Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File:                     dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier:          k3I9SG8luZzEYWgBbxWb/TQgCES2BPPJGt+ZXCA0jTg=
Subject key identifier:   1B:DB:31:29:1B:E1:9B:F4:16:AA:44:BD:29:96:6A:56:8C:23:C5:50
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer:       /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial:       0198469B1DDF5697D7200D5BB7C69BECF6D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number:          0C90
Signing time:             Sat 26 Jul 2025 12:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:27 +0000
Files and hashes:         1: dNIjhcgOmJl_uqUY3ufEirea4-I.roa (hash: gkwMMNbP4H2f7PZtpLojDcOWvuhbyLZWIbK4WgzSXOU=)
                          2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: /zpC47qPiWTUKSyFZ62X5iCkK7pQB3VbKrX5TNWMPw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:1d:df:56:97:d7:20:0d:5b:b7:c6:9b:ec:f6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
        Validity
            Not Before: Jul 26 12:00:27 2025 GMT
            Not After : Jul 27 12:00:27 2025 GMT
        Subject: CN=1bdb31291be19bf416aa44bd29966a568c23c550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:fc:88:07:0e:bb:1e:89:23:17:03:6e:14:
                    cc:d6:1a:2f:b6:61:2f:db:1e:72:99:9e:bf:44:1f:
                    1c:7f:b3:e3:80:bf:0e:b1:fe:58:96:2b:db:56:58:
                    7d:ed:d1:46:be:4c:11:e0:96:de:d2:55:3d:19:5d:
                    c7:d4:d0:da:96:f5:2c:5a:a3:b4:2d:ed:6a:31:60:
                    50:b1:a9:de:1e:f1:79:48:d3:92:40:e4:20:65:bd:
                    b5:98:6c:72:d3:fc:e9:01:e9:e5:58:a5:4d:fa:03:
                    51:bc:be:97:d9:93:44:5c:f4:c3:37:3b:e8:5a:e2:
                    54:43:43:72:23:4d:08:f8:2e:89:ed:e8:bc:20:46:
                    f0:34:77:8d:b9:ce:a9:22:25:39:92:77:e4:14:9d:
                    5c:ae:fa:99:c0:50:b9:af:ea:2d:0d:75:c8:46:42:
                    79:82:b3:ce:b9:cb:7a:a4:cf:98:5e:8d:c5:41:32:
                    71:14:11:21:11:05:f3:81:b8:3b:43:d9:cc:84:6c:
                    fa:ea:72:c8:5b:c2:02:53:91:c1:8a:d4:e7:1b:2e:
                    a8:3f:62:b7:f3:5b:c0:94:61:ce:c3:ca:bb:9b:f6:
                    39:ed:72:f4:9a:79:af:37:07:41:e5:a3:90:09:a9:
                    31:fd:12:2e:9f:da:45:47:2e:3d:f3:62:49:7d:40:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DB:31:29:1B:E1:9B:F4:16:AA:44:BD:29:96:6A:56:8C:23:C5:50
            X509v3 Authority Key Identifier:
                keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:74:35:a1:63:1f:ba:5d:34:22:38:6e:89:0d:29:2b:ea:69:
         9a:7c:72:77:74:24:50:52:3d:fd:74:12:81:32:f6:73:2c:75:
         b5:6f:6c:4f:7f:66:0f:6f:84:b9:08:32:57:74:c6:9d:25:a5:
         bc:af:0d:b3:dd:73:ee:3e:a9:4f:64:7f:4a:f7:db:64:a9:2a:
         f2:ec:52:e2:0d:90:84:fd:89:eb:06:fb:a8:b7:14:c3:19:4b:
         b6:99:f1:b7:74:8c:7c:ae:fa:b1:65:22:23:83:77:6e:70:c1:
         39:f5:bf:70:09:ea:9b:b3:a4:9c:dc:5f:b3:68:9c:b5:34:88:
         ed:fa:ec:94:5d:f0:50:1f:11:69:15:51:97:77:bc:91:22:6f:
         cf:2f:a2:66:19:45:56:05:1d:9a:d5:c7:9b:57:46:6b:9a:bb:
         52:e1:d7:0a:22:30:76:65:86:84:f3:d4:f8:f0:5f:ba:f5:45:
         45:3f:96:50:34:d7:58:66:2c:cf:eb:d9:10:cd:c6:8b:91:ea:
         b7:4b:71:4c:fd:b2:77:45:85:ca:fa:b1:47:d5:18:58:6f:45:
         0b:c5:61:85:6c:a4:78:b2:f5:73:84:79:4b:c4:52:56:41:bb:
         f8:b3:dc:3d:ed:5d:36:f1:90:c0:e6:37:5d:98:3a:39:72:55:
         58:ae:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:44:35 2025 by rpki-client