Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File:                     s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier:          ZuxNHHU7xJrTr/gvput1dT4247hgY9OO+VYnaX2fBTg=
Subject key identifier:   AB:B1:9F:90:9F:1A:F5:A3:92:5C:36:9D:D2:69:B4:1B:A4:78:00:9D
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer:       /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial:       01984AAE8F023E89110DA13CD6E534B80963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number:          0B5A
Signing time:             Sun 27 Jul 2025 07:00:10 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:10 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:10 +0000
Files and hashes:         1: 5APXg_wiW_V1QU4DTTNO_V06dfg.roa (hash: TZwqI4bOTkCy7vwcX2/rFQxdaiYIWAZfVHV4G7nb07k=)
                          2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: sfCVuWvgvLP31Z1018FWw5t+R8nSZIBUvGAbnaDST2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:8f:02:3e:89:11:0d:a1:3c:d6:e5:34:b8:09:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
        Validity
            Not Before: Jul 27 07:00:10 2025 GMT
            Not After : Jul 28 07:00:10 2025 GMT
        Subject: CN=abb19f909f1af5a3925c369dd269b41ba478009d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:2b:24:37:0a:d1:53:da:8d:06:10:29:68:
                    ba:79:6a:ce:5d:bb:fd:43:59:27:67:47:68:10:87:
                    6f:ae:c2:8a:73:a1:68:37:f4:48:47:08:54:39:ef:
                    1a:23:0f:22:52:ec:43:99:84:72:54:b9:d9:43:16:
                    1c:f3:9e:1f:f6:71:a5:0a:bc:08:c9:4f:89:8e:99:
                    bd:8d:de:68:86:72:29:20:5a:d9:db:21:64:11:92:
                    84:6b:b4:4a:08:0b:1e:82:ca:5e:d2:b3:d7:72:4f:
                    6f:6a:fb:59:74:89:f2:66:8f:ab:1b:73:15:34:08:
                    11:4e:10:81:4e:7f:58:55:d9:18:7a:3c:be:a4:19:
                    73:18:f8:10:ee:bf:c3:70:aa:b3:15:89:61:af:ca:
                    62:26:22:a0:a0:b2:2f:41:48:d1:a8:a9:a2:c1:d5:
                    f2:6e:38:7b:d4:f9:c9:a4:e0:e5:35:a3:4c:e7:38:
                    44:e5:71:0d:23:82:26:d2:26:c0:bd:06:23:b8:bf:
                    8f:63:27:47:e4:8d:8e:6c:43:19:1d:2e:66:41:63:
                    61:b6:a5:0f:50:ec:15:71:43:10:ae:93:4a:a3:9e:
                    6d:45:62:15:56:84:73:61:0e:cd:33:fb:50:6a:cf:
                    68:26:ff:e7:e2:6d:2e:6c:5c:13:93:51:b9:5c:90:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B1:9F:90:9F:1A:F5:A3:92:5C:36:9D:D2:69:B4:1B:A4:78:00:9D
            X509v3 Authority Key Identifier:
                keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:33:34:58:84:f4:36:2a:24:b5:ca:a0:6f:05:40:04:c7:
         09:50:94:e6:0e:33:45:33:e2:73:eb:67:75:3d:37:d5:bd:cc:
         b2:5c:71:5a:e2:58:89:e2:8d:91:5b:39:c1:33:81:b5:74:bc:
         86:38:a9:88:cc:a0:f5:84:43:5b:53:11:ad:42:21:d0:5b:3f:
         1f:35:4c:77:8c:b1:52:d1:71:c3:0d:3f:9f:08:c1:45:62:c7:
         25:9a:dd:9c:a5:33:89:32:fb:b0:fd:16:66:88:76:48:b8:73:
         f6:b3:37:c8:dd:01:b8:f7:76:c7:21:fa:19:72:1e:c3:20:f4:
         10:8c:42:7c:65:18:c0:65:19:ef:10:91:62:e0:0e:f0:da:54:
         b8:c6:b1:da:28:56:63:a7:56:70:17:a6:75:a1:e2:da:8a:33:
         25:ec:3b:1e:5a:78:bc:5b:06:67:da:94:c6:74:33:4d:e8:52:
         27:c8:6b:1f:9b:9d:6b:11:a5:4a:e8:da:d4:a0:a3:c2:b5:71:
         38:9c:d9:52:c9:a8:6f:1c:af:8f:3e:ad:92:78:cf:62:65:e2:
         f2:9e:39:6b:ea:ed:32:43:ff:a7:fe:a6:50:41:85:cb:37:ef:
         1a:f0:e3:b3:30:24:fc:5d:f7:c4:bb:04:6d:ab:18:23:f4:9f:
         96:46:31:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:23:03 2025 by rpki-client