Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
File:                     Mo1NdPJBWjV_502-BA8BVPHaz3w.mft (raw, json)
Hash identifier:          kvawHGA/CCPOe+GVmG4SuUkuJ2Yz49RPMGct5BSPg1s=
Subject key identifier:   4A:5C:E1:43:94:46:6E:DD:43:FE:78:BA:45:24:F2:F3:45:5D:AE:B7
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Certificate issuer:       /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial:       01984777A8EEE7AEA32CCD8300D48142AC4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
Manifest number:          0980
Signing time:             Sat 26 Jul 2025 16:01:21 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:21 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:21 +0000
Files and hashes:         1: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (hash: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=)
                          2: Mo1NdPJBWjV_502-BA8BVPHaz3w.crl (hash: uKsju/0cwamYDNtz30FY1EvMHBbo/rZRJtiMqOgiooU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:a8:ee:e7:ae:a3:2c:cd:83:00:d4:81:42:ac:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
        Validity
            Not Before: Jul 26 16:01:21 2025 GMT
            Not After : Jul 27 16:01:21 2025 GMT
        Subject: CN=4a5ce14394466edd43fe78ba4524f2f3455daeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:51:01:34:a4:2d:f6:49:31:b1:7e:0a:d0:
                    4d:d0:01:78:42:1d:20:79:44:af:4b:58:4b:74:fc:
                    33:08:6c:1f:78:12:f4:df:31:ff:8c:85:17:72:63:
                    b9:47:1b:57:fd:fa:6f:f3:4a:de:c0:45:d6:99:62:
                    8b:a9:1e:3e:85:c1:a9:c6:1d:f2:f2:8b:1c:b5:9b:
                    49:2c:a9:6d:c8:fd:ff:64:ee:35:c4:d1:bf:7b:33:
                    f6:d9:e4:b9:fd:05:f2:67:bf:f2:90:a8:90:3a:d6:
                    a1:23:13:5f:1f:36:19:2e:fb:49:5a:b2:21:f8:6e:
                    d1:38:66:96:96:0f:1a:ab:07:08:f6:a1:79:ca:22:
                    db:48:99:9f:fa:94:f3:49:ff:8f:ca:43:e2:91:b8:
                    17:a2:90:8d:a3:17:1f:46:23:ce:24:f9:97:04:07:
                    36:73:4e:d0:c2:2c:e9:b9:b6:24:f9:09:6e:2d:df:
                    28:e3:f7:4d:85:de:92:5d:c6:82:fe:65:33:cd:56:
                    46:cd:e1:dd:44:94:3e:3b:ee:2d:27:a2:c0:3f:16:
                    df:37:77:ea:c7:3b:e8:d0:fe:07:40:68:8e:fe:b9:
                    cc:1c:1a:41:58:f5:49:50:a8:3c:61:d9:8e:78:2d:
                    bf:47:f0:44:ab:c1:ad:72:ce:61:86:b0:73:89:28:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5C:E1:43:94:46:6E:DD:43:FE:78:BA:45:24:F2:F3:45:5D:AE:B7
            X509v3 Authority Key Identifier:
                keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:96:c4:7c:dc:8d:7d:9e:40:9c:23:01:d4:e9:28:60:cc:0a:
         fc:bd:9e:e4:1b:86:94:4f:73:cb:c3:4b:2b:7f:c9:31:61:2c:
         34:7e:b7:9c:54:67:75:c0:5d:3b:ed:3f:fd:45:e9:02:e8:80:
         12:26:0d:c8:27:07:88:08:d8:d3:ef:85:64:e0:b9:64:e8:a6:
         40:7b:00:ee:24:13:b0:43:12:01:c3:38:8d:61:2a:05:ba:4a:
         2f:44:b9:6d:b1:d4:b6:fd:a6:ec:cb:fa:81:cc:a9:3f:1f:77:
         20:b3:c4:cf:e1:15:21:88:c1:f5:c0:2b:61:0d:ff:48:ee:90:
         ac:07:94:6d:4f:8b:fe:99:b7:6a:ac:68:33:e9:0d:d5:0f:f6:
         1e:7d:de:95:9f:00:08:76:e6:ea:e8:1f:c5:fe:08:c7:6a:69:
         96:6c:e0:4a:a0:59:e2:7f:f8:9e:98:f4:bd:b3:27:0e:24:9a:
         71:76:62:01:c6:4c:3d:5a:25:92:3a:47:70:c6:28:9a:87:15:
         b5:13:cf:6d:ff:28:64:c7:c3:cf:c9:03:b9:ed:0b:99:59:6e:
         ed:1f:39:ea:c1:3b:5c:fb:da:21:d0:6f:e5:52:0c:d4:ac:c7:
         fe:04:2b:f6:a3:70:9b:c5:f0:e6:9d:12:49:20:cb:14:08:38:
         1c:25:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:22:42 2025 by rpki-client