Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
File:                     1V05IYUKX_8H7KJgo275IQHy2Fw.mft (raw, json)
Hash identifier:          YsrJZf/XjGFn+y3rFtIq/9j0VBwyx4HpNXWllqYRtTE=
Subject key identifier:   DC:95:8D:EA:51:BB:A5:3D:6D:23:0E:5D:81:80:7F:82:A9:8E:F0:75
Authority key identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
Certificate issuer:       /CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Certificate serial:       01984A77A2744C4C59645B5615A643F47F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
Manifest number:          0FFC
Signing time:             Sun 27 Jul 2025 06:00:10 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:10 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:10 +0000
Files and hashes:         1: 1V05IYUKX_8H7KJgo275IQHy2Fw.crl (hash: WS8VE6wvy3o9Iof7/jESTE8TDCQ0nyCqAv/xdU+d864=)
                          2: k2mbzTYpqu-vVJrS8eVrfjvKL6U.roa (hash: q1LZnQ/M/m1mtPJpKlXgR+S06Cq8uIHatKNRuGYjFtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:a2:74:4c:4c:59:64:5b:56:15:a6:43:f4:7f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55d3921850a5fff07eca260a36ef92101f2d85c
        Validity
            Not Before: Jul 27 06:00:10 2025 GMT
            Not After : Jul 28 06:00:10 2025 GMT
        Subject: CN=dc958dea51bba53d6d230e5d81807f82a98ef075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:84:06:c3:2a:12:e6:80:37:07:b6:28:b5:
                    51:68:3d:63:71:83:e4:fb:f2:98:7e:ba:a5:26:65:
                    42:42:99:36:31:ff:a7:86:cf:4f:32:0b:34:8b:9a:
                    bc:fb:3c:68:54:50:ca:05:99:6c:3f:3f:57:5f:ff:
                    3d:c5:0a:11:88:84:2b:81:11:e8:b0:bf:ab:7f:47:
                    91:5d:dc:4e:72:1c:92:bf:82:37:3b:3a:5c:6d:2c:
                    7f:5e:18:bc:98:c0:06:93:60:f4:dc:e4:d2:8b:e6:
                    37:40:ec:fd:56:3a:33:b8:7b:bf:d8:1d:51:db:82:
                    34:81:f2:e8:e4:ad:35:4c:98:f6:75:9e:71:e2:4b:
                    b2:a4:f3:f5:b9:62:11:65:49:0e:0b:b2:f7:b3:a5:
                    af:39:b0:41:aa:81:c6:48:67:2b:74:b6:f8:ec:fc:
                    b4:b0:8e:55:e0:48:16:bf:3d:8f:29:44:d0:69:78:
                    07:27:c4:8e:2e:dc:ff:62:28:2f:f0:e2:64:55:4f:
                    21:24:d0:e7:99:ba:41:a5:50:3c:8c:fe:d4:ab:04:
                    61:aa:b4:fc:53:78:76:af:f8:d7:f5:cc:1f:36:f9:
                    ce:1d:29:82:66:bc:45:a4:4b:e8:c9:a0:25:84:1a:
                    bc:90:f8:c8:69:87:48:76:4b:13:1a:6f:42:a7:2c:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:95:8D:EA:51:BB:A5:3D:6D:23:0E:5D:81:80:7F:82:A9:8E:F0:75
            X509v3 Authority Key Identifier:
                keyid:D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c3:fb:f4:e2:27:33:0c:4f:10:c5:c9:f5:91:b3:2f:68:89:
         12:9c:97:d9:c8:fb:94:c6:c0:8c:1b:3f:26:ef:0f:12:f9:51:
         e3:09:34:fe:82:df:52:cf:19:df:c8:6e:e7:57:3b:c9:42:db:
         8a:d7:59:27:4a:5c:79:be:cf:aa:3d:33:9d:18:62:78:0f:3d:
         39:27:80:8f:33:02:d6:37:b1:f5:6d:05:00:2f:d8:89:51:15:
         83:d7:d4:1e:44:62:5e:50:a6:ba:c3:6d:d8:c7:92:57:69:e8:
         47:f6:ca:81:21:2e:3f:8b:11:a5:ee:a8:38:f5:01:79:7e:21:
         41:94:9f:7d:dd:f1:eb:b7:dc:d2:5e:e8:5e:47:90:fa:1e:4a:
         56:2d:06:ba:f7:fe:0e:ba:b8:03:d8:4a:c8:07:0a:0b:95:30:
         56:fa:34:5d:54:7e:73:f8:ed:c7:f0:8a:f4:80:a2:79:7e:18:
         0e:64:d5:99:09:a8:65:b3:00:5a:fb:9c:59:0e:b3:ba:cc:97:
         57:46:83:69:78:52:82:30:95:3b:14:89:7e:81:b7:21:57:f2:
         aa:4c:cb:2c:49:9e:51:c3:78:5c:89:8f:7f:16:27:b0:e9:c9:
         79:08:e0:5f:d9:d9:32:0d:14:bd:f6:69:6b:3e:69:3d:55:72:
         a2:2d:59:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:08 2025 by rpki-client