Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
File:                     0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json)
Hash identifier:          UDFdyTGebt/9T+AvfGXmbu97sy4npATbiEo8Y2QDyuc=
Subject key identifier:   BA:E3:7D:D1:46:B3:49:C3:02:47:5C:EF:6D:3E:2D:CB:0E:15:25:61
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Certificate issuer:       /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial:       019848F716D82E44591A596D21E872458DD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
Manifest number:          0FD7
Signing time:             Sat 26 Jul 2025 23:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:09 +0000
Files and hashes:         1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: OklPUlmzb5Jz0161gPYz/XnlDOGyCX8UZ2yAGbIBK1U=)
                          2: MMUTpzHJDvP8m90rkKx4rRT5Pvs.roa (hash: 0qwECbWF3VMGBC2LqqWsoaxdyHvDL7eVoZEYdOt0I84=)
                          3: NibkP4WwhFNgZ640yvtXLfFiJrg.roa (hash: a/esbL59f+nmLVH7R2fnAmETOkLcHJ2GIe7zJ0dWkJ0=)
                          4: rUM43ISndw5pYAQLWf2KHIAwsfw.roa (hash: KeqCps5BUoZfWz/djUGV6w2EVQtKO+PPXxPc78g2vTo=)
                          5: xi9oGHAZGsjdKybpmWD7Ku8W0ZM.roa (hash: 5sRqk+0ypVIu7UFoyuyrbtTdv9EciH6vt3GDL2ydd68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:16:d8:2e:44:59:1a:59:6d:21:e8:72:45:8d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
        Validity
            Not Before: Jul 26 23:00:09 2025 GMT
            Not After : Jul 27 23:00:09 2025 GMT
        Subject: CN=bae37dd146b349c302475cef6d3e2dcb0e152561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:70:20:3d:5d:3d:46:3a:a3:54:d4:2d:45:
                    da:96:a5:a3:7d:14:c9:18:32:69:88:40:59:af:13:
                    e0:73:fc:7e:4b:99:11:29:58:53:9c:ec:aa:88:cd:
                    a9:fd:68:bd:f4:13:ae:d2:b6:d3:e1:40:76:14:c9:
                    e9:43:cb:37:75:63:03:9d:3e:88:c7:8c:b6:90:34:
                    4b:29:74:1f:fb:d9:13:2e:b5:88:7a:5e:3a:c0:8e:
                    d6:99:c5:3c:5e:fb:9f:66:28:63:38:d7:63:d5:03:
                    9c:33:b0:69:fb:3d:f4:ec:9b:05:aa:a1:14:d1:3f:
                    21:28:eb:fd:6a:aa:80:ee:95:81:a5:21:4a:48:ad:
                    d3:75:e6:8a:3b:a3:ee:00:90:f2:15:ae:cd:aa:40:
                    9c:ac:f7:7a:f1:1b:c1:b8:12:69:48:2a:26:d0:a2:
                    5a:0e:86:ba:fd:54:38:34:13:4c:05:ea:29:33:4e:
                    59:57:72:5f:d1:7f:b8:a0:f9:70:1f:71:03:83:5a:
                    2b:4f:89:1a:92:1e:6f:0f:cb:db:4f:ec:42:03:6b:
                    74:e7:36:aa:e2:ae:e0:6d:09:2a:15:91:81:9c:ef:
                    d7:7f:34:e6:07:a7:ad:24:41:3d:91:c9:3b:e9:a8:
                    28:23:c4:f1:78:25:fb:dd:44:c0:37:bd:4d:d1:88:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E3:7D:D1:46:B3:49:C3:02:47:5C:EF:6D:3E:2D:CB:0E:15:25:61
            X509v3 Authority Key Identifier:
                keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5c:49:bc:c2:e0:99:55:b9:e6:ad:48:64:72:4d:08:fd:ff:
         e6:b1:b8:c4:34:98:ef:ab:e2:99:db:a9:f0:f3:88:53:f4:d4:
         7e:35:c2:7a:e6:63:07:42:97:aa:c3:c2:68:c2:c0:a7:96:c8:
         33:be:65:7d:ac:6c:32:89:df:c0:84:aa:4c:8b:e6:00:be:c1:
         3c:8a:10:c6:4b:ce:d8:29:67:62:3e:56:49:60:30:b8:08:df:
         3a:2f:6b:16:1e:b0:9b:f0:32:e1:f0:ad:6f:99:c7:6b:d8:52:
         dd:f6:89:b3:92:79:42:ac:53:d2:d5:de:5a:76:0f:a5:ab:9e:
         10:3e:34:b7:d1:bc:37:ce:c2:26:70:3d:96:94:a9:1d:6c:db:
         8d:eb:94:39:f1:76:ee:0e:62:4d:01:bb:c3:63:d1:d8:42:dc:
         c2:78:ee:f9:69:e7:5b:2c:72:53:d5:40:72:0e:a2:1b:91:43:
         6e:18:d6:da:80:fd:79:97:06:3d:5f:63:72:88:24:57:61:24:
         72:f1:21:ad:aa:d0:82:a4:e3:03:6a:c6:a5:b4:95:9b:f4:74:
         6a:bb:b1:ef:92:1e:e7:ad:70:a2:b6:1b:38:43:a4:d7:3f:da:
         07:2b:d2:71:c2:20:24:c2:14:53:28:b0:ac:8f:75:20:8c:19:
         85:33:2c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:43:58 2025 by rpki-client