Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File:                     DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier:          B8M6AGHMZjbm8sQowBh5Volj3W0qr8ASz0HPAiqPRG8=
Subject key identifier:   64:D6:DA:E9:BB:6C:34:4D:17:2C:A1:41:23:76:46:89:C5:81:A9:C9
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer:       /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial:       019887323FF38C2322B202A3731DCC06C040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number:          0B05
Signing time:             Fri 08 Aug 2025 01:01:13 +0000
Manifest this update:     Fri 08 Aug 2025 01:01:13 +0000
Manifest next update:     Sat 09 Aug 2025 01:01:13 +0000
Files and hashes:         1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: 7gP21bFnTF0oRBIKrMoq7TUBoRgIDfyX2JYCOAjl1gA=)
                          2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:32:3f:f3:8c:23:22:b2:02:a3:73:1d:cc:06:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
        Validity
            Not Before: Aug  8 01:01:13 2025 GMT
            Not After : Aug  9 01:01:13 2025 GMT
        Subject: CN=64d6dae9bb6c344d172ca14123764689c581a9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cb:6e:b7:c0:49:dd:50:37:2a:9e:bb:7a:3d:
                    6f:30:aa:9a:86:44:12:88:bd:ab:f9:43:7d:78:06:
                    18:b1:4e:d8:2f:ef:a4:39:68:0c:48:af:44:64:09:
                    8c:2e:0f:40:53:ec:ef:ca:ad:83:a0:d6:5f:8f:6d:
                    99:7f:10:69:4d:5d:a0:b5:cc:65:3e:8a:a7:f8:96:
                    9e:bc:b3:4d:94:a8:60:17:31:70:7e:5d:77:f2:26:
                    13:5c:8c:5f:0f:f4:13:24:91:ae:f5:22:d9:ce:db:
                    58:49:ae:09:8a:79:68:b1:8c:2a:58:61:c3:a6:1f:
                    c0:9d:1e:fe:58:cb:d5:84:98:b1:d3:05:62:46:81:
                    8d:03:d2:9e:98:3a:e7:14:1e:6a:d7:8c:ba:a9:4a:
                    a0:7c:af:0b:be:27:55:28:a9:b3:e2:1d:90:55:c6:
                    25:2a:34:a2:e4:b9:f8:8e:b9:eb:01:51:ca:95:ca:
                    f5:dd:e0:cd:0b:13:5c:1d:1a:af:dd:6e:c2:6a:af:
                    72:bb:b2:cf:d5:97:9b:09:c2:45:3a:32:8e:2b:93:
                    90:a0:cd:5b:75:0f:e5:e8:14:71:e0:93:3f:f6:ad:
                    20:9a:f1:c2:1c:59:45:d6:ef:a5:71:be:59:e8:9c:
                    d5:77:89:3c:2b:02:81:a4:e1:a2:99:65:9e:b3:7e:
                    a9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D6:DA:E9:BB:6C:34:4D:17:2C:A1:41:23:76:46:89:C5:81:A9:C9
            X509v3 Authority Key Identifier:
                keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a2:73:53:17:13:c6:79:66:98:56:0b:fa:4b:83:72:1c:f5:
         89:1c:24:01:fc:60:6d:46:d1:59:78:4b:df:2f:de:47:69:9f:
         70:4a:47:64:3e:07:72:3f:5d:c1:eb:d9:1d:c6:be:3c:ff:b7:
         1c:48:d2:07:3c:f1:bb:5f:ec:ad:ad:ec:10:1e:d2:39:79:a4:
         66:5a:1d:bd:22:4c:fb:b4:6c:5d:87:b0:5d:5b:9f:03:0e:7a:
         d4:f8:2f:15:90:6a:ea:26:ca:96:1f:bf:d1:6b:ed:b0:91:fe:
         fc:a4:a7:e1:a0:fd:36:e8:8e:49:1a:a8:fd:8e:37:6f:1d:33:
         6a:9a:46:83:e3:f1:c2:59:c9:3c:02:08:df:b2:ba:40:70:d7:
         fa:49:57:88:4c:97:e0:68:77:eb:a5:ce:97:80:02:23:0a:92:
         71:80:4c:cf:0a:18:ab:9d:14:56:90:05:75:2f:58:fa:e1:f6:
         66:9a:5f:c9:2a:39:f8:02:bf:e8:c7:b9:4f:99:e6:d9:de:4f:
         22:2b:4a:b5:dc:aa:cd:d6:7a:27:d4:c8:9c:2a:f7:52:b3:cc:
         f1:64:3e:77:4e:9a:aa:56:86:55:bf:2b:10:e0:38:b6:8a:19:
         f0:de:66:c0:f2:f5:08:79:e9:d0:0e:e1:36:b8:28:92:ad:e9:
         24:0c:46:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:13:52 2025 by rpki-client