Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File:                     DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier:          bo+gTcvFPYv7tKqO0hcAnX3Pvt+9b44IV05bMcfnL14=
Subject key identifier:   DC:43:83:44:82:BE:A7:AF:EB:EE:E9:EB:92:01:DA:42:7E:B5:02:E0
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer:       /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial:       0198801D97ABCCB67EC9E0E41D22A89205A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number:          0BA8
Signing time:             Wed 06 Aug 2025 16:01:19 +0000
Manifest this update:     Wed 06 Aug 2025 16:01:19 +0000
Manifest next update:     Thu 07 Aug 2025 16:01:19 +0000
Files and hashes:         1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: ItqBEUBygAH44oBMAApVpgHjeUnlpI6nNsYznTBSU38=)
                          2: IMYt28KGsc1J7qdCJ8FZoivbBms.roa (hash: Lt2Qrrojs7l5TEl9OlYCV0+zE4iekqC1xALJxPDqCnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:1d:97:ab:cc:b6:7e:c9:e0:e4:1d:22:a8:92:05:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
        Validity
            Not Before: Aug  6 16:01:19 2025 GMT
            Not After : Aug  7 16:01:19 2025 GMT
        Subject: CN=dc43834482bea7afebeee9eb9201da427eb502e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3e:ee:44:52:94:5a:52:7d:21:d4:45:ab:1e:
                    0e:bd:77:1b:0e:8a:94:37:34:06:8d:93:94:34:7f:
                    c7:a3:e6:f5:5b:59:60:67:98:62:85:6d:78:85:a8:
                    47:c2:4e:89:9f:7d:13:df:31:e9:4a:49:eb:16:85:
                    00:2d:7c:c7:c8:54:c1:06:8f:fd:2d:3e:f2:36:6e:
                    8c:77:8f:1f:88:cb:2d:e8:3d:04:bf:c7:d8:07:e2:
                    d2:c8:e2:9b:66:4a:5b:e8:b8:81:94:d7:5a:0f:d6:
                    b1:a2:1c:25:1d:4e:25:17:89:d0:ab:06:1b:ef:9e:
                    3d:ac:cd:c1:ed:7f:06:9b:99:79:c0:70:1e:ec:6d:
                    66:b1:64:80:96:d8:c1:17:1c:ee:71:f4:bb:e0:f1:
                    77:58:cd:7c:17:ea:e4:7a:92:33:36:85:ee:78:27:
                    1f:eb:a6:2c:c7:3e:b9:c7:7e:69:ee:83:e6:c4:15:
                    71:25:30:d7:e7:a8:92:5c:0a:59:26:ad:64:44:c7:
                    57:70:08:35:f3:08:05:e5:40:ea:f0:2f:35:a1:f4:
                    70:0e:9a:8a:1b:56:02:58:dd:21:e6:e7:ec:23:60:
                    72:33:fc:2b:6a:73:24:0d:91:b6:f2:78:60:4b:6c:
                    92:fe:c9:2b:b7:96:87:2e:13:cd:73:58:86:4c:47:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:43:83:44:82:BE:A7:AF:EB:EE:E9:EB:92:01:DA:42:7E:B5:02:E0
            X509v3 Authority Key Identifier:
                keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:18:70:94:09:5f:47:1d:3d:84:9b:1c:98:26:8e:cc:f1:8e:
         69:d7:45:08:5b:9d:b9:12:df:e8:e7:63:5f:06:07:ac:9b:bf:
         7b:84:73:0b:05:36:e9:b1:09:7f:8b:3a:01:96:5c:2a:ed:83:
         2b:1d:22:f7:46:59:fa:11:84:cf:75:e8:66:0b:15:66:7b:b3:
         1e:49:36:10:01:e3:54:69:71:1a:a6:9e:0a:b7:1f:a8:9a:0c:
         08:16:f3:a6:2b:7c:4e:c1:fd:59:a1:c7:60:bd:fc:17:fb:61:
         99:b2:77:d7:c7:e2:8a:d8:7d:35:b2:f1:df:bc:4e:00:00:a9:
         7e:d5:4e:e3:64:78:27:ae:74:57:c4:66:e2:bd:29:40:c7:cf:
         8a:33:f9:56:ed:fb:2c:90:08:6f:1c:8d:5d:68:3b:e7:4b:bb:
         11:27:2c:c4:32:10:aa:16:6e:dc:24:87:17:f3:4e:b1:90:f9:
         f2:a0:86:45:93:1a:cd:6e:65:fd:18:5f:77:61:19:53:ce:17:
         b7:10:e3:55:c0:0b:ab:10:36:9e:29:ec:aa:b0:67:5d:08:99:
         79:80:65:6c:8b:10:ee:f1:9b:9b:56:28:d6:6e:1a:ca:8d:61:
         b7:d4:70:1d:e6:e6:ec:6c:84:15:27:90:34:4e:d7:3c:21:05:
         a3:2c:b8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:07:13 2025 by rpki-client