Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
File:                     0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json)
Hash identifier:          62fiB5gUAVKUKdwdlS0FSgalzJD/FbEnsV28T7m1Kh4=
Subject key identifier:   31:10:DB:85:0A:D1:A4:4B:D8:9C:25:91:79:39:EA:79:BF:EB:90:CA
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Certificate issuer:       /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial:       019873E3CBE8BA49F609EDA4AB0FA2F0D9BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
Manifest number:          0584
Signing time:             Mon 04 Aug 2025 07:02:45 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:45 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:45 +0000
Files and hashes:         1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: zaQlYo8dTS7MX6ykZyTOlQm2XP7kuqvNEe3Wo4WrnKU=)
                          2: tDVvrqtQQCwl2jE6yV_v8vBSPyI.roa (hash: qiENM6J31Gqa4rOEk4JnN/zBbLfxSy0s2Ydx5h5QGk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:cb:e8:ba:49:f6:09:ed:a4:ab:0f:a2:f0:d9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
        Validity
            Not Before: Aug  4 07:02:45 2025 GMT
            Not After : Aug  5 07:02:45 2025 GMT
        Subject: CN=3110db850ad1a44bd89c25917939ea79bfeb90ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:15:e2:a9:69:31:63:4b:0d:60:c8:95:8f:
                    58:60:09:b8:a2:0b:12:4a:8e:01:9a:ac:f7:17:54:
                    97:b2:2b:a2:82:a8:7c:1d:eb:fb:66:47:94:fd:3e:
                    bb:36:23:50:fa:f0:de:eb:e2:c0:75:e8:5d:47:ce:
                    f3:b2:16:d8:d1:7e:20:8e:8f:9b:73:50:d1:ae:cd:
                    4c:4c:45:a4:8a:eb:54:f0:c9:a7:72:b7:4f:9c:59:
                    d3:34:66:ee:f8:50:2e:0b:64:e2:13:96:ca:b3:c1:
                    98:33:5c:46:79:3d:bd:be:73:4b:b1:1a:66:4b:f9:
                    07:3d:35:93:d5:f0:06:23:6c:99:38:63:17:9a:31:
                    d5:b5:69:10:19:3b:5c:9a:56:96:78:b4:82:ee:e1:
                    5e:36:86:83:15:de:cd:aa:c8:f4:61:f8:a2:fe:42:
                    1f:32:30:dc:95:8c:ee:dd:1a:21:83:6d:87:0d:d9:
                    46:fa:29:2d:73:bb:08:a5:73:b9:d5:aa:cf:ec:c9:
                    5c:36:6c:32:29:48:7b:6e:80:38:37:c6:3b:23:4d:
                    5e:31:c0:3e:49:80:be:55:fb:8d:72:70:c1:2b:69:
                    29:7d:0a:15:4e:bb:a3:a3:9d:92:a1:06:83:1d:81:
                    50:cc:b6:4d:41:9f:ae:ce:da:67:8a:42:1b:fc:22:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:10:DB:85:0A:D1:A4:4B:D8:9C:25:91:79:39:EA:79:BF:EB:90:CA
            X509v3 Authority Key Identifier:
                keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:5e:79:b6:ab:30:2b:83:e1:41:76:3a:f9:30:0d:5b:29:cc:
         55:e8:b6:51:c3:05:3f:3a:81:60:44:b4:71:29:74:fe:ea:e4:
         ec:95:98:e7:16:60:0c:bb:05:33:82:64:82:91:1d:b2:41:0a:
         a7:f7:94:d3:b0:b3:32:6c:68:39:61:9e:62:e7:a7:f2:9d:41:
         94:4b:a5:8d:59:be:68:dd:43:9c:14:eb:a4:8f:7d:a6:39:d8:
         42:1f:04:df:30:c7:d8:d2:f6:06:f7:74:ea:32:e4:55:a6:b3:
         81:5e:25:e3:a0:f9:6a:a7:b6:31:ef:48:69:10:8c:05:a0:a9:
         00:5f:98:27:ec:f7:41:95:27:13:67:38:cc:24:cf:83:24:7c:
         b5:8e:cc:00:56:3e:66:7e:2e:6c:01:5c:6d:e1:d7:29:24:9d:
         20:5a:1e:2d:b8:1e:49:8a:bb:2f:99:d0:91:df:a4:4c:78:5c:
         74:7f:18:78:c3:5c:9f:29:ac:3d:a8:f7:23:e5:29:27:a3:37:
         b9:73:1a:d4:1c:0d:dd:70:bc:66:9f:1e:91:2e:ba:85:80:77:
         17:87:22:fe:78:5f:4c:e2:03:18:2f:6b:91:98:e0:78:62:be:
         d0:76:ad:9d:af:9f:3f:a3:61:55:05:f9:12:4c:a6:95:75:97:
         ff:f8:b0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:21 2025 by rpki-client