Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
File:                     _dpVEEhBC7XEfr24O_WBiMSjBrI.mft (raw, json)
Hash identifier:          /5/7YtJbhG3Tpb1gXGu+o9W9Gfirx6JxOAclKxLDWdg=
Subject key identifier:   F0:28:8D:91:2C:98:62:15:88:92:1E:97:D2:AE:4A:6E:9A:33:A3:15
Authority key identifier: FD:DA:55:10:48:41:0B:B5:C4:7E:BD:B8:3B:F5:81:88:C4:A3:06:B2
Certificate issuer:       /CN=fdda551048410bb5c47ebdb83bf58188c4a306b2
Certificate serial:       0199221E30D288EF597317C865F29E301DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
Manifest number:          24
Signing time:             Sun 07 Sep 2025 03:00:27 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:27 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:27 +0000
Files and hashes:         1: BBKJGvg1eMQWu4Dn8KcuHomKhy4.roa (hash: ZhbL/bOWkEXevzCvZ62AQyku+99vuUelC20ZFee2QwU=)
                          2: _dpVEEhBC7XEfr24O_WBiMSjBrI.crl (hash: iplTtYBwsqu8VJgpZLY3CEaIFYxTSEYSCV7TZzwdSAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:30:d2:88:ef:59:73:17:c8:65:f2:9e:30:1d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdda551048410bb5c47ebdb83bf58188c4a306b2
        Validity
            Not Before: Sep  7 03:00:27 2025 GMT
            Not After : Sep  8 03:00:27 2025 GMT
        Subject: CN=f0288d912c98621588921e97d2ae4a6e9a33a315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:20:b3:00:e5:65:3e:ce:94:77:7f:6e:34:66:
                    1c:ff:35:d0:52:fd:7c:c9:fd:a5:48:06:30:1b:f1:
                    33:93:50:31:7f:19:e7:50:c8:14:5d:34:28:4a:56:
                    6c:11:ef:3b:15:d3:ae:35:f2:84:47:8d:a6:67:b9:
                    d7:49:a7:62:19:45:ae:b6:48:71:4f:8f:15:24:c4:
                    6b:36:74:aa:1a:7d:5d:37:25:a8:96:66:d9:33:b1:
                    d1:68:ee:17:fb:11:c5:07:e5:3e:95:90:04:a6:9f:
                    c7:b1:79:b8:d1:c4:c7:c3:91:9e:75:d1:ef:8f:f1:
                    35:73:ba:c4:e9:e2:ce:7c:a6:dd:c8:01:e7:9e:84:
                    36:1d:5c:56:a2:48:b5:ce:d6:6f:31:e6:ae:d0:de:
                    ab:4d:97:47:af:7c:19:69:c1:ca:31:2d:c0:28:cc:
                    d9:c1:49:f7:32:fa:84:bb:f5:83:8d:3f:1b:b1:aa:
                    a0:90:fe:f6:9b:56:50:c3:4f:1b:a9:f5:c4:6d:b0:
                    67:01:1d:5a:b9:6e:51:66:b0:b7:82:3b:f9:73:c8:
                    9a:90:c7:bf:8f:70:c6:93:8f:25:27:08:22:e5:53:
                    f5:5f:ca:87:66:c0:c7:43:6c:68:ae:09:bf:57:f8:
                    79:bc:39:87:09:e8:b0:fe:9e:83:6d:50:d5:14:c6:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:28:8D:91:2C:98:62:15:88:92:1E:97:D2:AE:4A:6E:9A:33:A3:15
            X509v3 Authority Key Identifier:
                keyid:FD:DA:55:10:48:41:0B:B5:C4:7E:BD:B8:3B:F5:81:88:C4:A3:06:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c1:aa:c2:4f:d0:77:d5:f6:af:94:1d:c7:3e:21:3d:f2:78:
         b9:d1:64:24:7f:06:bf:88:ff:7e:ad:1d:1f:0c:cf:4a:e1:00:
         1a:8c:c7:a6:8d:db:29:98:2d:41:ce:1a:b1:60:a4:d2:13:d4:
         ae:46:44:50:78:67:25:2a:85:ab:47:b6:81:3f:e7:ad:a5:99:
         1b:f8:eb:c2:07:c8:cc:ef:03:cf:ab:ba:30:01:a6:5e:4d:c5:
         6b:1b:b0:c4:25:b3:9a:a0:62:f8:44:e8:f1:ed:4d:6c:e2:5d:
         1d:d2:04:0e:14:ac:4f:c5:4e:bd:e8:84:35:cd:c5:5c:e2:1e:
         6f:17:4f:13:93:61:63:38:c5:8d:23:e6:9a:2d:5b:c9:b2:3c:
         41:ea:90:9c:64:43:b8:7e:02:62:99:44:35:c0:1c:8c:5e:e4:
         4c:e9:fc:27:79:38:ea:db:81:82:a3:c5:c7:fe:ba:1f:07:52:
         ab:a8:70:4c:9e:25:77:f7:ba:a9:37:e8:8a:a6:dc:10:69:87:
         fb:00:2d:6e:ad:d5:4a:a1:30:d7:ff:a9:c9:f3:b6:a6:a3:d1:
         54:12:ce:22:c7:d7:e3:eb:92:26:70:2e:50:b2:de:54:c3:c8:
         6c:51:04:c1:48:86:a7:90:0c:66:c4:7d:73:23:48:d4:6d:88:
         a7:4b:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:44 2025 by rpki-client