Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File:                     0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier:          bWer7gobSta6OPZiQEjRFQtzaLOX3JbjeUYtmogFUdQ=
Subject key identifier:   9B:74:83:08:33:2E:3E:97:56:61:8F:FF:7E:90:59:41:31:17:E5:74
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer:       /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial:       01983916193C658D473AD35A51A6D98F36FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number:          15F7
Signing time:             Wed 23 Jul 2025 21:00:06 +0000
Manifest this update:     Wed 23 Jul 2025 21:00:06 +0000
Manifest next update:     Thu 24 Jul 2025 21:00:06 +0000
Files and hashes:         1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: eGfV/1PtSxf9WLADRAThdiXDccSgXZBzJugqhFolk2U=)
                          2: 1-ZNTPcQUw8PaedWPij0FjBg6iOY.roa (hash: hVPLICluHooRq9Tlz1cpYKX47tdy3LL3+Q3QLkvNJ5E=)
                          3: 2Gw8QOnYAv2wXYmUeczArrriB1Q.roa (hash: scuEsz0Czk4jUI1o0fHWA1GaytybLeSIsLRXLL6rVAo=)
                          4: fXqeDNUF09E57BXRF0QIls-uZ44.roa (hash: hJ/0oVyr/hUhxK31bOGJWQ8EL165OcYQ6RwEzy2jKI8=)
                          5: uGd2svx2nM-ThRz4Z5ZLS4pryPE.roa (hash: miR6GHPuEFoodfHk/rc71EoG5Q+xZw/Ncoa5ppurE4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 21:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:16:19:3c:65:8d:47:3a:d3:5a:51:a6:d9:8f:36:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Validity
            Not Before: Jul 23 21:00:06 2025 GMT
            Not After : Jul 24 21:00:06 2025 GMT
        Subject: CN=9b748308332e3e9756618fff7e9059413117e574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:58:a8:c2:29:f2:be:e5:f0:d8:9d:ad:ec:
                    8b:e9:d3:2d:88:bd:ca:9d:f0:0d:19:b5:94:f0:58:
                    62:f7:53:ca:88:40:f9:f1:c5:dd:99:af:e4:cd:35:
                    64:05:4d:29:d1:c1:ef:b8:fd:47:ee:c5:dc:dc:06:
                    1c:5b:18:5b:8c:9e:ad:41:66:49:7d:71:b8:67:f8:
                    78:ce:ed:a8:13:f3:7c:f9:ac:d7:a5:ba:1a:e1:a5:
                    d9:f0:77:f7:8c:29:1d:da:24:15:31:93:e3:2a:99:
                    09:9d:06:05:c7:d4:26:17:5a:7c:5a:13:d9:09:df:
                    3d:10:3d:36:02:ce:c0:ee:d0:d5:69:87:86:53:a8:
                    ad:b4:ba:31:a6:ae:ce:e2:08:75:45:a8:e7:3e:50:
                    e4:54:a1:99:df:84:37:be:3e:55:49:b6:a4:7f:94:
                    45:20:31:bc:18:21:d9:b6:7a:3e:1f:58:ca:99:a8:
                    a8:41:2d:03:35:41:58:98:35:6f:fa:d5:a0:14:7f:
                    d0:8a:d5:3c:71:38:79:cf:77:db:5f:35:ad:c3:49:
                    3e:c2:66:9c:7a:fa:04:22:fd:6a:00:9d:46:44:4d:
                    6e:f6:57:e4:9c:68:88:b9:af:8a:01:a7:fc:58:f6:
                    29:43:3a:77:fc:1c:43:a0:12:7e:bb:b7:c7:50:9c:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:74:83:08:33:2E:3E:97:56:61:8F:FF:7E:90:59:41:31:17:E5:74
            X509v3 Authority Key Identifier:
                keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:74:93:95:b9:43:da:fb:9e:3d:d1:e8:37:bf:62:9f:59:d6:
         99:2f:1f:da:17:7d:d1:46:25:59:d3:55:50:f3:76:a0:97:99:
         2b:c1:71:71:71:b2:f7:84:1d:9e:75:65:43:0a:55:38:af:3b:
         27:48:18:f7:0d:20:10:fc:c0:1c:a5:1e:a9:19:5a:7f:b7:4e:
         ad:1f:48:c3:e5:3b:8c:36:78:e0:22:9e:bf:cf:59:bb:1b:20:
         92:60:b6:4b:4b:93:e6:71:a0:a6:e9:82:88:65:83:c3:30:e8:
         12:7e:ea:25:24:c3:7e:b2:ee:fd:99:3a:86:26:90:fe:2d:2f:
         b9:6f:a6:f4:a2:3a:11:40:46:6f:ad:b9:0b:ca:71:b3:f4:46:
         62:a2:7d:3d:44:0c:b8:4d:aa:37:49:ee:61:86:e4:87:6d:f5:
         31:fd:53:fa:b0:ef:86:bd:a1:2c:d6:03:0d:63:92:47:4f:bb:
         54:de:15:1b:0c:9f:03:8a:89:8a:f1:0d:6b:3d:3c:21:e9:bf:
         3c:58:8d:0e:f9:f1:dc:54:40:1f:39:8b:96:9a:13:73:05:b9:
         91:a9:b8:7d:22:67:b8:7d:27:76:8b:ef:93:2c:d2:f1:99:cd:
         17:64:15:3a:1c:be:df:33:1e:2e:b6:c9:cc:66:34:f2:86:04:
         23:89:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:59:17 2025 by rpki-client