Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File:                     gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier:          er9NPakK3dWPQq/s8fnVrSl2L+J9ObGWxrGw0DpvJv0=
Subject key identifier:   0E:29:39:36:D7:E4:A1:0F:D2:21:74:56:C6:6C:CF:10:A8:B7:9D:D4
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer:       /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial:       01983FBE20FC40A41CE97A058DF3E9D712D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number:          15FD
Signing time:             Fri 25 Jul 2025 04:01:21 +0000
Manifest this update:     Fri 25 Jul 2025 04:01:21 +0000
Manifest next update:     Sat 26 Jul 2025 04:01:21 +0000
Files and hashes:         1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
                          2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
                          3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: S+yza2+AhaVNN1XFCyaTqBXIZd5nUYsCYnMr6tMRt40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3f:be:20:fc:40:a4:1c:e9:7a:05:8d:f3:e9:d7:12:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
        Validity
            Not Before: Jul 25 04:01:21 2025 GMT
            Not After : Jul 26 04:01:21 2025 GMT
        Subject: CN=0e293936d7e4a10fd2217456c66ccf10a8b79dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:ab:21:f3:11:0f:15:8b:75:07:f5:ab:42:
                    39:96:9f:7f:0a:f7:53:b1:e5:b6:6d:d8:44:6b:d9:
                    dd:ea:ca:34:0f:b5:6f:50:8b:c7:23:05:de:d0:02:
                    45:5f:c7:34:12:82:a1:43:d8:6f:c5:13:51:f9:bd:
                    a4:0f:5b:c6:07:74:4a:fc:e1:a5:1f:d2:48:f9:a9:
                    88:b0:37:54:9d:7d:a8:af:b9:7b:83:57:c5:88:e5:
                    45:aa:4b:50:2e:b0:3c:17:dc:60:54:10:28:c6:b5:
                    3e:87:ed:f6:6b:ff:cc:3e:64:29:ce:c6:ca:98:d2:
                    f3:35:bf:89:d5:8a:48:20:13:34:67:cd:65:59:d5:
                    0b:30:01:9f:6c:9c:6c:66:10:24:68:f2:ce:c9:a6:
                    6b:b7:c8:eb:d4:d0:61:c0:b4:d0:e4:c1:98:19:23:
                    ea:2a:26:f4:26:fe:55:f0:f4:28:62:83:ea:ce:e5:
                    8b:12:19:30:30:34:40:59:d9:31:60:94:15:49:ec:
                    07:e8:8c:c1:1c:e2:1c:96:4c:18:3a:a4:15:5a:00:
                    c2:67:62:0b:50:62:6a:b5:3f:86:0d:0d:17:ba:bd:
                    84:b2:55:8c:e7:6d:a5:54:95:5a:1c:4a:b4:3c:be:
                    0d:42:bb:e9:64:55:fd:31:37:a0:d9:7c:e6:67:59:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:29:39:36:D7:E4:A1:0F:D2:21:74:56:C6:6C:CF:10:A8:B7:9D:D4
            X509v3 Authority Key Identifier:
                keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:a6:19:ef:7c:17:01:11:c5:c2:f4:20:72:52:ae:b5:aa:
         a8:6f:e3:e7:3f:3d:17:46:56:1e:3b:e4:5e:9f:a5:98:91:bc:
         67:dd:c6:ec:93:33:37:71:06:31:9c:89:94:07:08:6f:6c:cc:
         f3:7d:ad:7d:e5:fe:13:ee:8b:50:56:f9:ba:73:45:57:81:22:
         3b:c4:14:66:56:48:89:21:be:27:7f:d3:ed:a4:19:06:c3:a4:
         ce:90:0d:11:dc:dc:88:08:41:ed:e0:d8:96:fc:9e:30:92:a3:
         e0:17:62:97:89:69:e9:09:08:38:79:92:a5:c8:72:a5:d2:95:
         7f:be:d2:7f:bb:b8:fd:8f:67:f0:88:a0:52:bb:42:6f:5a:7d:
         e5:82:92:f5:04:e3:7a:d0:07:c7:e4:36:48:ec:2f:df:6b:4c:
         29:ae:e3:ae:11:fa:b0:20:24:91:c5:53:36:b5:d4:d4:3e:d5:
         39:78:5d:66:7a:ff:74:aa:a6:74:75:86:ce:73:f0:96:d7:3d:
         ba:e8:08:6c:9e:ee:a6:51:e8:d6:84:e5:c2:ab:c5:9a:5d:cd:
         1f:0e:4a:5e:ea:fa:f1:db:41:06:c5:b7:95:27:38:ef:59:f1:
         a0:7a:db:cd:18:4b:9c:60:2f:4a:8d:3b:ac:af:4f:38:bc:00:
         b9:ef:03:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 10:58:08 2025 by rpki-client