Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File:                     rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier:          ZuyGzS0n5BxovyOKKIXP/PCSomHXo6VTlRl2KacK/b8=
Subject key identifier:   40:BC:35:9D:5D:88:85:AE:10:CD:74:D9:FD:98:BF:AC:D0:D9:08:E5
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer:       /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial:       01983D6132AE4CE09CC4F38F8CAB28EE49D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number:          09BC
Signing time:             Thu 24 Jul 2025 17:00:36 +0000
Manifest this update:     Thu 24 Jul 2025 17:00:36 +0000
Manifest next update:     Fri 25 Jul 2025 17:00:36 +0000
Files and hashes:         1: Srh5g0ojceAQmtMmznAeDlPYrmw.roa (hash: BwzeKUJcI7HC+qaLX49heipiCGP9LZF83f1jKxCnaAY=)
                          2: YJaCMuaqIfvKw8ug1wakmaHiyAo.roa (hash: HquheyE6JifaPiBPOhyTjTI1vWpMbf7om8VgpSRLgdk=)
                          3: gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa (hash: gi7helaQYpbx77moO9p/Ln33KR60Z884I8k4Z0Fll14=)
                          4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: utxvdSedxDViYK9OGaDOm7xlq6p4UKwnOytXl/y309s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3d:61:32:ae:4c:e0:9c:c4:f3:8f:8c:ab:28:ee:49:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
        Validity
            Not Before: Jul 24 17:00:36 2025 GMT
            Not After : Jul 25 17:00:36 2025 GMT
        Subject: CN=40bc359d5d8885ae10cd74d9fd98bfacd0d908e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:60:84:3a:94:0a:68:8a:d5:90:ba:0a:84:
                    71:86:60:db:61:af:e4:04:28:0f:16:78:f1:12:05:
                    92:73:0d:85:36:90:5b:5d:9e:b9:55:23:89:49:b4:
                    8c:e0:e3:4c:c0:21:89:59:3f:2c:53:60:58:8d:78:
                    b0:b0:2f:7c:62:27:5a:4f:f7:74:5c:da:f8:bf:f3:
                    57:c2:8a:d9:1c:e6:bd:17:4b:ea:0b:46:2f:00:a4:
                    ee:f7:a6:67:0e:0d:b0:66:b0:c6:db:6f:ca:32:12:
                    c8:5c:1c:1f:fc:b2:66:a7:ab:c4:cd:e2:c3:ae:35:
                    10:63:1c:b1:29:b6:d4:2a:63:04:01:68:2b:d0:ee:
                    fd:01:1d:88:e7:9e:a7:84:95:01:a7:61:3e:c7:5c:
                    5d:bc:94:ed:e7:25:37:cc:81:e8:e3:e3:89:10:20:
                    97:b0:bf:67:88:d0:0e:d4:e5:17:23:cc:aa:14:39:
                    17:c3:0a:41:01:c3:5c:8c:fb:fd:ba:5d:dc:7a:89:
                    27:f0:76:95:bf:32:54:d2:ae:0a:71:f6:9b:56:db:
                    2c:00:a1:5c:5a:d9:7f:fc:ff:ba:44:c7:8c:3f:dd:
                    e6:c3:49:3b:04:4c:75:25:a9:3e:a0:af:41:44:2c:
                    9e:86:dd:ab:22:c9:06:e2:ad:9b:86:c2:f5:b6:6e:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BC:35:9D:5D:88:85:AE:10:CD:74:D9:FD:98:BF:AC:D0:D9:08:E5
            X509v3 Authority Key Identifier:
                keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ff:a1:8d:70:0a:a7:d4:0e:40:d3:97:ec:05:bf:5a:4e:b2:
         50:54:02:03:20:ef:8f:cd:bc:f7:64:04:e9:c5:2a:9c:5d:3a:
         8d:40:5b:17:be:93:b4:14:c8:57:f6:90:26:ac:d4:50:89:ad:
         76:a0:46:4d:14:76:3a:bb:84:c0:90:3c:99:63:3e:55:f0:cf:
         47:fc:34:43:b3:90:1a:90:99:d2:fd:01:9d:75:ef:79:ae:e5:
         dc:77:cd:14:ec:26:22:b4:5a:66:00:c7:b6:12:65:8f:41:1e:
         0e:64:68:3e:c2:ba:5b:fe:c3:2c:ef:c8:3a:1b:22:4f:0d:4d:
         78:f2:29:7d:93:71:b9:da:87:8d:fe:e2:af:b2:42:ea:88:61:
         f9:eb:32:d9:64:63:2d:18:6d:fd:b7:54:ea:ab:dd:28:2b:28:
         13:33:c1:a4:de:f1:b3:2a:b9:f1:cf:47:07:46:c1:7f:50:73:
         70:f1:a5:aa:40:a4:77:77:de:cf:bc:80:0a:e5:ca:d4:6f:2f:
         72:9c:0a:8b:c6:0d:81:01:02:5f:ae:c5:da:4a:e2:71:68:dd:
         eb:d6:89:ba:2f:c4:b6:f1:9b:fb:45:60:7f:e5:2c:57:4d:bc:
         48:23:a2:eb:ff:5f:35:b6:a2:9e:83:f3:aa:06:5a:45:cf:66:
         fd:24:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:06:45 2025 by rpki-client