Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
File:                     dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json)
Hash identifier:          vg0CrH2EKynN5jjoZgAnZMM7bESjElwBiidvilW8LfQ=
Subject key identifier:   26:8A:87:D5:CD:58:04:27:3B:5E:66:49:F1:AF:50:61:6D:AE:29:1B
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Certificate issuer:       /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial:       01989F3ABF46F5D1DAE16A02386E22865253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
Manifest number:          02C2
Signing time:             Tue 12 Aug 2025 17:01:23 +0000
Manifest this update:     Tue 12 Aug 2025 17:01:23 +0000
Manifest next update:     Wed 13 Aug 2025 17:01:23 +0000
Files and hashes:         1: 6zamDTUBwAsnOFkspEkx8jbI6wY.roa (hash: dvRTh/kPMauvkj5ufzVensqKmDYCodFR0kOnwH7zmxk=)
                          2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: xndm9d6GSTmwxX6g1wUvbqrkZ5w1+Zaght4UluB1SeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:3a:bf:46:f5:d1:da:e1:6a:02:38:6e:22:86:52:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Validity
            Not Before: Aug 12 17:01:23 2025 GMT
            Not After : Aug 13 17:01:23 2025 GMT
        Subject: CN=268a87d5cd5804273b5e6649f1af50616dae291b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:14:3f:a9:22:a9:51:ba:23:b7:9d:90:45:
                    f7:e7:7a:19:20:f4:14:04:36:3c:5c:50:5d:e3:1a:
                    ee:e8:36:c2:a2:d2:3f:04:51:03:7b:33:4b:cf:b5:
                    fb:5c:13:5b:42:4b:f7:6f:01:33:c0:48:2f:83:e4:
                    3a:77:38:cc:05:f9:56:12:e7:51:d5:30:83:1f:b4:
                    b2:30:27:9c:6e:df:cc:ad:52:ce:8a:0a:49:f0:33:
                    70:47:86:a4:d9:c5:2b:0b:e7:49:1e:5e:e0:54:83:
                    d0:0a:4b:80:c1:0c:b3:20:83:7d:11:a2:a8:5c:07:
                    ff:0e:7a:c7:c1:05:36:3c:d5:3a:f4:b1:93:72:0e:
                    0b:92:e6:be:a9:92:aa:97:16:c2:37:c7:08:3e:f4:
                    8c:26:39:01:1d:af:1e:cd:c9:73:bf:4b:e1:bd:a4:
                    31:ab:5b:05:00:1a:96:98:80:27:0b:5a:be:b7:88:
                    b0:2c:eb:4a:1f:93:91:3d:23:2f:33:7a:e4:49:2a:
                    dd:75:ad:25:dc:34:7a:eb:4d:8c:1e:7a:6b:fb:5d:
                    b9:25:f4:3c:30:aa:d1:07:d1:2b:18:35:17:ad:c2:
                    56:ed:5c:25:8b:1a:5c:06:7f:bd:16:7b:4e:2c:9c:
                    7a:e5:e5:96:ae:b7:45:db:be:88:a8:df:d5:e4:29:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8A:87:D5:CD:58:04:27:3B:5E:66:49:F1:AF:50:61:6D:AE:29:1B
            X509v3 Authority Key Identifier:
                keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1e:f6:88:9c:20:ed:16:c0:e2:c2:3a:bb:10:62:3d:72:aa:
         e1:fb:c5:9d:bd:3a:38:8c:16:fb:d8:64:5e:d7:05:ec:62:6c:
         17:7f:14:d4:16:33:a5:a2:96:5a:75:93:d4:07:1b:68:e1:e0:
         e9:59:c5:01:54:a8:38:66:a9:53:57:e2:b0:35:61:35:1f:77:
         2c:55:91:cd:00:8f:c9:b9:b4:ef:23:bc:e4:de:7d:1e:d9:01:
         e3:42:c7:51:16:b6:73:56:db:5b:be:84:d8:cc:2f:6f:a9:a8:
         66:8f:99:36:89:50:3c:7f:28:5b:15:05:27:8d:17:b2:e6:82:
         c6:5e:30:10:38:c0:51:0f:79:42:e9:d1:e7:89:d7:4f:ce:97:
         e2:a4:d0:2d:58:46:8d:39:cf:c5:22:20:e7:28:ce:01:81:9f:
         87:38:e8:9a:59:42:72:20:29:ac:96:75:62:39:27:ed:75:cd:
         c0:85:d1:d7:e9:63:cb:49:00:50:9f:12:24:a4:d3:e5:26:f0:
         a8:0b:83:e6:b0:9a:7b:72:2c:21:b1:28:69:e7:e5:6e:36:6f:
         5e:de:59:5b:f8:04:b5:e8:2c:fd:4c:73:2a:9c:97:d9:e6:f8:
         24:66:96:ba:fb:6e:32:17:d8:9d:4c:d0:19:01:be:e4:25:dd:
         f0:fc:84:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:05 2025 by rpki-client