Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File:                     D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier:          Y4+RgO9YqIrwILemqLn0WmKrkagAWi4rYNqXpOlBozM=
Subject key identifier:   A1:B6:E7:6E:1E:FF:13:4D:4F:53:2D:FF:05:DF:B2:92:C1:24:3E:7C
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer:       /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial:       019921B0878D6DC8AF4FC59153ACF02313FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number:          0589
Signing time:             Sun 07 Sep 2025 01:00:41 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:41 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:41 +0000
Files and hashes:         1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=)
                          2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: iudDdwdK++DN12imdDjpxUzOkrz0XBr+fEa1rQwqt8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:87:8d:6d:c8:af:4f:c5:91:53:ac:f0:23:13:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
        Validity
            Not Before: Sep  7 01:00:41 2025 GMT
            Not After : Sep  8 01:00:41 2025 GMT
        Subject: CN=a1b6e76e1eff134d4f532dff05dfb292c1243e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a6:c2:e5:fa:b5:74:11:b3:b8:f6:f6:61:ae:
                    38:41:18:65:3e:52:13:6f:17:bc:25:07:a5:30:38:
                    0e:77:e1:ca:14:2c:77:5c:40:08:26:8e:b6:d9:bb:
                    fb:62:f6:08:8a:10:44:2c:63:cf:9c:09:20:5c:6e:
                    b3:d7:d4:ef:b8:59:6d:6e:8a:2c:cb:4f:79:90:07:
                    70:6a:24:fe:4a:17:cd:a4:34:f3:b6:09:0c:6b:fb:
                    b1:53:d6:fb:c9:bf:34:2b:4b:d3:b3:f2:20:f4:d4:
                    0c:74:10:bd:b8:39:53:96:58:68:b9:3f:6d:95:d6:
                    a1:1c:3d:78:fd:f4:ca:c2:3e:67:66:e8:00:45:be:
                    c3:5c:a2:31:dc:6c:eb:a6:3f:8a:40:4a:3a:67:9c:
                    f2:20:39:ab:4a:2f:25:6d:fe:9f:a8:b7:45:ea:52:
                    67:ec:bc:b9:e0:70:0b:d3:d6:30:de:54:01:4a:2f:
                    0c:8e:b9:6c:47:e5:02:b0:bc:b1:ae:b4:56:b2:f0:
                    36:05:68:a0:53:92:47:1b:84:e2:7e:50:7f:e1:53:
                    60:f0:1d:51:33:b8:bf:ea:5d:5f:1b:68:a3:da:e3:
                    47:63:3e:b9:16:83:e8:06:f3:01:06:2b:67:5a:0e:
                    71:90:49:51:95:91:38:7b:16:1a:fb:dd:e0:73:ae:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:E7:6E:1E:FF:13:4D:4F:53:2D:FF:05:DF:B2:92:C1:24:3E:7C
            X509v3 Authority Key Identifier:
                keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cc:c2:b2:08:58:aa:a5:b5:c3:54:b1:92:99:03:9d:a0:69:
         c6:be:5b:4f:93:8d:af:98:a0:e4:29:f0:3e:84:f9:05:30:90:
         26:db:1f:f5:1f:0b:4c:d8:99:4c:da:3c:b3:2f:79:46:58:5c:
         be:09:c8:2f:66:aa:31:9b:b8:b1:d0:43:be:74:2f:a4:aa:49:
         9d:c9:85:76:a4:36:a7:c0:63:be:0b:9f:4c:d7:5b:7c:7e:e7:
         63:0c:f7:c1:05:43:72:d1:e1:7b:15:de:ae:c4:2a:e8:97:c0:
         b1:fb:f4:86:80:e0:6f:45:5d:f0:81:c5:99:d8:b4:20:c1:5e:
         8a:16:e5:05:22:d3:95:47:36:f6:ff:e0:9c:2b:85:1b:0b:3c:
         df:97:a5:97:f7:7e:d5:2c:66:5e:cc:7f:ed:2c:ff:8e:36:9a:
         8a:a0:b5:57:4c:a7:dc:e4:72:df:2e:aa:0d:7a:a2:12:93:ed:
         2e:15:a3:97:c7:78:37:b7:93:0d:97:7c:cc:60:66:7b:37:ce:
         cd:72:18:24:e6:27:1c:60:7f:14:b8:6b:06:ae:38:35:88:76:
         07:4c:50:b9:87:c5:08:54:d6:a4:a8:ed:1f:4c:48:6a:a6:cf:
         11:ef:be:15:8d:7c:5d:a0:aa:73:ce:cb:bd:d5:a2:91:71:ea:
         6e:fd:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:36 2025 by rpki-client