Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          eQbLRGWUUK9Kl+Lb0sBaLUz/dtKeUdaanrC0IFg2JVI=
Subject key identifier:   3C:C6:0A:54:CE:BB:A9:DA:0A:EE:29:6F:05:81:57:01:D9:E3:D2:73
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       01991E0AE075E01806166D60CD5757803CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          0D95
Signing time:             Sat 06 Sep 2025 08:00:53 +0000
Manifest this update:     Sat 06 Sep 2025 08:00:53 +0000
Manifest next update:     Sun 07 Sep 2025 08:00:53 +0000
Files and hashes:         1: 9GGhdBoDldQk4TRK3Mt8lXvX6Vk.roa (hash: C1hQxWybXv6LB3lU6rmAeS741/P8EPjlQiiELyVw4bc=)
                          2: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (hash: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=)
                          3: BOD3dcxTc2yY6D5t1Z9HjEwK_rU.roa (hash: GaifOabvqdT7+yzCu9A/2BB5BkajLIn0jWyTPBEgmVc=)
                          4: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: yeCq6tb1xOG2QKEvnHV/uxtAAOqs68yW6i9WsQy9sfU=)
                          5: JKGv7JswQLjbC19dE9o5h0g8JIk.roa (hash: lD7tHzbRlXXakgNULkZ7gsS4NThjWVn11kLT8eGgblU=)
                          6: XrYoU1Qtu7kIh7k3ghCaVq1ANas.roa (hash: kmlQRZbBuxfjCIFV/FuQ/zRXRyQ+HVmYIQmDEjdu3CE=)
                          7: xzhHaw1u4vyWJOy8wzv_GA0Hy8w.roa (hash: CWKK/bGUgV9l6R4l2jDK6+bx3tv6jjiAzLSyy1GKphs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1e:0a:e0:75:e0:18:06:16:6d:60:cd:57:57:80:3c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Sep  6 08:00:53 2025 GMT
            Not After : Sep  7 08:00:53 2025 GMT
        Subject: CN=3cc60a54cebba9da0aee296f05815701d9e3d273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:dc:14:e2:e6:e7:af:09:82:56:9f:03:74:
                    50:0d:bf:6b:1f:fa:46:7f:f4:3c:55:b5:e5:2a:d8:
                    76:88:f7:cd:ff:fc:47:01:58:a8:7b:ec:53:33:05:
                    f9:0c:11:c0:a7:43:09:65:b7:17:b6:f0:37:7d:71:
                    6a:a6:df:2c:80:99:01:d0:63:ae:06:4c:1f:bc:f4:
                    3f:59:9d:e3:52:dd:7b:a9:d7:7b:69:0b:55:a4:88:
                    07:a3:5a:ec:47:79:d6:ab:51:cf:65:ed:8b:99:25:
                    92:9b:76:78:cc:87:ef:fa:cb:55:33:cb:81:1b:b5:
                    54:88:d7:72:51:26:6b:7c:ff:2f:65:28:59:7a:85:
                    b7:2d:a2:88:81:7f:30:72:3a:84:09:08:3c:0b:e8:
                    fd:0d:0e:db:a5:17:ca:57:e1:50:0c:ef:0e:4c:4d:
                    14:06:39:c2:ea:c4:14:a0:2d:23:d6:b9:c1:09:a0:
                    e0:88:c0:3f:00:2f:89:16:99:8c:dc:d6:82:90:51:
                    06:e6:cf:17:78:f7:7e:8e:9d:05:72:90:8e:9c:24:
                    c3:2e:b7:72:01:a1:1a:ae:b7:cd:87:11:c7:e6:5d:
                    6d:cc:00:a2:5e:2b:4a:02:45:66:a9:c7:41:ad:19:
                    cc:15:91:29:20:d3:03:5c:38:5a:e8:d3:04:37:f2:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C6:0A:54:CE:BB:A9:DA:0A:EE:29:6F:05:81:57:01:D9:E3:D2:73
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:fe:f6:83:5f:2f:25:12:d0:26:06:9d:73:98:5a:e6:48:f4:
         f0:6e:5a:7e:6c:9d:b1:d5:b0:c3:ac:9d:61:85:8c:dc:a8:88:
         c0:f2:e8:bf:c4:58:fb:b7:63:49:64:38:68:3f:67:0b:d2:14:
         0b:78:26:84:7b:79:98:05:22:79:60:d9:fb:5f:fd:9e:46:f7:
         1d:5f:f1:2a:2a:a4:59:a1:61:f2:4c:80:72:82:36:2f:c0:2d:
         9b:90:9b:1a:36:a3:b8:01:68:04:4b:8b:49:22:8a:ad:a4:97:
         2b:bc:c2:4a:68:2f:38:b1:c4:d3:17:8e:d4:22:96:1f:d8:cf:
         24:2d:6e:64:fd:97:6c:09:17:fd:06:f1:0d:f4:b6:e5:5a:18:
         5f:c5:24:93:c1:77:af:a1:16:69:e7:67:02:f9:03:0c:a3:9a:
         f9:b8:22:5e:a4:c3:50:9f:41:f8:b9:33:21:56:65:33:7a:3c:
         a8:55:a2:6f:13:f9:ff:ff:84:c6:f4:44:ac:f9:2d:55:90:b2:
         ab:03:09:69:8c:3a:52:fa:6c:a2:e5:8a:96:d3:df:74:71:b4:
         71:16:54:91:24:27:e9:d1:29:61:5d:13:ee:d8:66:d8:fc:ca:
         bd:52:d6:98:7f:9a:67:3c:3c:9c:7c:51:f8:ee:79:a5:9a:b1:
         2c:e7:42:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:40:32 2025 by rpki-client