Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File:                     MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier:          u1CEIUzl2kfnTYB4fLyqKiXr7SEgM54UScMAbQZuqf4=
Subject key identifier:   D3:A9:F3:20:3E:4D:5A:0B:92:F2:E0:7E:7D:E9:83:B3:22:17:94:D5
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer:       /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial:       019878D1618E6AD88490B0D5462327FAAC42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number:          0BA3
Signing time:             Tue 05 Aug 2025 06:00:44 +0000
Manifest this update:     Tue 05 Aug 2025 06:00:44 +0000
Manifest next update:     Wed 06 Aug 2025 06:00:44 +0000
Files and hashes:         1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=)
                          2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: 0pg4a4uriwCJiqkftJglxFjhhMzzBo7A9bDQxkSTiGw=)
                          3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:78:d1:61:8e:6a:d8:84:90:b0:d5:46:23:27:fa:ac:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
        Validity
            Not Before: Aug  5 06:00:44 2025 GMT
            Not After : Aug  6 06:00:44 2025 GMT
        Subject: CN=d3a9f3203e4d5a0b92f2e07e7de983b3221794d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:73:8c:f3:93:92:aa:81:33:c9:44:89:ff:
                    d7:db:91:0b:bb:19:fc:98:9d:c7:a2:cf:de:10:fb:
                    43:cc:d8:b8:37:a9:8d:0f:37:69:95:50:76:43:74:
                    6a:75:7a:61:62:b7:b7:35:d8:a4:cf:3f:78:0b:21:
                    31:59:00:6c:af:0f:b0:ce:3a:51:4d:29:d3:4c:63:
                    da:a4:40:04:4c:bd:17:44:f1:cd:fc:eb:10:cd:96:
                    0f:32:14:29:1c:99:cc:8e:60:22:bf:71:63:5e:37:
                    d2:47:ce:c3:55:ee:07:16:19:36:d4:63:c7:0e:3e:
                    d2:52:e5:24:d2:3e:61:94:6a:a1:0c:09:d9:72:a6:
                    f0:f1:91:bc:e5:d7:55:f4:ef:43:9a:a3:5d:b1:f3:
                    60:50:bd:dd:7e:ee:aa:46:83:85:b7:85:eb:46:19:
                    d1:34:4c:d0:6e:24:3d:9f:10:ec:da:5d:b5:3b:f9:
                    1a:d6:fd:29:b1:31:e4:98:83:7c:c1:77:4e:2b:ac:
                    5c:07:33:35:a4:44:8f:e9:bb:03:a0:1e:2e:9f:59:
                    56:23:d4:8b:7f:60:45:6c:82:c9:d4:21:77:0e:02:
                    af:18:04:c6:ba:25:41:cf:c9:d0:a1:ac:f9:1c:e8:
                    2f:48:02:61:e7:ca:6c:92:5d:75:73:8d:1f:30:a7:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A9:F3:20:3E:4D:5A:0B:92:F2:E0:7E:7D:E9:83:B3:22:17:94:D5
            X509v3 Authority Key Identifier:
                keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:16:8b:20:ea:10:31:2d:ee:f1:a9:f6:79:e1:c8:19:c0:23:
         4e:4f:8a:44:a5:6c:b7:e5:dc:6a:4e:f8:dc:68:dc:a3:56:4e:
         5a:9a:53:46:50:28:6d:11:e8:a7:fc:86:44:c5:b3:ce:81:a2:
         89:df:cd:f0:d6:93:97:ec:46:7d:0d:9a:39:ef:32:d5:ed:40:
         14:da:51:46:7d:63:f3:99:fe:6b:c3:5e:6d:1f:e1:b5:f1:b0:
         7d:34:96:06:cc:10:e2:76:37:bd:68:ec:9f:bb:b0:5a:c8:e4:
         58:fe:7c:44:83:6f:4c:cb:ee:4c:25:43:b6:01:35:85:55:ae:
         7e:dc:15:31:80:f7:23:61:01:ee:17:45:47:b6:48:75:70:5a:
         56:4c:1d:f9:ed:39:4e:71:00:be:9b:fa:8e:aa:8d:4b:e8:2d:
         c8:81:c5:8d:fc:e7:ea:c7:b1:24:9f:fb:23:45:e0:4b:18:f8:
         81:e3:d9:0b:95:8b:3b:f6:5d:26:75:3d:77:70:4f:6d:ea:dc:
         41:3f:75:bf:1d:0b:d3:d4:8c:d3:4e:7e:1e:b1:25:9d:13:da:
         5a:dc:9c:e0:d8:42:f0:ed:03:38:57:43:00:fa:78:5f:f5:01:
         ae:30:0d:6b:26:b1:04:88:95:34:b9:1c:32:c0:91:27:97:f7:
         2a:94:a9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:17:30 2025 by rpki-client