Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File:                     moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier:          g/03YvYcYAXcxVeaOtDBBuVhy82Lc3/n+a6WYJrewD0=
Subject key identifier:   01:C7:D3:B4:0A:CD:5F:CD:D0:47:A7:88:F6:5A:8A:9D:1D:73:EE:83
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer:       /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial:       0198CACA537322BB71F567F685ABF840A321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number:          10CF
Signing time:             Thu 21 Aug 2025 04:01:53 +0000
Manifest this update:     Thu 21 Aug 2025 04:01:53 +0000
Manifest next update:     Fri 22 Aug 2025 04:01:53 +0000
Files and hashes:         1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=)
                          2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: MRDM12Q0La4HDO4hOd6kJfk+1eWyTYU0kZXjZRIJysY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Aug 2025 04:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:ca:ca:53:73:22:bb:71:f5:67:f6:85:ab:f8:40:a3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
        Validity
            Not Before: Aug 21 04:01:53 2025 GMT
            Not After : Aug 22 04:01:53 2025 GMT
        Subject: CN=01c7d3b40acd5fcdd047a788f65a8a9d1d73ee83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:f3:dc:ab:7b:85:89:eb:b8:69:a6:da:4e:
                    68:92:6e:c1:78:67:f9:06:55:39:c5:19:97:14:66:
                    78:59:fd:5f:04:92:49:dd:a6:a6:0d:b3:ea:eb:ac:
                    51:78:b5:51:37:5a:0c:7a:03:f1:d0:62:04:f8:17:
                    f5:49:05:b1:fd:4b:4f:c9:4f:b5:20:5b:ec:8d:20:
                    53:7e:e3:7a:a5:45:db:ce:19:27:60:0d:55:f7:bc:
                    49:0c:a7:12:af:ee:be:59:95:c8:e9:20:b8:52:c1:
                    25:62:b3:10:89:4d:82:e3:56:a5:63:85:f2:50:97:
                    31:f2:1d:55:82:cd:e5:2d:37:af:7a:71:a2:53:e0:
                    49:22:c9:a6:11:c9:33:fd:cd:7a:83:6d:51:49:f1:
                    d8:b1:20:2c:81:c6:ec:83:07:ff:d8:62:c3:46:bc:
                    70:a9:f3:54:b8:93:d4:37:6d:e9:cc:4f:06:c5:16:
                    52:e4:81:17:5c:0f:62:f7:c7:0d:5c:62:c3:80:a6:
                    16:05:f2:a9:3a:24:fe:64:f1:ae:45:f0:92:52:59:
                    92:ad:a2:48:36:3f:72:30:b6:b5:8b:1f:69:a7:5f:
                    9d:6e:5a:13:13:a6:7f:25:18:96:15:b8:22:05:49:
                    f5:52:d1:c3:4f:a7:7c:1e:2d:fa:2c:df:fa:4b:31:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C7:D3:B4:0A:CD:5F:CD:D0:47:A7:88:F6:5A:8A:9D:1D:73:EE:83
            X509v3 Authority Key Identifier:
                keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:01:58:ca:ea:fc:d2:8e:4a:44:1b:33:2e:97:03:75:74:68:
         03:e1:a0:24:8f:e1:9b:73:16:61:31:82:f0:15:f0:c3:7f:eb:
         99:0f:27:71:81:d8:39:44:e5:0a:b9:41:bb:c8:03:30:e5:f5:
         b9:8f:64:8c:91:07:b0:43:fc:2b:27:2d:a0:d5:8d:a1:2b:1c:
         f4:55:2d:f4:1b:65:32:5d:8d:78:a6:53:df:5e:6c:b7:22:83:
         9a:62:6d:f8:1d:d0:11:2f:ec:28:8d:6f:d7:23:aa:39:11:b0:
         cd:0a:fe:e6:f6:ca:0f:4d:10:44:1b:57:ce:d2:59:da:8f:1c:
         da:94:49:aa:90:fe:83:a6:bb:b9:7a:d8:55:31:9f:0e:a3:40:
         e2:e8:66:c6:bd:43:ad:bd:e1:0e:15:f7:f2:09:93:ab:93:c1:
         58:c9:79:5a:d8:7a:3f:aa:48:b0:f1:10:ce:b7:13:3c:b5:89:
         0d:b0:9f:ef:ee:2f:85:f6:23:54:5d:ff:1d:d2:66:0e:9e:20:
         08:9a:94:d0:2a:55:55:e8:da:06:71:b2:ca:3d:1e:6a:fc:81:
         4e:03:fa:14:bc:d3:de:7d:bb:b2:3d:40:6c:81:9b:57:31:84:
         b9:6e:90:fc:bf:9d:8d:bb:e6:65:9c:cf:c5:4f:74:d3:a4:93:
         81:29:79:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:41:36 2025 by rpki-client