Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File:                     2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier:          FcyPyFiOJJ9MSYyOohV6LCl6A5hp8ZNrgzXzCqfiP4s=
Subject key identifier:   B7:D5:1F:4B:DA:7B:90:39:AD:64:32:17:5C:E9:E8:51:93:93:B3:AC
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer:       /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial:       01988E0FE247E63CB84D701FB5322833369E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number:          0A53
Signing time:             Sat 09 Aug 2025 09:01:02 +0000
Manifest this update:     Sat 09 Aug 2025 09:01:02 +0000
Manifest next update:     Sun 10 Aug 2025 09:01:02 +0000
Files and hashes:         1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: BIPAYEIR6+k5M/FKNn9J4e8iFtQbOS+91zd2Yl1aPuU=)
                          2: 5NIsqkc9vMkUbKJISITWHR80lnU.roa (hash: rTtJCCn1pALK1KK1DzvSGITMJEp2xHDofmUm8fwxCgg=)
                          3: QX8KqylAM3f1Syx-djrWntCvrqA.roa (hash: m6udoP2gq2mRFJ54qIBjTU0GJ3xy3ZdgKfydTJt14l8=)
                          4: fWxAWe7FNQHl72525jh3CvQUjPI.roa (hash: wZ498wFmeXSTeDsoNJdQ0818F8qSsmRp/ozGqSUyBQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:0f:e2:47:e6:3c:b8:4d:70:1f:b5:32:28:33:36:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
        Validity
            Not Before: Aug  9 09:01:02 2025 GMT
            Not After : Aug 10 09:01:02 2025 GMT
        Subject: CN=b7d51f4bda7b9039ad6432175ce9e8519393b3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:db:b1:77:69:a9:30:45:56:7c:e5:7e:e2:
                    d8:b2:d4:c2:93:75:51:e2:0d:05:c4:0e:80:40:fd:
                    21:b6:cf:e0:2d:4a:f1:21:5e:f6:e7:94:70:39:15:
                    64:5b:76:48:2f:c9:47:a9:95:7f:2f:9f:49:e9:12:
                    ba:fb:ba:f4:d0:81:98:c4:7d:32:eb:24:24:c8:ea:
                    47:88:59:07:9d:be:50:ad:0b:6e:87:7a:91:ad:56:
                    37:56:71:fe:c9:6d:85:c2:12:33:2d:51:f7:1a:5d:
                    e9:f2:fb:4e:e5:95:88:c1:7f:61:9a:0e:df:66:d3:
                    e6:29:88:e7:9d:3a:46:e3:ba:06:4c:e2:2d:40:03:
                    65:8c:ae:8e:5b:32:e4:42:9f:12:f5:97:07:e8:5f:
                    00:0f:13:9c:86:8b:7b:5a:06:13:79:47:82:50:9c:
                    21:53:25:15:27:3f:b6:60:f2:43:c8:35:5a:f5:d2:
                    df:2f:e8:be:46:61:78:51:33:9a:0c:aa:8e:8a:dc:
                    ac:f1:96:fa:a4:83:7c:28:f6:24:cf:3a:52:17:b5:
                    e5:96:c4:8f:0c:ee:3d:a9:34:78:ca:33:1f:b3:d4:
                    bb:61:04:51:6c:3d:8d:ec:61:68:9c:15:33:b7:6e:
                    7b:f7:5a:53:0e:1c:1f:a4:6d:c9:8f:28:70:ae:4b:
                    a3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D5:1F:4B:DA:7B:90:39:AD:64:32:17:5C:E9:E8:51:93:93:B3:AC
            X509v3 Authority Key Identifier:
                keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:fb:ed:eb:cc:ec:75:71:81:da:31:f5:da:8d:60:c5:e1:7f:
         d6:4d:18:ca:91:b8:7f:4b:cd:6a:89:97:0f:31:b2:ba:39:a8:
         0c:7f:74:6d:4d:ee:6a:72:cd:1a:c3:f4:8a:4f:9a:dc:0f:8f:
         a4:e5:50:24:18:c9:d4:41:75:2b:da:95:d1:01:f3:a5:a3:15:
         c7:9c:9d:93:21:a1:c9:62:72:31:39:10:3a:16:36:48:7c:82:
         37:96:ba:75:a0:7f:ff:16:75:2b:a9:49:1e:59:24:c4:16:1e:
         85:be:c3:fe:cf:35:04:c0:78:7c:c0:92:39:30:47:7e:9b:32:
         de:6f:a4:b4:3a:03:b0:fc:06:4a:20:56:64:df:dc:79:b7:c7:
         d4:98:55:2f:4f:3a:79:52:9b:3c:cf:65:b3:b6:6b:19:f8:1c:
         82:53:d1:9a:28:4d:3b:45:af:a6:27:80:fb:04:27:d2:b1:eb:
         36:28:1f:c9:ac:6d:df:9a:9b:38:36:ae:ba:26:fc:95:d0:62:
         45:1f:e3:10:ca:90:30:45:32:a0:c4:0c:f9:24:3b:e2:ee:2f:
         e1:06:c9:af:21:83:91:50:5a:e0:c8:81:f3:87:cb:c3:c9:26:
         ff:85:b2:d0:71:95:16:1d:b2:16:db:3b:04:34:35:fb:45:cf:
         3e:72:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:25 2025 by rpki-client