Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File:                     0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier:          zwDRsYQXcCGF+3W4rTdeIIsJseU1tPGsqfD1jIW1VFM=
Subject key identifier:   74:F7:D3:35:A8:E5:DC:C9:85:42:7C:B2:38:C4:9E:B1:69:53:01:64
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer:       /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial:       019849D2D00FC1E86E7AB9FE86795E5413AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 03:00:09 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:09 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:09 +0000
Files and hashes:         1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: 04dUnQBXdQC/fYjdS0mEXnRDQTpxEJQ76+wTyMKEajc=)
                          2: irNcQLmJh11TGBELw5uQP7kOVJE.roa (hash: R7pIQc58X7S0CJk6seUtKX1n/5bjuhfl7ShC4vfuTCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:d0:0f:c1:e8:6e:7a:b9:fe:86:79:5e:54:13:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
        Validity
            Not Before: Jul 27 03:00:09 2025 GMT
            Not After : Jul 28 03:00:09 2025 GMT
        Subject: CN=74f7d335a8e5dcc985427cb238c49eb169530164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:30:a6:4a:ee:7a:06:9f:f4:b9:49:16:16:
                    df:b9:ab:98:7f:5c:01:a8:cf:e5:02:51:8b:2d:0c:
                    3e:33:e5:b0:1e:7d:03:0d:50:97:06:6e:4f:99:f4:
                    a3:ce:01:f2:84:ce:e8:72:50:f8:91:0c:0c:f9:ee:
                    cc:bd:d3:3d:e0:a1:15:ef:d4:98:2c:b0:83:5a:61:
                    7a:e5:6e:70:02:81:38:a9:99:e5:e5:4f:ef:37:c3:
                    d6:45:9d:0c:54:8d:a8:bc:3b:14:6c:c0:d8:9b:50:
                    56:f2:d7:e5:ad:00:b4:31:6b:5b:85:bb:51:96:1e:
                    13:8c:01:1c:e2:c3:bf:22:ef:3f:14:bc:0e:4d:9e:
                    04:79:58:65:9f:f5:db:aa:34:5d:d8:c2:41:08:c8:
                    20:a8:a0:3b:df:6b:d0:0f:ff:05:6c:bc:6a:9d:4a:
                    e9:0a:63:d0:b4:58:e7:85:a7:f9:76:2d:0f:fb:ce:
                    cb:6a:6a:9e:f2:e9:69:17:bc:ca:a2:37:cb:62:8b:
                    31:bb:d7:a3:2e:f8:4e:b8:62:cb:a3:5c:fd:40:8d:
                    d8:05:1b:b1:4d:ed:7a:10:ac:13:81:20:c1:32:7e:
                    ba:76:01:12:44:be:50:f1:0d:99:32:05:11:c3:c5:
                    74:b4:ab:22:fd:22:09:ec:71:37:5e:20:fa:03:81:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F7:D3:35:A8:E5:DC:C9:85:42:7C:B2:38:C4:9E:B1:69:53:01:64
            X509v3 Authority Key Identifier:
                keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ea:90:e8:06:6d:e1:94:5d:78:3b:07:6e:31:c3:d6:1e:51:
         9d:3f:9f:6b:9d:da:ce:11:6d:7f:ca:d2:ac:08:00:15:21:57:
         da:8f:e4:c2:c0:fd:f6:62:88:fb:70:ce:39:75:02:f9:e8:ab:
         b3:05:4f:c5:c3:43:67:29:72:7b:41:b2:d3:64:7a:ae:f8:9f:
         18:b2:4f:2b:e4:4d:41:21:0e:86:22:92:67:22:27:20:23:b5:
         f9:ed:c0:6c:e0:90:9f:f0:2b:36:5e:dc:ae:5e:ad:93:9d:ce:
         d7:82:f6:a2:2e:00:d8:26:4d:ef:f5:6c:d4:ba:14:13:c1:ad:
         83:dd:a8:ae:fa:0b:fc:73:a5:8e:c2:9d:89:c1:31:fc:a2:e8:
         54:7d:b3:87:15:b3:27:7f:d4:72:13:2b:e4:97:27:47:75:18:
         14:64:13:42:3b:ea:7e:37:35:ec:69:4d:2e:bc:6d:3f:0e:6b:
         e3:24:a8:37:ac:68:ed:e5:6c:6a:3a:63:ba:47:56:32:f0:08:
         e8:90:9a:a6:25:25:5c:a3:20:b9:78:bd:c4:ca:7f:ba:a8:92:
         9e:c1:b0:bc:4e:9f:67:5a:eb:a0:07:67:84:a6:40:8d:2d:7a:
         54:4d:d3:21:f4:64:1e:17:37:eb:9e:bc:6d:90:a8:2d:8c:d5:
         db:4c:70:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:52 2025 by rpki-client