b:f8:04:c5:4b:8b:0b:6a:a3:4a:e6:
         2d:3e:24:92:87:63:c7:07:d5:2b:8f:ff:91:23:ce:cd:1d:f2:
         bd:36:f0:f9:b1:70:ca:2e:db:f2:b8:c5:7e:b2:7e:a3:dd:87:
         ab:31:88:2f:69:ed:85:c8:0c:ed:d1:1e:dc:89:d4:ea:ce:1d:
         81:f9:cb:2d:16:11:82:6e:91:59:ad:5c:50:23:3b:2b:45:56:
         bf:95:8a:c3:98:e1:4a:f9:50:4c:c4:45:45:23:5f:7a:38:1c:
         eb:fd:a0:ee:9a:33:95:5e:92:de:1e:22:63:c2:75:ce:d0:45:
         4a:1d:82:85:3e:c1:22:f2:10:b9:ff:ea:80:42:85:fa:50:98:
         e5:16:f6:1a:14:6b:53:61:b2:a9:5d:9f:b5:6a:be:ef:5d:b4:
         84:60:f3:21:ac:2b:3e:27:bd:df:e2:7c:ed:3b:41:a5:e0:90:
         6f:14:b8:d7:a5:d1:4e:d0:2d:5a:0c:39:c1:b5:84:d2:0d:22:
         d4:07:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:39:25 2025 by rpki-client