Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File:                     dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier:          ll3vPBhcr/m0lAcarf43lBSzuLiPLMpBwCUXEX0SyPw=
Subject key identifier:   BF:05:31:24:FB:C3:C8:F3:6C:76:35:FF:05:4F:78:72:9B:92:C9:1A
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer:       /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial:       0198741921CDEA196490EF96F3FA3189695A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number:          02FB
Signing time:             Mon 04 Aug 2025 08:01:00 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:00 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:00 +0000
Files and hashes:         1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=)
                          2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: 9KrrcGbxQFhPutc0vJ+Dewh/aBvCc5SYFvzsiufuPkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:21:cd:ea:19:64:90:ef:96:f3:fa:31:89:69:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
        Validity
            Not Before: Aug  4 08:01:00 2025 GMT
            Not After : Aug  5 08:01:00 2025 GMT
        Subject: CN=bf053124fbc3c8f36c7635ff054f78729b92c91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:e1:82:b3:12:98:81:f2:78:63:95:79:4e:
                    e8:31:d5:69:01:c5:65:69:5e:4f:2f:11:97:ce:d0:
                    1c:07:b1:d1:04:41:c0:65:63:1b:84:db:78:86:d9:
                    99:f7:da:bd:0e:26:db:40:4c:59:9e:01:6f:12:1f:
                    42:04:9d:66:b2:0f:1f:d2:2c:d2:36:b6:c8:85:ab:
                    ec:25:ac:7d:c7:2e:30:fb:83:92:dc:8a:79:72:54:
                    21:e6:f9:d7:c3:1e:e1:51:da:8e:79:6f:c5:9f:45:
                    5e:0d:ef:08:09:c9:fa:a2:ce:9a:ba:56:73:34:58:
                    d5:9c:eb:d6:e3:d5:53:49:d5:58:e8:d2:9e:16:23:
                    3f:de:21:09:fd:09:64:f9:61:1f:38:14:c7:2b:8e:
                    68:21:9e:32:94:f1:74:81:32:da:1e:0e:35:61:94:
                    34:ae:8f:7d:3d:32:19:3d:6d:2d:65:24:35:07:c6:
                    b2:4c:7f:55:3d:85:73:09:0a:c7:c6:d8:b3:b1:bc:
                    5a:c3:cd:3d:5f:bd:b4:75:57:ab:45:e9:48:a0:81:
                    e2:c7:8f:19:5f:6b:97:5e:14:e5:85:1b:ce:0d:d5:
                    44:88:ed:e8:20:74:c6:3a:2c:1f:3c:7b:dd:50:7c:
                    d3:62:48:78:b1:66:51:de:aa:8a:de:ee:1e:4c:52:
                    84:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:05:31:24:FB:C3:C8:F3:6C:76:35:FF:05:4F:78:72:9B:92:C9:1A
            X509v3 Authority Key Identifier:
                keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3c:ba:eb:16:dc:6f:c8:18:14:3d:6a:85:f9:1b:44:88:62:
         76:0b:21:44:f8:5d:4f:37:a0:19:cf:28:c5:e9:8e:e1:e1:29:
         7f:12:f0:01:72:6c:e8:ea:3a:4a:46:d5:ae:c2:1f:da:06:0a:
         02:26:39:7f:51:e9:1d:56:db:00:da:0c:e5:f0:4c:c8:43:e6:
         64:67:8e:a9:2b:89:87:d0:db:15:46:db:02:52:39:1a:d3:8e:
         0a:76:f0:47:8b:2a:87:a7:7e:d9:a6:d2:a1:e8:8e:92:f0:b9:
         e4:d7:41:25:c8:f4:9d:f1:ee:60:91:95:94:e9:db:60:8e:22:
         ce:ac:e9:86:63:d9:08:79:ab:a0:86:37:8b:06:4a:4a:81:41:
         ef:39:1b:ae:36:f5:32:12:da:6f:6b:b5:ec:a8:e6:75:b9:eb:
         72:9d:32:06:cc:ea:04:ab:f6:14:22:c0:4e:27:bc:81:26:0f:
         5e:8e:82:58:3a:e1:18:66:fd:1c:f5:83:47:16:47:c6:28:03:
         0d:e8:ba:1c:5f:00:07:8e:ba:cb:9d:88:e7:16:9a:e5:c4:2f:
         dd:be:86:ed:ab:9c:fa:e3:c0:f7:56:37:83:40:bb:31:89:d1:
         4a:68:75:8e:ed:2c:2c:1f:6e:28:97:93:61:aa:1a:2c:ce:48:
         cd:88:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:02 2025 by rpki-client