Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File:                     bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier:          wu8Mgdxf8E2GuZab2sKf7Ht/yRcP4339CwbVMQpEbio=
Subject key identifier:   CD:8A:7E:76:A0:76:20:59:AF:9C:31:D7:C8:6A:82:CB:8F:E8:13:1E
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer:       /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial:       019847091A92AF792755AA4B8DD6E5D75921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number:          0DB4
Signing time:             Sat 26 Jul 2025 14:00:35 +0000
Manifest this update:     Sat 26 Jul 2025 14:00:35 +0000
Manifest next update:     Sun 27 Jul 2025 14:00:35 +0000
Files and hashes:         1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
                          2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: 8EYb+tLo7LEosv68L2fVkyN3wn6KNnd8WVvHGFMwCbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:09:1a:92:af:79:27:55:aa:4b:8d:d6:e5:d7:59:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
        Validity
            Not Before: Jul 26 14:00:35 2025 GMT
            Not After : Jul 27 14:00:35 2025 GMT
        Subject: CN=cd8a7e76a0762059af9c31d7c86a82cb8fe8131e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:c9:0d:81:7b:8f:6b:93:c1:f1:89:12:a9:
                    bf:87:ed:98:9d:4d:cf:37:28:e1:9e:c4:1c:30:3b:
                    b1:df:88:16:ea:91:d4:47:45:5d:58:27:f2:10:d3:
                    73:13:7c:95:05:97:85:14:47:51:8c:c9:48:8d:dd:
                    30:5b:ad:49:2f:d8:1f:ff:11:64:e2:58:6a:7d:5f:
                    88:52:b7:5a:c9:fe:50:16:ff:b9:c2:eb:cc:3f:0e:
                    ed:e7:06:b6:9d:ab:80:f1:8c:df:f9:3b:a2:e8:17:
                    32:27:a4:83:3a:24:ae:69:1d:3f:cc:3d:38:32:af:
                    8f:e4:35:f4:21:29:96:20:71:eb:59:6f:02:57:f1:
                    64:61:09:4d:c9:00:b2:27:5d:fe:69:81:c3:23:83:
                    fc:fa:4b:5a:1a:cd:02:83:ae:0f:c6:80:62:bb:ee:
                    a5:82:b3:c8:b6:1a:ac:5e:97:3f:1e:47:fd:fe:ae:
                    60:75:b3:e8:2a:d2:52:ff:32:51:b0:bd:46:5b:a3:
                    37:2c:e0:d5:90:43:05:f5:56:7c:1d:b4:60:02:75:
                    a9:7e:7b:87:41:1c:a1:5e:34:3a:1a:7d:b7:7e:3c:
                    87:ed:d9:40:04:75:63:29:7b:70:69:4a:5a:4c:67:
                    f7:73:2e:57:e9:5a:5c:9d:d2:ea:18:80:9f:06:91:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8A:7E:76:A0:76:20:59:AF:9C:31:D7:C8:6A:82:CB:8F:E8:13:1E
            X509v3 Authority Key Identifier:
                keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:e5:e7:6d:6a:1c:99:bd:93:7f:0c:48:84:df:e6:0f:fc:ab:
         f3:3c:bd:49:a8:fb:ca:40:1b:68:01:22:68:40:6e:ab:f3:b7:
         5b:96:4d:41:3e:78:d6:e4:05:e9:ee:65:68:da:3b:ab:b6:dd:
         d6:1c:7b:c4:45:c2:58:c0:ad:c4:23:de:20:6d:bd:3d:5b:f9:
         fe:5a:ef:47:f8:6a:5a:bf:23:a7:d3:6c:0b:79:9b:6f:51:9d:
         eb:44:c0:1b:ac:c9:65:d5:db:55:6c:c2:3d:3b:54:48:a4:24:
         b6:8a:c4:73:ec:a8:aa:42:92:85:a7:74:1d:3a:b6:69:5a:4a:
         60:38:e9:98:d8:54:f2:ff:b4:3c:8b:41:a1:29:ae:53:a9:42:
         1a:59:82:9d:fb:c1:9e:ce:92:0d:bb:43:79:d1:13:1e:39:91:
         0e:8b:d1:80:2c:c3:dc:8b:65:d3:51:91:71:61:21:c8:76:64:
         cf:32:a0:79:12:2d:e7:b2:7f:2e:59:68:72:1d:7a:64:73:fa:
         bc:93:56:ef:f8:ab:d1:42:99:51:e1:cb:43:7e:0b:e6:bc:01:
         5f:6b:49:53:fd:c8:d6:5c:91:42:01:60:ab:a7:70:f2:ae:17:
         76:e5:98:48:14:e1:f8:d5:dc:2a:b0:e9:c4:ff:42:0f:38:9d:
         fd:95:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:22:30 2025 by rpki-client