Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File:                     0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier:          u+B5Nge5IZFT8ZE3Lu1hVs487j8o9Esgprda54lYk10=
Subject key identifier:   9A:77:9B:29:49:29:70:26:B9:05:82:E0:B0:57:9A:0B:D0:43:77:CE
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer:       /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial:       0198752C217DEB08F0B54878063FE68E7D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number:          0B8F
Signing time:             Mon 04 Aug 2025 13:01:23 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:23 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:23 +0000
Files and hashes:         1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: eT68MixGJVtmRNoz9UrWbuNSu4oA2EECW2hfNt0ZVJU=)
                          2: 2Bx_ZuBj3ywzIO5mlvk2Okv22hQ.roa (hash: guPg5C9izx8vPW7Ld4+sGxeIZUZPSLOzjQE1liVIecw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2c:21:7d:eb:08:f0:b5:48:78:06:3f:e6:8e:7d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
        Validity
            Not Before: Aug  4 13:01:23 2025 GMT
            Not After : Aug  5 13:01:23 2025 GMT
        Subject: CN=9a779b2949297026b90582e0b0579a0bd04377ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:bf:ba:b7:b0:43:46:3f:06:71:23:ef:4f:
                    53:ee:77:86:c0:9f:6d:a3:c5:54:04:b3:b0:0c:ce:
                    2d:37:3e:48:ba:a0:a6:51:97:5d:36:eb:e5:1c:44:
                    4d:a0:c7:e3:61:ab:f3:d1:12:3f:a9:2b:47:a9:01:
                    a0:ea:8e:3b:74:e8:69:6b:29:84:b3:68:76:ae:3f:
                    89:2b:70:9f:f3:d3:17:e2:5e:e9:35:db:f1:34:dc:
                    0b:05:7b:f2:cc:48:a2:6e:20:af:f4:bc:fc:2e:8c:
                    23:af:3f:c1:f9:b2:a0:64:57:15:77:d6:92:41:0f:
                    41:88:d3:c6:74:a8:05:a2:e6:5a:08:01:6f:68:61:
                    6c:0f:8c:4b:6a:4f:57:16:81:22:9f:fc:81:fa:56:
                    74:74:37:70:43:73:0f:18:ca:15:d0:9f:09:78:36:
                    a2:2a:95:96:2f:09:7f:30:1a:04:fe:df:ee:e4:12:
                    47:a8:1d:ae:fb:b3:77:55:86:d1:f1:9d:a6:8a:72:
                    40:39:e0:be:db:31:70:e9:c2:cb:ab:ce:eb:95:2e:
                    d3:55:df:03:64:b8:09:cc:44:a8:bd:ce:e1:0a:18:
                    79:d7:47:62:c4:19:20:21:34:60:7f:e2:ed:11:12:
                    e3:43:7e:0e:6d:fa:40:11:f0:80:fb:7c:10:97:73:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:77:9B:29:49:29:70:26:B9:05:82:E0:B0:57:9A:0B:D0:43:77:CE
            X509v3 Authority Key Identifier:
                keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c3:08:a3:d5:e2:4b:81:81:29:94:59:3b:7e:49:bc:94:51:
         b5:ea:6c:58:48:ff:76:b7:9c:c4:80:4e:8c:40:8a:c6:ef:ac:
         20:0d:96:ad:12:fb:97:9e:23:36:5a:e5:4d:9b:ba:f0:f6:ed:
         63:0e:df:29:10:8c:1d:d8:3e:63:bf:04:58:bb:27:0f:59:93:
         b2:6b:7c:b8:96:1c:e1:7e:9c:af:da:13:9d:95:c4:ca:c7:5f:
         ba:6a:02:87:b3:f7:d9:f2:d1:c7:f0:04:c7:62:60:1c:ea:6f:
         37:81:0c:b7:30:f3:1f:51:8a:a2:fc:0a:64:ce:63:13:26:6d:
         50:97:fe:de:8f:d4:8a:36:7b:28:ec:46:fd:e7:7d:84:39:44:
         15:13:36:fe:ff:3b:9c:aa:3c:15:26:56:5f:a9:67:5a:87:18:
         c6:f2:bc:bd:53:3c:26:d3:2f:83:3b:2b:dd:78:29:24:c6:39:
         8b:c3:61:70:41:ff:cb:37:61:26:29:14:ff:b0:05:78:e7:22:
         d2:f2:c8:04:2e:7e:db:d3:51:a6:cd:92:da:3a:34:d5:7a:9a:
         9b:de:7c:3e:7d:ea:6f:9f:f6:86:4f:f7:06:39:23:01:57:4d:
         dc:ff:8c:13:0e:4b:16:80:f5:a4:53:dd:b7:b7:c3:ba:bb:f2:
         10:8b:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:38 2025 by rpki-client