Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File:                     Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier:          NE2B4U8Z8xhh8uIb3WEcFLnB07TVGIUCgq7D/4nXNpI=
Subject key identifier:   13:DA:E1:C3:AD:BC:52:E0:AC:26:E4:23:B5:36:AA:70:12:51:F5:83
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer:       /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial:       019877514C986379734CF4787A6C38C522F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number:          0761
Signing time:             Mon 04 Aug 2025 23:01:13 +0000
Manifest this update:     Mon 04 Aug 2025 23:01:13 +0000
Manifest next update:     Tue 05 Aug 2025 23:01:13 +0000
Files and hashes:         1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
                          2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
                          3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: l+6BaU88TVFrWJiFC+lY/qQGrtILkfNs5ASO6UiqATQ=)
                          4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 23:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:77:51:4c:98:63:79:73:4c:f4:78:7a:6c:38:c5:22:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
        Validity
            Not Before: Aug  4 23:01:13 2025 GMT
            Not After : Aug  5 23:01:13 2025 GMT
        Subject: CN=13dae1c3adbc52e0ac26e423b536aa701251f583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d8:87:8f:89:19:0b:04:f3:bb:42:27:7e:10:
                    f7:bf:94:5e:91:d6:14:e0:d0:b6:a4:cc:50:e6:b7:
                    a6:c3:aa:57:38:50:7e:6e:97:67:8d:39:06:9a:54:
                    73:46:83:88:12:83:ba:01:0a:b7:b9:ad:4a:73:03:
                    92:24:88:a3:bd:8c:dc:2c:f2:e2:51:d2:16:5b:f7:
                    32:bf:2d:50:04:d0:70:81:0f:1b:06:18:b3:e0:b2:
                    91:e6:6a:b5:15:04:0d:e2:80:b7:15:fd:2e:44:db:
                    22:f2:1e:5c:24:ba:8b:55:f5:43:30:84:12:4e:fd:
                    6a:0d:c3:95:08:2a:65:e4:4b:54:ad:2b:5c:85:95:
                    b1:e4:4b:8d:7c:7c:12:c7:73:42:0d:27:32:55:f4:
                    19:f7:1e:9e:7f:55:30:11:c9:36:00:fe:01:12:f7:
                    cd:b5:db:86:a9:1c:9c:8e:24:f8:dc:e2:eb:04:11:
                    d3:72:d4:db:2e:e9:e4:fb:29:f3:5e:15:11:52:64:
                    a3:26:ea:84:b2:8f:e5:5b:60:ee:35:94:70:49:bb:
                    8b:80:87:6e:89:69:76:d6:06:9a:d0:88:24:50:2a:
                    38:cd:ad:79:c7:d3:ef:f7:8f:73:da:d8:b5:57:d7:
                    9f:c9:ce:10:97:f3:c7:97:ae:4c:fc:00:99:16:46:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DA:E1:C3:AD:BC:52:E0:AC:26:E4:23:B5:36:AA:70:12:51:F5:83
            X509v3 Authority Key Identifier:
                keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:57:10:14:b1:e5:01:c1:18:41:bb:b2:88:db:5d:1d:59:b4:
         af:59:38:ba:87:4d:08:fc:98:4c:6c:f2:2b:ee:b8:4d:dd:94:
         05:cb:4c:7e:11:71:d8:09:5f:31:f4:e8:5e:6b:6d:bb:40:5d:
         de:d3:cd:22:76:6a:ec:8e:ad:c5:7b:23:e8:8d:9f:70:f6:7c:
         ff:2c:96:cc:04:3f:70:d7:0e:48:53:87:b5:cb:81:e7:4e:6c:
         e4:5f:24:a5:80:2a:de:e2:cd:a2:b8:2e:ed:36:3c:51:af:e5:
         1e:f6:aa:c7:63:d8:a6:6f:16:fc:a3:89:f4:f6:c0:4a:5a:65:
         99:1f:cc:08:02:7a:6b:f2:a9:09:f6:06:74:1c:94:ef:9c:b0:
         6c:6f:79:20:64:de:59:91:b5:86:ce:af:6b:33:1a:69:d6:98:
         c2:87:8a:85:c8:2c:08:ca:84:98:ac:e7:35:ce:0f:c8:f7:aa:
         df:93:20:f3:79:14:f9:1d:7f:bf:a6:30:54:ea:92:98:ae:86:
         f9:f5:93:17:a1:3d:39:4e:16:f5:7e:1b:25:a5:d3:89:1b:17:
         54:25:80:11:43:1b:a4:f1:9a:ca:a7:ab:58:4b:84:6d:e6:48:
         b7:ef:c3:38:bc:bf:9e:00:24:1d:b8:2e:c4:73:2e:d6:68:b9:
         d6:45:17:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:11:28 2025 by rpki-client