Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          sTwdFBBOPmSCzD7ZBwTDQM8b/3qwOqD/vXm2SHr4490=
Subject key identifier:   9A:7E:C5:30:00:35:08:C1:50:7D:B8:FC:D5:88:96:99:6F:A5:E8:55
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       019893DB3CBD6E2753F38B5F98291657873F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          15F8
Signing time:             Sun 10 Aug 2025 12:01:15 +0000
Manifest this update:     Sun 10 Aug 2025 12:01:15 +0000
Manifest next update:     Mon 11 Aug 2025 12:01:15 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: By2zdx21TKJ2JEgUVs8u3hkjtWSHQMeVYrSi2FZfzsU=)
                          2: f_yh7-7v7LI3DnSdnUSk00iuL5g.roa (hash: WRI0Xz6/VCX9n+DPCS4hBmIPi2foRqOlNvNKjpUOgU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:db:3c:bd:6e:27:53:f3:8b:5f:98:29:16:57:87:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Aug 10 12:01:15 2025 GMT
            Not After : Aug 11 12:01:15 2025 GMT
        Subject: CN=9a7ec530003508c1507db8fcd58896996fa5e855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:bf:7e:0c:8b:22:ab:a2:91:cb:d1:6c:ba:
                    41:85:27:37:05:bd:e1:4f:e8:23:8f:20:81:ea:cb:
                    f1:0d:50:df:b9:f4:df:03:9f:b7:3a:22:10:ac:53:
                    86:53:78:3d:a8:97:1a:1f:b1:61:b2:4c:da:6d:4f:
                    6a:41:99:89:5a:c7:78:1c:47:78:b0:4a:1c:d1:85:
                    54:d2:d7:95:2d:3c:53:58:b2:d6:c3:23:7c:df:89:
                    b7:59:f2:a5:d4:51:92:e8:00:fd:95:81:6c:be:53:
                    bd:6c:a6:73:d1:05:07:8b:ed:ee:5b:e5:05:16:40:
                    52:09:04:fb:27:2f:3f:24:66:51:0c:30:d6:ac:61:
                    2f:99:66:d7:00:1b:46:3c:29:98:1c:c8:5f:6e:6f:
                    5b:cb:30:49:25:01:72:11:85:88:f9:62:88:7e:ce:
                    30:ee:d9:47:72:38:a8:95:92:3c:f4:2c:bf:61:0c:
                    41:93:f8:4d:89:15:21:23:ca:3a:73:9a:69:c8:c0:
                    15:bc:94:56:49:fb:4a:7d:ef:95:93:a5:3a:b5:b8:
                    66:5b:63:d0:82:10:3c:f3:5f:8d:99:86:f2:7b:96:
                    c4:d1:01:17:e9:4a:80:73:40:f6:52:1c:95:90:e2:
                    6f:a5:99:fc:71:4d:e1:b7:58:5e:a3:be:8e:17:93:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7E:C5:30:00:35:08:C1:50:7D:B8:FC:D5:88:96:99:6F:A5:E8:55
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:51:bb:6a:b7:67:d1:a6:12:db:63:e0:6b:fb:16:84:0a:6b:
         e0:92:d9:ed:69:fc:4f:13:2e:3a:ad:78:5b:75:cf:5d:ab:4f:
         96:43:74:2c:86:6a:c8:54:05:a7:80:8f:ee:34:47:fc:c6:bb:
         71:7f:f1:fe:96:40:17:5a:fa:4a:d5:39:be:30:78:9b:82:d1:
         58:31:32:23:fc:bb:0c:21:0d:11:40:67:9c:0e:aa:3c:ac:a0:
         bc:52:06:36:8b:96:d2:71:a8:51:57:c5:b4:45:0c:5a:06:e4:
         d6:59:12:04:17:5c:50:3e:be:ee:25:bf:1e:23:8d:70:6e:11:
         ff:bb:39:ee:7a:30:94:d5:2b:21:fe:a7:6c:9d:23:cf:e9:d8:
         9d:e3:a1:00:09:06:bd:60:7b:ee:71:ff:21:64:9b:6e:9d:33:
         db:5a:d8:f3:98:0b:34:d0:21:17:74:53:90:2a:d3:b6:bf:ff:
         29:89:18:c3:46:bb:67:63:32:a1:c8:c1:ff:e3:68:76:a2:a7:
         e6:ce:dd:e8:f6:21:1c:b8:6d:a3:52:49:b2:3c:ef:b4:10:6c:
         48:2f:d3:05:02:56:de:a3:f9:e8:9b:9c:9d:37:a5:a4:9e:52:
         20:70:0c:11:43:5c:c8:b7:57:b7:cc:db:47:3c:22:5f:6b:16:
         ba:66:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:12 2025 by rpki-client