Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
File:                     DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json)
Hash identifier:          92dxHt29/WxUOea7VAz+Uf4oDYEFEmugGLvJ5cVkrRk=
Subject key identifier:   06:12:05:9F:E7:CB:4F:82:5D:D4:6D:8F:10:BD:7D:0D:66:DD:0B:86
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Certificate issuer:       /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial:       01988F5A075882ACF15579D5D5CED00A526A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
Manifest number:          0E92
Signing time:             Sat 09 Aug 2025 15:01:38 +0000
Manifest this update:     Sat 09 Aug 2025 15:01:38 +0000
Manifest next update:     Sun 10 Aug 2025 15:01:38 +0000
Files and hashes:         1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=)
                          2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=)
                          3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=)
                          4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=)
                          5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: 7dcNoO4VvDeFKCEK3S6AUl5hj89WTSUX0IIKlAtf8aY=)
                          6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=)
                          7: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=)
                          8: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=)
                          9: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=)
                          10: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:5a:07:58:82:ac:f1:55:79:d5:d5:ce:d0:0a:52:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
        Validity
            Not Before: Aug  9 15:01:38 2025 GMT
            Not After : Aug 10 15:01:38 2025 GMT
        Subject: CN=0612059fe7cb4f825dd46d8f10bd7d0d66dd0b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:56:34:c5:c9:ab:44:3e:d1:af:62:e9:06:
                    e4:6e:90:1a:3c:b5:39:2a:89:39:31:fb:ac:8a:b6:
                    ce:f6:68:a1:f9:cc:9f:75:6d:69:d5:8b:10:69:8a:
                    b7:df:3f:e4:04:8c:1d:f6:3c:f8:12:1d:8b:59:cd:
                    df:86:2b:df:29:ed:d4:9e:bb:60:2c:27:28:ac:0d:
                    fe:ad:cd:65:df:2c:95:e7:bf:09:15:b6:be:5b:7f:
                    18:39:ad:4f:a1:c2:ef:ad:ab:81:e3:e5:e4:52:06:
                    ef:8a:dd:7a:a5:6c:2d:81:68:35:13:9e:b6:b4:73:
                    d8:80:95:51:2a:94:cf:7c:8a:da:3f:0f:b5:6a:1a:
                    f1:93:5a:6c:e8:f7:86:9e:68:13:fd:37:2a:06:51:
                    ef:ee:52:80:c3:01:d4:a8:1b:e5:28:18:45:77:1f:
                    b3:a5:23:d1:11:ce:3f:6d:64:2b:22:85:48:1b:4a:
                    ac:09:b2:a3:19:e6:5e:a7:9d:ed:dc:7a:59:22:09:
                    06:4f:6a:de:00:3f:24:d5:93:1d:3f:cf:a8:7a:2d:
                    ac:a6:4c:3b:12:10:fa:cd:b2:af:f4:ff:d0:d6:70:
                    00:ee:a8:44:95:8d:9d:a2:3e:f8:12:44:44:9b:a1:
                    e8:74:77:8b:17:e9:91:55:d3:13:33:ce:21:b4:dd:
                    5d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:12:05:9F:E7:CB:4F:82:5D:D4:6D:8F:10:BD:7D:0D:66:DD:0B:86
            X509v3 Authority Key Identifier:
                keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:22:00:82:ab:ba:ed:2f:f8:e0:ce:49:c3:97:02:45:6f:76:
         33:ed:96:a2:9e:32:8a:d0:4b:6d:c2:96:4c:34:85:a9:52:8e:
         fe:a3:e1:c6:75:00:a9:01:99:48:4e:b7:a5:a0:d6:84:81:66:
         48:de:f2:76:51:e1:87:cd:75:ce:16:f6:8b:c6:5e:83:09:ba:
         27:50:49:d2:ae:2e:1d:37:44:29:3f:10:7c:ff:7e:7a:08:cc:
         b9:39:2f:d4:cf:6e:c6:29:bb:99:56:b0:2f:ef:52:b6:4c:10:
         f4:b9:b1:47:99:9b:70:2b:4c:3b:e2:b8:31:c1:95:1f:29:48:
         c7:3b:f3:0a:f7:a2:1b:4a:e4:ad:da:8d:6c:3e:26:23:90:8b:
         10:dd:46:47:e4:21:06:f9:b7:3d:d9:5d:6a:17:24:e0:5c:fb:
         1b:3a:12:dd:41:fd:57:52:43:01:6d:e9:70:d0:a2:44:4c:41:
         47:d0:ba:9d:3b:a4:0c:4d:77:54:53:35:07:06:e6:97:c0:3d:
         dc:99:1d:bc:7d:8a:89:10:52:96:6a:40:04:d9:4c:46:48:53:
         e2:45:d6:39:f7:c1:0d:07:fb:7e:29:1c:f8:5a:bd:17:5c:29:
         88:95:90:99:f5:35:e7:d9:5e:bd:35:eb:56:f9:7f:3f:fa:e5:
         79:b1:e6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:48 2025 by rpki-client