Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File:                     a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier:          ouJhn7b89FLMplPX1XkgxeCw9bECq2DNvI5hjYSqD5Y=
Subject key identifier:   02:25:AC:0C:40:1D:29:0D:E0:DB:D6:20:3A:8B:31:85:CA:E5:4E:7D
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer:       /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial:       01983D97A977D64F2E1565CA15F963FF599B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number:          1089
Signing time:             Thu 24 Jul 2025 18:00:05 +0000
Manifest this update:     Thu 24 Jul 2025 18:00:05 +0000
Manifest next update:     Fri 25 Jul 2025 18:00:05 +0000
Files and hashes:         1: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (hash: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=)
                          2: 5Y2NPf-2wwHQNFwN222T-_ksWjs.roa (hash: 7vHIYZQTiGeFh0mU2zpcuuX7KVBld5DcIlwlMA6in8o=)
                          3: St4HRjoesIgHRfExOBffE_pcBIw.roa (hash: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=)
                          4: ZRn8_lnFsXvgqivcUn4eIrUv-Ic.roa (hash: ViUiWV5ebu4waGuKqQE1IWidKaFMMzGFtUARe3tVsh4=)
                          5: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: g3PwdAFsRQOqnbz34lUGLzmo+ree+d4iq0GaVMfvIjI=)
                          6: lKdTsJ9TvIICTgPRcm3O1hlBWiM.roa (hash: py16JH9zUXcJT+HWUygN67vLSyq6kBTksveRhrIkt/k=)
                          7: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (hash: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3d:97:a9:77:d6:4f:2e:15:65:ca:15:f9:63:ff:59:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Validity
            Not Before: Jul 24 18:00:05 2025 GMT
            Not After : Jul 25 18:00:05 2025 GMT
        Subject: CN=0225ac0c401d290de0dbd6203a8b3185cae54e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:af:e3:29:8d:6a:ad:b5:41:42:31:d4:0a:
                    4e:b2:80:9b:a8:d7:1e:4b:3e:6c:f6:38:48:58:a5:
                    e8:70:bd:4d:f1:6f:da:dc:9c:57:51:89:09:37:79:
                    42:ea:5a:d2:aa:7c:af:4f:46:a3:2e:e1:75:ec:c5:
                    c7:22:d2:7f:83:9d:72:b8:15:00:36:90:2f:7b:04:
                    df:dc:bd:7a:c8:dc:77:f8:b8:8b:bb:21:25:b6:e8:
                    81:09:6a:27:47:91:95:b3:fd:ae:f6:5a:6b:b9:c4:
                    c9:8b:b8:aa:74:b2:12:9a:9b:98:db:81:25:90:92:
                    8d:42:fc:b7:3f:9f:bd:f4:45:65:a1:ad:32:68:54:
                    12:21:6c:4e:4b:2e:1a:e2:47:56:84:9e:de:bc:6b:
                    90:87:93:41:d2:65:28:48:1e:0d:d0:f5:07:7f:d3:
                    78:50:20:83:38:96:52:41:51:39:92:fd:84:3b:09:
                    66:2c:b1:e2:f3:8b:6c:ad:e4:54:26:e2:05:97:52:
                    5c:c3:e7:7d:c6:bc:f3:dc:e5:54:56:30:bf:fd:12:
                    97:83:d6:c4:ba:58:94:2d:4b:7d:14:2f:ea:b3:ec:
                    7a:77:bc:ec:b6:fc:9b:02:76:b9:bb:ea:22:5e:72:
                    d1:fe:e8:a4:7e:00:e3:8b:4c:a2:f3:45:f3:5a:6e:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:25:AC:0C:40:1D:29:0D:E0:DB:D6:20:3A:8B:31:85:CA:E5:4E:7D
            X509v3 Authority Key Identifier:
                keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:81:55:a9:c3:8d:10:a6:d8:8f:13:84:23:a7:c1:2b:b5:08:
         53:c0:8a:2b:6a:4c:f4:85:ff:40:e3:1b:95:70:32:bb:37:09:
         12:b8:42:48:c9:71:cc:2e:7c:d6:91:94:fd:02:8f:72:c0:29:
         fc:2f:62:c9:06:ff:b1:d2:d4:e2:1f:6e:96:8e:2e:8c:ec:5b:
         bc:e6:06:13:7d:59:85:6d:de:84:73:6e:30:a1:b4:63:e4:1e:
         b4:59:5d:d7:70:b4:42:8a:a1:48:a6:f8:70:cb:b6:ba:02:b3:
         4d:6a:67:ca:50:eb:5c:8a:b3:82:ca:8f:c2:d7:99:42:af:c8:
         bb:03:ed:ee:56:0f:3e:bd:e8:d6:7c:80:b5:1b:79:59:7b:c5:
         93:62:5d:57:76:54:ee:24:75:3f:e7:27:7c:67:60:34:3d:67:
         f3:7f:b4:84:b0:67:68:6b:60:a9:7d:90:d9:bc:47:63:4b:67:
         19:9b:ba:3b:73:5f:60:cf:53:48:3e:e0:6e:3c:6a:a8:e7:47:
         5e:56:71:fe:28:31:5f:90:f7:8d:df:86:78:1a:1b:d7:ff:04:
         67:17:f9:db:d4:23:d8:4f:1c:65:06:c7:b8:37:1a:46:7d:45:
         d6:39:87:bd:19:24:48:37:01:f3:d1:b8:ea:8d:92:e4:51:e6:
         f6:be:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 22:57:37 2025 by rpki-client