Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File:                     t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier:          HQ0HvsYDb9h24LG6KZb7y58bThck+HZXIzH34EU9Ypc=
Subject key identifier:   B5:4D:06:91:3E:0B:97:D8:53:11:F2:E5:B9:1A:32:B7:E7:23:4D:7F
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer:       /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial:       01984107541F5117E12775DB172C2A6B18EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number:          0F26
Signing time:             Fri 25 Jul 2025 10:00:56 +0000
Manifest this update:     Fri 25 Jul 2025 10:00:56 +0000
Manifest next update:     Sat 26 Jul 2025 10:00:56 +0000
Files and hashes:         1: qRT-_MhiSov-WJNuRCh-o1ABg_w.roa (hash: Sgwzeb8jM4K/wZC25rDRhN0A8vnEn9LK1zNCxvWZ1iA=)
                          2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: hUBp/U/kuxVxqZDt4fw9lMsmhFNknXM5rxccLnBmgpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:41:07:54:1f:51:17:e1:27:75:db:17:2c:2a:6b:18:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
        Validity
            Not Before: Jul 25 10:00:56 2025 GMT
            Not After : Jul 26 10:00:56 2025 GMT
        Subject: CN=b54d06913e0b97d85311f2e5b91a32b7e7234d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:bd:3d:e5:cb:da:f7:6b:e4:21:31:7c:b3:
                    73:e9:ee:41:ff:ef:0b:a1:02:c4:a6:f1:e6:58:5e:
                    3f:a6:87:43:da:f2:2f:01:99:89:8e:20:c6:0d:23:
                    0d:1f:70:6a:03:f0:b2:af:5f:c0:50:6d:7e:72:84:
                    dc:a3:6a:46:d6:3c:62:5f:08:19:11:b0:25:6b:97:
                    a7:ba:d4:28:f5:3d:01:58:26:b0:62:fa:49:bd:90:
                    76:f2:41:a7:81:f1:58:ff:0e:f4:2e:9e:7a:88:4e:
                    ff:0b:d4:2a:ee:35:f0:2d:75:22:84:51:1f:ab:ee:
                    db:ed:e2:8e:00:2b:1f:13:8a:e1:90:8b:2a:86:b2:
                    dd:3a:da:c8:79:9a:9d:21:a3:d6:48:c2:ea:cf:a8:
                    cc:ac:94:7c:06:2d:ce:08:08:3c:42:f2:f8:2f:04:
                    9a:2e:7c:08:b1:1e:db:d3:8f:fb:cc:be:5a:5a:dd:
                    47:84:66:f0:91:d4:51:18:d6:9f:60:53:07:08:94:
                    02:62:9b:41:1c:4e:08:6d:a2:44:bc:33:96:d0:cf:
                    21:63:77:89:93:6d:85:77:f8:ba:1a:56:37:ac:8e:
                    91:d6:d6:9f:df:b3:8b:0e:ac:68:fd:8d:c2:c3:78:
                    3f:c3:95:8f:44:56:1d:cc:18:e1:93:4b:78:17:d4:
                    4b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4D:06:91:3E:0B:97:D8:53:11:F2:E5:B9:1A:32:B7:E7:23:4D:7F
            X509v3 Authority Key Identifier:
                keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4a:1c:b5:30:2b:5b:ac:f1:70:43:81:87:b9:bf:2f:e1:4f:
         80:d3:4b:ea:f0:3d:b7:fe:7e:cb:0f:c1:72:a6:23:64:ec:54:
         99:fe:13:d7:74:cf:b0:e6:00:b7:fe:c3:46:9d:1c:2a:8c:4f:
         87:1b:0e:78:e1:ae:70:39:c3:9a:9e:88:76:96:a4:84:5b:0a:
         c3:29:92:b9:4c:f1:2f:1c:5a:01:53:d5:f4:98:27:11:13:5c:
         29:3c:8e:e3:ec:61:e7:09:2c:75:ac:08:9a:83:3f:1e:3f:2b:
         13:09:0b:86:9b:95:7e:da:10:71:90:9e:72:fa:7c:32:d8:a2:
         86:8f:2f:6c:9b:33:77:80:54:63:c9:fe:e2:13:95:d7:80:e8:
         48:0d:b2:7a:c7:84:de:0e:1f:0e:c5:c3:da:52:79:22:fb:2a:
         03:18:a6:fc:20:95:79:57:4d:d7:72:34:4c:46:c1:8b:51:46:
         6b:56:a1:35:1b:28:a9:e1:2f:36:5f:11:0c:4d:ce:24:81:a7:
         8d:a5:30:70:04:bf:96:c9:e5:9d:c2:b0:19:d5:95:8a:15:b4:
         4f:99:ab:ff:19:80:5f:64:30:15:a6:4d:0e:9e:48:6e:c1:92:
         fb:5e:a2:d3:48:ad:84:14:5d:84:c2:f5:16:31:60:87:a5:73:
         35:26:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:58:03 2025 by rpki-client