Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File:                     CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier:          Ndrd1F9wMOPwYm9noM0z0RBmUMecdRZY0qqLJb1LDsQ=
Subject key identifier:   8A:46:DD:3C:AD:90:98:A8:FA:20:DE:BA:C0:5D:AB:62:D1:57:8C:C6
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer:       /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial:       0199233114905C2F0D6A55B8E285FFD7DEC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number:          07F6
Signing time:             Sun 07 Sep 2025 08:00:42 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:42 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:42 +0000
Files and hashes:         1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: 1GdVBGCRlEI8S7ToXumRyhUxn9aM0XrPkp88VHRDSI8=)
                          2: MJmSheQwhqTa8TcshZRbeEjyzHg.roa (hash: Gp/YgLDeJmP+HyXt6WhUwXyvRtnPi/acuut1qwHPb1I=)
                          3: NK7GdHMYRv_hDeWPBmQND98lvj8.roa (hash: jBbpvQcqJ1jdxJjUVdSmEBEQDhr0KhV9KMUkwMQPtk8=)
                          4: UVQCO4c7gPlnbnFsrZBocsgkaAA.roa (hash: V8RmBYoHKxTziStv8rsl1Lst5+68+msyqJhDWqugaio=)
                          5: mx1zhwHtw-uurdoc1Rs-ub83PY4.roa (hash: O6YFpkOTCBT8CmU8XHKba4R6Y/9CL3lbQUtfKViPzQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:14:90:5c:2f:0d:6a:55:b8:e2:85:ff:d7:de:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
        Validity
            Not Before: Sep  7 08:00:42 2025 GMT
            Not After : Sep  8 08:00:42 2025 GMT
        Subject: CN=8a46dd3cad9098a8fa20debac05dab62d1578cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:a8:ae:88:60:de:44:ff:32:d8:e2:5e:1f:
                    1e:60:36:7c:5a:6f:77:1d:7d:e6:3c:2a:ce:b5:f5:
                    bf:24:22:11:38:dc:ae:3a:0f:95:67:ad:83:f8:1f:
                    07:62:6e:55:6c:d1:c9:1d:8d:66:0e:23:54:3f:5c:
                    f7:26:5a:0c:3c:60:d7:e4:0c:d0:4b:b7:00:7c:bd:
                    f1:7d:b2:bb:ba:fc:8e:9a:9a:dc:4f:74:52:9d:eb:
                    8d:7c:59:03:00:03:e5:7a:fa:42:bb:7b:be:9f:4f:
                    33:86:03:c1:35:2f:f1:42:f9:d3:91:fb:3b:fd:89:
                    ed:ec:d8:da:20:45:1c:88:03:a4:9e:ea:2b:2b:cb:
                    7a:ea:4c:a4:39:85:97:f6:a9:e4:b1:04:9b:ef:d5:
                    5e:7f:94:73:86:29:eb:8a:2f:fd:08:85:de:c6:7c:
                    2a:16:38:3e:df:74:dd:22:5a:98:9f:96:6a:43:6d:
                    b9:1e:45:32:ef:f4:c7:80:b4:b5:d5:88:70:9f:e9:
                    31:e2:2c:4d:2e:58:0e:ae:44:13:c3:35:70:56:d2:
                    6c:a5:55:7a:e0:59:f1:3f:68:43:72:12:14:41:1d:
                    59:a2:81:b2:24:ba:82:55:76:dc:9c:9d:1a:9e:2e:
                    3a:ec:cd:4d:49:09:19:aa:0c:fa:3d:93:7b:67:2a:
                    06:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:46:DD:3C:AD:90:98:A8:FA:20:DE:BA:C0:5D:AB:62:D1:57:8C:C6
            X509v3 Authority Key Identifier:
                keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:25:b2:17:a2:14:53:19:94:a7:2c:cf:8f:be:50:eb:d2:23:
         e9:c9:cb:40:6b:06:23:6f:88:86:d3:dc:95:a3:b7:7a:c0:85:
         7e:81:41:ec:26:ab:64:c7:fb:98:73:7d:fd:de:23:18:2f:80:
         73:f9:41:4a:d3:30:6f:2b:98:28:21:ad:03:9a:74:38:35:1b:
         16:c2:e0:3a:d4:0d:b6:16:9f:cc:d0:26:fc:d2:b9:31:1c:41:
         a8:86:8c:9b:27:d3:56:5b:2b:5c:60:b7:7d:7d:9e:18:23:e0:
         02:8e:db:59:79:2a:34:61:04:a9:f2:e0:e5:a7:f8:dd:db:2e:
         1a:1d:ee:ab:82:ca:e4:90:93:cb:86:16:b8:8d:9b:8a:65:35:
         54:0a:06:3b:f8:30:be:82:d0:31:ed:8b:1a:dc:34:c5:52:66:
         7b:1a:8a:5b:ff:f1:a2:11:83:64:f6:f7:d9:e6:a2:ee:46:c9:
         e4:a1:75:f9:02:82:d6:2a:2e:12:32:1d:2b:10:f8:b7:fc:20:
         bb:39:70:e4:2c:cc:6e:62:87:dc:f9:cc:0c:3f:82:04:77:5c:
         9e:c3:a8:80:5f:10:32:ce:c5:0d:f4:67:5d:27:11:5f:3e:41:
         f4:19:f7:6e:48:bf:b0:b5:3a:f7:71:3c:c3:e6:2e:96:61:9a:
         a9:ca:4f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:29 2025 by rpki-client