Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File:                     43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier:          6gjwh5kZqd0xe+TkudwqWJHb0TsOhFq8RwWa1c7cjQQ=
Subject key identifier:   7A:C2:58:22:1C:F1:64:50:8F:D2:30:02:1F:31:72:D9:BE:A9:AC:7F
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer:       /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial:       01991763C70B46E371318E6E01D3E26F3ACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number:          073B
Signing time:             Fri 05 Sep 2025 01:00:38 +0000
Manifest this update:     Fri 05 Sep 2025 01:00:38 +0000
Manifest next update:     Sat 06 Sep 2025 01:00:38 +0000
Files and hashes:         1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
                          2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: bfgcXoyxM298w+NDwLbWMbpO8teZnehsi9Qiyqtzwj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:63:c7:0b:46:e3:71:31:8e:6e:01:d3:e2:6f:3a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
        Validity
            Not Before: Sep  5 01:00:38 2025 GMT
            Not After : Sep  6 01:00:38 2025 GMT
        Subject: CN=7ac258221cf164508fd230021f3172d9bea9ac7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:0f:90:cc:8a:02:cc:53:0e:bc:1f:c0:de:
                    e9:a1:b5:85:32:c9:9e:c6:1f:8f:4d:8f:8c:d2:99:
                    fe:20:2d:fc:21:25:eb:44:f7:76:f7:c9:db:42:dc:
                    85:50:7e:bd:32:d2:06:9e:8c:ff:56:4a:3b:e7:d0:
                    22:c2:7b:f9:07:91:98:38:50:8f:1e:8b:d6:54:79:
                    e9:05:31:aa:f9:09:c6:d2:bb:6f:bb:7b:47:4f:d2:
                    1d:dc:1d:a6:b2:f8:ed:7f:f4:f2:cc:06:c4:6a:fd:
                    d7:b2:83:f1:6b:ae:90:16:49:35:9b:a2:a1:0e:e5:
                    7b:47:24:62:7d:46:f4:36:0c:a2:7f:c7:3a:53:5c:
                    20:a8:a7:aa:2b:a2:c5:62:89:6a:bd:27:d5:d7:70:
                    21:5b:76:55:b8:1c:fb:03:07:67:b2:e0:c2:81:8b:
                    3e:57:b9:c3:ae:65:1d:e3:40:b1:94:0c:c4:a2:6e:
                    73:5b:4f:cc:a2:b5:f1:79:00:48:ff:a3:91:de:f3:
                    26:11:5c:39:b0:4c:8a:71:7a:87:ce:0f:6e:16:8c:
                    9a:86:c6:4b:b6:1a:7e:34:ce:61:43:8a:21:af:df:
                    45:1b:fa:6b:b7:9d:1b:5f:2d:27:96:a8:9f:81:cd:
                    0c:df:09:90:4a:7b:ff:06:f1:22:50:e6:01:a2:8a:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C2:58:22:1C:F1:64:50:8F:D2:30:02:1F:31:72:D9:BE:A9:AC:7F
            X509v3 Authority Key Identifier:
                keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:3c:86:7c:aa:e2:5b:54:50:b7:4e:6e:c5:bc:c6:ee:c8:
         6a:e3:68:fb:ed:4f:94:9a:c8:8f:05:7e:37:81:3e:6b:ef:eb:
         da:a5:20:2b:cd:ca:f8:60:3b:80:e5:cc:2d:81:42:9f:18:69:
         10:27:4c:6f:f2:3e:b7:d2:66:3a:8e:b0:c7:75:7f:24:a9:ed:
         bb:f2:02:34:35:01:96:e5:95:9a:40:ed:51:59:d5:29:2d:59:
         d4:20:06:cf:b0:a2:fd:d7:4c:2f:a3:11:9f:dd:9a:8b:62:ff:
         56:6a:8e:37:f9:5c:62:2b:1e:69:9c:10:53:a3:8d:41:f9:45:
         80:1e:38:89:52:70:bb:b9:ec:0c:4c:e8:e4:68:2d:d8:ff:c9:
         e4:90:a6:57:24:08:1d:cc:64:ed:5c:67:4e:7d:15:26:12:63:
         b2:74:3c:30:91:d5:c8:9b:fd:56:dd:22:30:15:5a:8b:32:ad:
         6f:91:3f:7b:7c:e4:4d:cd:7b:75:e3:98:4d:3d:24:9f:d7:63:
         af:38:9d:31:c3:6d:30:40:c0:c5:87:c2:f7:71:90:8b:17:4b:
         45:10:c5:ce:23:5c:81:78:03:97:38:92:ea:68:a1:8f:5d:35:
         03:1b:82:14:ab:fa:82:b3:64:e4:03:d5:d3:a0:34:90:36:26:
         8d:d3:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:46:07 2025 by rpki-client