Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
File:                     AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft (raw, json)
Hash identifier:          06AAP6emPmgFwWz0JVfCH30udZbj0mesgNOrFIBo+oE=
Subject key identifier:   79:FB:A3:E3:4E:82:4D:35:A3:E2:B4:7D:3E:0C:73:DA:B7:16:FE:6E
Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
Certificate issuer:       /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Certificate serial:       019921E79E6E0A5C340E8DFD4E49204F98FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
Manifest number:          2D
Signing time:             Sun 07 Sep 2025 02:00:51 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:51 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:51 +0000
Files and hashes:         1: AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl (hash: zqlno/6yN9Yvw/SyGBeZIV9OthXIrZX8p41TLVUfd8I=)
                          2: bv4QETSWqF3TL8v6bkdkOmJCnV8.roa (hash: u3f6KbVOSd8SH6/L76YsF9GXLmgRIwxXE5d59oV84rQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:9e:6e:0a:5c:34:0e:8d:fd:4e:49:20:4f:98:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
        Validity
            Not Before: Sep  7 02:00:51 2025 GMT
            Not After : Sep  8 02:00:51 2025 GMT
        Subject: CN=79fba3e34e824d35a3e2b47d3e0c73dab716fe6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0a:71:95:77:9a:9c:8f:7f:f3:87:a5:19:4d:
                    da:0a:4a:e7:a6:c2:54:6c:ad:8c:88:cc:1f:f6:d6:
                    86:8e:3e:5a:71:68:03:23:0a:e5:60:76:f2:a5:79:
                    79:c8:a0:9c:56:ba:0d:fc:a1:8f:cf:17:64:24:84:
                    f7:f2:bf:aa:61:84:d4:bc:00:30:20:de:b8:27:b1:
                    3b:dc:e7:a6:47:3c:26:6b:3b:ad:a8:80:f7:09:61:
                    2d:e6:70:a0:f9:c1:47:c0:1e:c3:de:fa:5b:55:05:
                    3a:a3:16:a6:c0:bf:f1:f8:d2:a6:ad:0d:e8:00:65:
                    37:e5:cb:83:d9:8c:42:83:73:9f:70:53:74:35:e1:
                    4d:2d:5d:56:21:e6:54:02:ed:66:32:3e:a0:e5:e0:
                    3b:16:3b:fd:c2:61:06:67:28:0e:51:50:f9:6b:82:
                    22:78:86:0e:7b:bf:db:d5:75:c6:5c:d1:1a:a2:2e:
                    79:66:2e:71:31:cb:72:70:31:7d:7f:78:34:54:3f:
                    58:6e:30:ab:4f:2b:c6:37:50:bf:ee:fa:ab:2f:56:
                    31:6d:c3:bb:5f:9b:2c:65:86:5f:71:28:d8:b1:e6:
                    50:17:01:f5:9b:e3:6d:7d:fa:82:7f:55:40:2c:83:
                    49:ac:64:50:53:8b:32:a2:d6:d7:21:aa:15:bc:07:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FB:A3:E3:4E:82:4D:35:A3:E2:B4:7D:3E:0C:73:DA:B7:16:FE:6E
            X509v3 Authority Key Identifier:
                keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b5:31:30:5e:6c:2c:df:45:8b:97:df:95:a9:9a:e3:f9:bf:
         5d:45:3b:d1:1d:d3:4c:34:41:33:b8:93:49:28:0a:dc:56:33:
         cb:39:6b:d0:e7:f9:ff:2e:11:2b:78:bf:ea:2e:39:e7:45:9a:
         15:13:53:cf:e9:f2:45:c2:08:d2:60:5d:95:2d:73:70:2d:0d:
         05:bf:f3:69:a9:22:6c:15:14:7b:32:72:a6:b5:c0:73:fb:b2:
         ff:29:49:f6:41:c1:52:b0:34:56:3a:b2:17:dc:ec:38:36:e6:
         d2:f1:7d:fb:1b:b7:4d:ec:7c:0a:38:8f:8f:fb:b3:87:35:ec:
         3f:9f:b5:04:52:b3:59:66:f7:94:eb:6e:dc:86:a5:9d:b7:7b:
         2b:06:9e:01:9a:41:c4:f5:83:6e:c0:8a:1c:8e:be:e1:80:8e:
         59:00:16:62:82:ea:c9:e5:25:2d:76:0c:99:5d:ef:22:84:6e:
         cb:4d:3d:79:11:84:da:1d:f4:a9:2e:b3:46:40:46:4f:4f:1e:
         7c:51:0f:d4:47:76:b2:46:28:f2:d4:03:37:12:ac:01:39:73:
         b3:3e:74:b9:7a:43:ec:d1:2b:66:81:29:f2:27:6b:e1:3d:4d:
         5d:e4:d8:a8:44:e5:3c:d6:3e:a2:7b:9c:48:e2:84:26:98:ae:
         27:3e:d2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:25 2025 by rpki-client