Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
File:                     dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json)
Hash identifier:          2RXPYS/ts6Pxw/ONOiMUtQj7qNxqR3HkiXJxsAJZJT4=
Subject key identifier:   8F:ED:45:D9:4E:5E:08:32:DB:B2:5B:D8:9B:85:AE:A1:9C:F7:B5:9F
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Certificate issuer:       /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial:       0199228D295284AC2C569EBD333F68DCC051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
Manifest number:          0306
Signing time:             Sun 07 Sep 2025 05:01:40 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:40 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:40 +0000
Files and hashes:         1: 6zamDTUBwAsnOFkspEkx8jbI6wY.roa (hash: dvRTh/kPMauvkj5ufzVensqKmDYCodFR0kOnwH7zmxk=)
                          2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: cZFR1jHmjtqVMS/DPZCs4DGcCQO5sN52doxhll/rE5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8d:29:52:84:ac:2c:56:9e:bd:33:3f:68:dc:c0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Validity
            Not Before: Sep  7 05:01:40 2025 GMT
            Not After : Sep  8 05:01:40 2025 GMT
        Subject: CN=8fed45d94e5e0832dbb25bd89b85aea19cf7b59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5a:0a:f2:96:db:d8:d7:c8:eb:96:70:ed:6b:
                    41:cf:c1:8c:ab:ae:53:a9:59:33:0d:af:53:03:da:
                    47:fa:3a:71:02:93:ec:75:c1:c5:a9:44:1e:33:cc:
                    88:d3:07:3f:95:5a:49:4d:f5:cb:7f:4e:c1:4c:d3:
                    1f:65:9b:c6:b0:2b:a0:41:45:d4:b2:1c:32:3f:10:
                    08:69:c7:90:fc:1d:2d:e7:41:f9:00:02:eb:db:f2:
                    93:f1:97:d4:cb:20:f3:b4:7d:bb:b3:65:d8:a5:40:
                    09:4a:7a:f2:6c:30:b7:8a:96:07:4e:0f:35:1e:3e:
                    68:a7:1d:3b:e5:1d:31:bb:2d:64:20:c3:3c:66:1c:
                    a0:4d:0d:02:49:ef:4b:b1:93:7c:50:ad:11:f8:cb:
                    a8:63:13:a2:64:c2:60:ab:ab:43:19:66:05:c3:0a:
                    74:1e:1c:e6:74:65:01:e4:f9:52:a6:25:31:1d:8e:
                    b9:69:e1:bd:7f:0d:09:7f:84:68:f2:34:c4:fd:56:
                    6f:65:9b:1f:7e:7b:65:34:44:b2:6c:7d:d6:6b:28:
                    37:72:2e:03:f8:00:b2:a8:f5:66:8d:fb:a2:31:d1:
                    07:e4:50:b3:d7:ef:80:fd:5c:32:80:5d:cf:7f:e9:
                    1e:df:a5:c1:3b:32:e5:38:53:3e:a4:6f:7c:4f:3b:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:ED:45:D9:4E:5E:08:32:DB:B2:5B:D8:9B:85:AE:A1:9C:F7:B5:9F
            X509v3 Authority Key Identifier:
                keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:47:14:13:d4:d2:ec:b6:5b:7e:b7:12:cf:33:86:5e:50:28:
         25:73:1c:7f:f7:17:6f:76:48:30:a6:c1:62:0a:39:44:ab:60:
         c0:8c:9e:e2:7d:73:db:fd:d0:72:e6:07:eb:a4:04:02:58:d5:
         e6:21:20:e9:6f:45:f0:d7:47:28:b3:61:72:d0:a6:8e:88:8a:
         4d:57:00:02:e8:81:92:6e:56:a0:46:ca:0c:e9:53:e1:b2:76:
         7f:a9:6a:96:ec:1d:3c:d9:d6:5e:21:35:72:24:65:59:c5:2a:
         53:96:65:ec:d7:b4:b1:c0:23:68:0b:71:a2:91:b2:52:e5:e8:
         95:13:fe:32:0c:c5:64:84:44:97:a9:a6:a1:d6:45:f0:a7:9f:
         d5:75:fc:02:fc:16:44:2b:0c:a3:b4:5d:b5:35:a2:aa:04:4f:
         87:41:99:24:02:e3:b9:77:1c:32:2a:28:e9:17:ba:16:44:83:
         29:b0:b1:4d:df:40:56:a8:db:23:72:31:bc:b8:28:c4:24:4b:
         ca:50:48:9f:3b:69:ad:19:ef:7a:df:3d:c7:84:ff:90:b4:ba:
         8b:ae:44:ae:0e:3b:95:7a:ba:ad:03:f6:33:fc:1a:2d:0e:5e:
         a6:3c:25:71:4b:9d:bb:57:ac:59:90:cd:a2:42:6a:d3:ac:fc:
         48:44:33:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:08 2025 by rpki-client