Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File:                     CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier:          ggwkORam1bjepNXV3phaykai0sMQLLMikSVfZYXTyo8=
Subject key identifier:   0A:D8:61:C5:0E:5B:2F:8E:10:D8:53:AF:87:C8:13:E2:26:68:6E:95
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer:       /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial:       019855DF74D86ABBF2D346625714A5217A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number:          107D
Signing time:             Tue 29 Jul 2025 11:09:24 +0000
Manifest this update:     Tue 29 Jul 2025 11:09:24 +0000
Manifest next update:     Wed 30 Jul 2025 11:09:24 +0000
Files and hashes:         1: 9BZlV5u49Gak3QK5oEuLPOBSnn0.roa (hash: FmzCgS4aXNRr8JerLZUsfQlHdIEA6EKm/rMgvtNymy8=)
                          2: B6wSZJvSGeybR7CPqtyVhXyylu0.roa (hash: JHvST/m8T4zGrW1YqRbxakpRITmsR241Cez8p9x2uaE=)
                          3: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: sGKW1hIJYqhP4ucJ+P3VpTtZAVIs7GGMej6v8ymTpXA=)
                          4: HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa (hash: cNxTbsYhGJbBaA5KX6zTYu/tMB/8NFnmb2pRJ5AhFSg=)
                          5: ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa (hash: PbN0VPyFR+E4wVcHf4vZ5OY6UiGEFVo+Jh+vf+hGjQM=)
                          6: mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa (hash: ooLE+dfj0M2cSMZSDMJWC5DsnnWyEmz/3Hgg0yiBDWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 11:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:df:74:d8:6a:bb:f2:d3:46:62:57:14:a5:21:7a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
        Validity
            Not Before: Jul 29 11:09:24 2025 GMT
            Not After : Jul 30 11:09:24 2025 GMT
        Subject: CN=0ad861c50e5b2f8e10d853af87c813e226686e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:aa:28:b3:5d:2f:54:f2:14:14:1e:e5:f6:
                    e5:9f:25:44:78:3c:49:4a:60:6b:37:01:d4:22:fa:
                    9d:6e:e3:86:e7:84:86:a3:4e:c4:4d:9a:57:c2:b9:
                    26:3f:53:ea:ec:98:d8:8e:5a:7c:80:1e:ca:61:a5:
                    e8:df:1f:80:3d:a9:6d:36:8d:38:3d:63:81:0f:27:
                    8b:fe:fd:ba:13:84:a3:c6:19:e6:07:6c:77:6a:d4:
                    ab:75:c4:1c:20:84:f8:11:5c:42:f4:56:3f:64:ed:
                    d9:e5:99:11:f9:ac:c0:b5:e2:0d:90:b0:37:b6:87:
                    d6:3c:b1:10:da:f7:80:b4:d4:d0:e1:d7:bb:8e:ce:
                    d9:9e:e3:ee:11:a2:18:c4:ad:8f:ae:52:f9:9e:95:
                    e7:da:a0:c2:50:94:d4:0b:f5:80:02:b2:5b:7a:fb:
                    3b:4c:71:99:91:2f:39:01:41:95:43:c8:78:ac:a6:
                    d0:87:30:40:54:e1:b2:7e:72:6a:0e:e1:09:1f:9c:
                    e6:85:55:0a:22:2d:cd:fa:51:d7:fd:8b:ab:e4:9a:
                    37:87:01:d0:a3:f7:bc:2b:39:3f:cf:fc:61:8b:73:
                    52:fa:5f:b8:61:f7:d1:f9:d1:87:2b:e0:b0:e1:82:
                    47:fb:08:e0:5f:b4:d0:64:3d:28:45:c6:78:5f:2c:
                    ae:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D8:61:C5:0E:5B:2F:8E:10:D8:53:AF:87:C8:13:E2:26:68:6E:95
            X509v3 Authority Key Identifier:
                keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b9:ad:28:aa:79:c0:b4:b8:b4:74:ec:8a:1f:b5:e6:09:d4:
         37:2d:1b:15:2e:ba:27:9a:22:1f:04:2f:7f:39:0b:1f:a9:2a:
         af:57:09:c1:1c:6d:da:c7:c0:1d:33:d4:14:2c:98:28:95:45:
         3a:46:cd:59:8a:ac:21:78:51:4c:6f:81:fa:18:30:26:bd:73:
         90:9b:4b:ac:1c:ac:0c:53:15:dd:e3:12:a6:75:17:42:27:52:
         b0:6c:e2:12:7e:3c:e6:d6:8d:8a:29:95:8f:1d:44:73:c7:a3:
         e0:70:a9:5f:53:d8:99:73:52:36:f5:05:79:65:d6:97:2c:0f:
         b8:2b:d3:79:1f:3d:c7:ee:b8:de:5e:e6:b2:a5:86:ec:09:9d:
         15:d3:dd:81:8a:91:3f:98:1b:c7:48:5b:5d:4b:cd:d2:76:26:
         fa:30:3f:51:22:a3:20:96:ba:d7:fd:5e:42:02:16:8b:0c:87:
         a5:a6:1a:8f:07:de:5f:85:a1:0a:55:6f:6f:22:c2:7a:c1:52:
         38:02:65:46:ca:e6:34:80:9f:dc:08:90:51:68:33:ef:6b:0a:
         ae:5a:6d:b5:88:be:0d:6b:6a:5a:10:ca:93:7c:f8:fe:6f:c9:
         20:d8:4c:d3:76:5a:40:ce:04:5d:a3:fb:1d:a4:29:cf:1d:b1:
         9d:d0:05:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:57:25 2025 by rpki-client