Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
File:                     cCFOfqyx0k4hHi8l_uStdX5sll0.mft (raw, json)
Hash identifier:          XUf0wxuwPZNv2+KgI9FYyVsXVjtBjkZhXCOdg4akiKo=
Subject key identifier:   76:75:D8:67:E8:84:61:31:11:7F:33:63:69:24:E5:60:A3:C9:1E:3D
Authority key identifier: 70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D
Certificate issuer:       /CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
Certificate serial:       019889C4B11A83EEEFE8339AF06A70CE5268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
Manifest number:          05CA
Signing time:             Fri 08 Aug 2025 13:00:25 +0000
Manifest this update:     Fri 08 Aug 2025 13:00:25 +0000
Manifest next update:     Sat 09 Aug 2025 13:00:25 +0000
Files and hashes:         1: Ur1p6KL9NTfFRBrJ7C7-zJCCRXo.roa (hash: lsHocd823a47v2/eGKZz1waiHC7kKATLJJz6RHG9Ic0=)
                          2: cCFOfqyx0k4hHi8l_uStdX5sll0.crl (hash: 9l4JV/ZG4Ml5j/jDau5xTjoDxFDr1P3qGsaTc6JTFg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:c4:b1:1a:83:ee:ef:e8:33:9a:f0:6a:70:ce:52:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
        Validity
            Not Before: Aug  8 13:00:25 2025 GMT
            Not After : Aug  9 13:00:25 2025 GMT
        Subject: CN=7675d867e8846131117f33636924e560a3c91e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f1:b7:cf:71:09:28:38:0a:a7:b3:8f:e7:a4:
                    b6:24:6c:9d:a7:b5:13:f5:c3:cb:ef:67:0b:4c:f6:
                    85:92:6a:be:3f:54:a8:d7:22:9c:66:9b:70:50:88:
                    51:f0:b9:1d:33:b8:fc:85:c5:20:bb:1b:c0:15:96:
                    f5:03:00:d6:66:48:7b:b4:a2:34:f6:72:b3:df:00:
                    d6:c9:80:17:e5:e0:f0:4b:90:65:20:c4:4e:73:3e:
                    b7:99:e8:f7:4c:81:76:ed:62:96:d0:47:78:57:bb:
                    9d:b1:a8:90:43:99:69:03:60:92:3d:3c:6f:a3:c8:
                    13:da:71:e1:26:1e:7c:c0:64:76:cd:81:82:23:a1:
                    22:65:cd:38:bf:d5:9f:80:a9:f0:6f:73:6a:f5:32:
                    35:18:76:86:75:77:8e:b5:96:17:c5:48:0f:87:75:
                    3f:ad:60:1f:78:e7:33:58:f7:69:3a:76:b7:8a:c7:
                    be:a9:93:60:b4:7c:fd:5c:5c:c1:fa:c4:a0:4e:64:
                    6a:15:ed:21:82:a4:d1:72:a3:6c:bf:d9:02:99:e7:
                    96:e8:82:89:01:5f:d3:69:1b:64:ed:9b:4f:f9:6b:
                    59:8f:55:53:e3:cf:1d:f9:52:65:1f:b1:75:35:09:
                    60:6d:17:14:03:1f:80:61:f0:a4:f6:0f:1b:de:b4:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:75:D8:67:E8:84:61:31:11:7F:33:63:69:24:E5:60:A3:C9:1E:3D
            X509v3 Authority Key Identifier:
                keyid:70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:9d:2f:8f:9f:b3:f0:ff:4f:9e:e7:16:a7:2c:6b:21:ed:33:
         e6:bb:5e:e3:07:e9:58:e0:5c:5a:5f:51:f3:e6:8d:97:e1:75:
         9a:fc:fd:9f:ab:42:55:a7:13:97:0a:c8:0b:07:9d:83:6e:44:
         5f:a5:9a:8f:1e:53:3b:1f:71:c7:c9:75:d5:d5:64:a5:30:6f:
         b1:b4:90:8e:a4:9f:39:f4:09:7f:c9:60:b3:5e:2a:aa:3d:dc:
         88:d6:e1:b9:c9:2f:aa:c0:ed:45:db:f4:f6:15:9a:72:c4:71:
         46:6f:2c:d1:33:6e:99:2f:04:b7:db:b5:5d:6e:4e:08:63:4f:
         c5:c6:61:7d:80:b1:48:2a:79:59:eb:d5:a9:d3:80:16:63:d5:
         d5:34:90:e6:0e:b0:0d:52:bf:73:13:d8:bb:d9:3c:41:9d:d6:
         ba:11:68:23:60:b5:77:64:7d:93:0a:81:ff:1a:1e:1f:ec:6d:
         73:55:07:b9:5a:4f:eb:01:a0:03:2e:a8:61:f7:56:ff:3c:d9:
         d7:8d:89:4d:ad:76:7e:cd:ba:e9:b8:d9:bd:6b:cd:a2:3f:88:
         dd:70:2f:d8:5a:4a:e8:5e:1d:24:d6:d6:32:84:cc:8d:a7:7f:
         5c:8a:57:44:47:9a:c8:1a:9b:55:d0:bd:8d:e9:a2:15:5e:5e:
         cd:73:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:17 2025 by rpki-client