Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
File:                     cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json)
Hash identifier:          I2Ln1JRfICrCKCMv+JhlBjc9NyiserxiMelHSuWCuD0=
Subject key identifier:   88:1D:BE:53:C0:64:1A:77:BC:24:43:A0:24:52:6F:11:92:C7:DA:8B
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Certificate issuer:       /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial:       01987599398E62BE4B37F5A6CA7B217D4BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
Manifest number:          0FFF
Signing time:             Mon 04 Aug 2025 15:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 15:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 15:00:32 +0000
Files and hashes:         1: 1-DdA-do2aUnfFDViNUxhUDqFzbE.roa (hash: BKYK/ZWsPHxxlNPF0PEHOjs0OjsXKAGuBICEBJN+sBU=)
                          2: PquNLopkqyd1FPkE6lVSuFZAhHk.roa (hash: cueg/ECXevtubCCHF8NReS6so4hgNR13sPfAmLWyFN8=)
                          3: SKahOuz63VxzF7gsfLLtP4-dwsQ.roa (hash: tgpfEWxbjIJhXJgvlYzjtjMs+efIHb2DWjDR4Pl22YM=)
                          4: Y87LNPXwYxzM1KbDSMEARR-tLxU.roa (hash: Hc9P0WIM13wsCCDXXb34wAtaFccE9wg34ig8vLvBeGY=)
                          5: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: grXdGi6NHG8yd25PckcNaAxmk/OAZFR4V87QBnDkGu0=)
                          6: dj7XdZh5KETFPQnDms3UxXnRXC4.roa (hash: EpSZ3YEAtJm35+lis2XvA9ik+aj1Kz53yBaF/oXDmdQ=)
                          7: nq4bzy4h6lHvAq7WfQfvLT3Lcxs.roa (hash: AUW0hCwolQea98JTwSo4ol+MpnG7tQ7XKxKB7k262zg=)
                          8: pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa (hash: rLQUf7uZTpB79YDcuBoB9yRmzU3aEUgIa9XP7frMy3M=)
                          9: rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa (hash: RIIBfBGrMJNxseu/gjjvLy+xu6nPcaesVv59+v9lv30=)
                          10: wF16Isbo0PTlUouJULLf9fQs6Jw.roa (hash: ujnMHiwDZPQLz7IHlGLCJr2Hydzywx1acJmP/oG/nU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:99:39:8e:62:be:4b:37:f5:a6:ca:7b:21:7d:4b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
        Validity
            Not Before: Aug  4 15:00:32 2025 GMT
            Not After : Aug  5 15:00:32 2025 GMT
        Subject: CN=881dbe53c0641a77bc2443a024526f1192c7da8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:7b:b8:41:b4:2d:d6:60:c9:39:af:20:35:
                    6c:d5:ef:1d:5a:eb:28:a3:a5:06:e5:53:f2:a3:c9:
                    46:a1:e6:cc:e2:e5:97:30:45:8d:99:6b:0d:79:4e:
                    7d:ea:b9:ac:c1:e1:f8:f4:7b:8e:aa:de:13:f7:3d:
                    a0:45:2a:24:94:eb:ff:b0:c3:6f:77:7a:3a:0e:88:
                    2f:ca:e4:1a:74:13:5c:5b:a9:df:34:00:30:4f:bb:
                    2a:47:52:14:29:99:be:88:e5:75:fd:90:82:0b:e5:
                    76:77:f4:a2:94:b1:45:5c:14:a2:ba:14:d6:65:f7:
                    76:9a:26:39:66:c4:c1:c1:fc:19:21:79:a6:23:5f:
                    f4:fd:76:72:c5:4c:e2:87:d5:98:e1:69:09:bb:ce:
                    a1:ff:9f:2a:19:f6:0a:e3:16:76:e1:df:e0:0f:21:
                    b7:00:d6:65:72:fb:4c:72:01:1f:28:34:59:1b:2c:
                    8b:c2:74:8a:a8:b8:4a:73:3e:9f:d1:95:01:b2:56:
                    90:2b:b4:84:d7:d4:b4:af:7b:3f:dd:16:49:61:06:
                    de:f6:07:e0:89:fa:39:4b:59:0d:6e:cf:72:ac:73:
                    8e:12:f9:db:eb:48:e9:26:9e:ea:88:67:13:e2:96:
                    37:dd:82:48:a2:96:2c:1a:ac:4b:0a:c3:a0:01:2b:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1D:BE:53:C0:64:1A:77:BC:24:43:A0:24:52:6F:11:92:C7:DA:8B
            X509v3 Authority Key Identifier:
                keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:4b:d5:c0:79:3b:e4:b8:3f:26:b8:af:03:ee:47:0d:31:c4:
         1b:d7:c8:62:8d:38:b1:13:55:21:b3:83:d1:97:69:14:5e:d0:
         61:33:86:ce:0d:32:01:51:c7:35:35:86:62:f7:82:79:21:fa:
         22:bf:23:87:45:09:6c:59:6b:cd:13:66:51:26:ea:9b:c1:bb:
         77:8a:b3:29:bf:38:ca:e2:29:2a:b9:0d:56:39:ca:92:b6:f1:
         63:de:4f:0a:2d:80:45:cc:3c:89:d9:bc:07:1f:0e:49:a1:69:
         5a:e5:63:bb:f1:96:16:68:eb:62:56:10:f0:81:05:48:90:40:
         52:a1:29:39:b8:be:15:93:5c:1a:13:bc:9c:66:c0:57:b7:a8:
         87:fc:82:ad:59:a7:c1:81:be:fb:ad:53:46:c0:04:27:a5:e7:
         9c:29:0b:fc:7c:cd:d0:03:f5:ba:17:d4:cb:5b:3d:ac:72:d1:
         6c:2e:be:1c:ac:aa:97:16:f6:5b:ad:1b:0d:e1:93:8c:b5:d3:
         0d:40:1b:b9:49:00:c3:02:9e:91:49:9e:21:5f:50:fe:5d:f3:
         9d:db:41:b6:86:91:a5:be:86:a2:a7:b6:0f:1e:bc:6d:53:a2:
         a9:ba:67:41:07:55:2e:3b:e8:92:17:1b:5c:72:2f:b4:c5:60:
         2d:f6:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:38 2025 by rpki-client