Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
File:                     1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json)
Hash identifier:          m0ZNLp8Zqu0HR0/74J3leXcQlopahr23+0mw+Sm1+XE=
Subject key identifier:   36:84:91:EB:8F:AD:FC:9B:1D:7B:AF:D8:6B:C5:FA:8E:12:C6:FD:B5
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Certificate issuer:       /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial:       019924440750E7E70557FDE9D67C7BD63321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
Manifest number:          030C
Signing time:             Sun 07 Sep 2025 13:01:02 +0000
Manifest this update:     Sun 07 Sep 2025 13:01:02 +0000
Manifest next update:     Mon 08 Sep 2025 13:01:02 +0000
Files and hashes:         1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: nkZ5hFZ5kNS0Kmuiqib41gOgFAi6pon7HT8pymIS0WI=)
                          2: 65uCTGHnj2d-ZMz37cNEU4MDVwU.roa (hash: YIZDFvb3SYhRXBIcle+tVLHY9SC8i/bp1JBNwsY9//E=)
                          3: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (hash: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=)
                          4: SO2aAnB4S5yHRruYM18XroAhS7s.roa (hash: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=)
                          5: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=)
                          6: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=)
                          7: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=)
                          8: tBHwHHkIoWoPQB4e4ej-oFl2fGE.roa (hash: UbNA7/yGLRJmQHVEHqPxSSssDaT1D3EY/oLFfEqwR8s=)
                          9: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=)
                          10: zNBrt8b_ORyqQSO4aCrRbgzOM0k.roa (hash: JPrR5Q/6R3hbokDk+J7WmGsUILsQwl4oN4sTvCmroWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:44:07:50:e7:e7:05:57:fd:e9:d6:7c:7b:d6:33:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
        Validity
            Not Before: Sep  7 13:01:02 2025 GMT
            Not After : Sep  8 13:01:02 2025 GMT
        Subject: CN=368491eb8fadfc9b1d7bafd86bc5fa8e12c6fdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:2b:4d:5d:ba:4c:93:d3:01:00:5e:5d:f9:
                    da:a8:0b:cc:54:8d:bb:2d:27:40:19:8e:d9:cd:cb:
                    a5:a6:b8:83:51:e5:be:f2:28:1a:52:a5:f8:e7:11:
                    da:eb:03:81:da:73:a8:ed:c0:43:30:ca:fb:13:74:
                    24:a1:62:ef:c1:00:38:29:fa:d9:2c:be:6c:1a:24:
                    57:58:c1:d8:26:f8:7a:61:e2:f6:e8:30:ea:ee:ac:
                    60:a3:ba:3e:e5:ba:fe:73:e8:fc:47:27:93:6e:06:
                    4a:8b:0d:f8:20:7c:da:fa:03:9e:71:29:82:f2:31:
                    48:08:45:7b:ad:65:5a:91:e1:fb:a2:ca:ee:0b:b0:
                    d1:6d:d4:f6:63:8c:11:58:8a:ae:93:21:c4:cf:fa:
                    f6:2c:5b:eb:1e:64:c5:62:84:f9:15:f0:b0:02:d6:
                    6a:ee:f6:28:05:fa:8c:98:66:ae:8f:30:0a:c1:e1:
                    f3:02:27:62:5f:88:b6:ba:09:31:45:90:eb:7d:72:
                    0a:5e:e0:53:e8:3b:18:38:89:d9:b3:8d:65:47:b3:
                    5c:96:6e:7e:4f:6b:63:67:e2:98:34:6c:de:ae:b0:
                    31:ef:1c:8a:43:e5:fe:c7:58:07:20:98:f9:d3:6e:
                    d8:c9:ff:ec:3a:82:e2:27:94:cc:bc:c8:e9:38:95:
                    4b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:84:91:EB:8F:AD:FC:9B:1D:7B:AF:D8:6B:C5:FA:8E:12:C6:FD:B5
            X509v3 Authority Key Identifier:
                keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f6:a4:45:23:33:98:77:12:48:9e:f6:7f:dc:09:93:b8:49:
         1c:78:18:9d:55:60:91:78:61:03:65:4a:25:e9:27:e8:b2:56:
         25:46:a2:bf:63:aa:68:21:ea:f9:d3:b8:76:cc:b8:95:0c:f6:
         8b:c5:06:c5:51:2c:07:0f:d0:34:10:f2:b9:08:9a:78:71:8e:
         9a:df:97:80:05:22:30:55:eb:82:9f:ac:2e:83:17:dc:8c:92:
         06:34:a7:03:c4:fa:8a:8c:74:62:cc:87:fb:0f:b3:cb:e9:96:
         eb:c4:88:56:0c:d1:b4:52:57:a3:18:fd:63:95:01:42:57:f1:
         7b:07:51:46:66:1f:a6:98:fe:ba:09:86:bd:24:e3:7f:84:a7:
         18:38:f1:19:5a:41:f3:38:db:7f:da:0b:45:23:37:02:9d:78:
         90:4a:4e:1b:62:45:ba:85:da:2d:38:01:f2:90:f2:d5:f6:38:
         c4:dc:27:a3:80:46:d2:37:5a:8c:78:c1:d8:12:7d:61:35:3e:
         2b:1e:85:2b:2c:60:da:a9:7b:cf:8a:88:a3:70:75:44:4d:a8:
         0b:4c:fb:d2:1e:91:b4:b7:7a:3c:9a:01:ef:9c:a7:ff:9f:39:
         cf:24:26:37:b1:3b:c0:e0:6d:70:65:e1:00:14:f7:33:4d:b6:
         c8:b0:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:20:53 2025 by rpki-client