Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File:                     2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier:          OIY8jG9O5TW4SwGrxmu53p20ZANd8RY6M+x4mMOeNhk=
Subject key identifier:   E5:B5:CF:F2:80:4F:72:0C:4D:C5:9D:A2:1C:9D:2F:C3:3C:2B:FA:9C
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer:       /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial:       0198733CFE8D9642E97DDBD6B86C3F5116F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number:          0318
Signing time:             Mon 04 Aug 2025 04:00:33 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:33 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:33 +0000
Files and hashes:         1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: +9cRNjkodwLoW3wxCIljXYUX7IH7Cq8VnB8Ro6cmeAY=)
                          2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=)
                          3: _b4C80puZ4QQZiCjVn1A8db2DMM.roa (hash: BTn925eDDhMQbieFlWe3FviXvz8DAA+vgg6fsWjWAFs=)
                          4: t794Rq3oD5hjUa_fm7_FJ1kTjgY.roa (hash: e8v8ak73SzlgLcU/OgDyl114eL/kRo4XPjTTeE0Y/3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3c:fe:8d:96:42:e9:7d:db:d6:b8:6c:3f:51:16:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
        Validity
            Not Before: Aug  4 04:00:33 2025 GMT
            Not After : Aug  5 04:00:33 2025 GMT
        Subject: CN=e5b5cff2804f720c4dc59da21c9d2fc33c2bfa9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:44:17:3f:3c:96:90:29:4d:e6:17:ae:7c:
                    3d:0a:8f:61:c6:ae:f4:56:5a:70:e2:06:ec:4e:cd:
                    f2:27:07:d6:44:85:65:2d:10:a1:96:d4:36:e4:66:
                    d0:fa:d4:5c:ec:49:2a:be:c6:e5:8c:d3:4c:52:b0:
                    e4:be:9f:21:3a:f8:7a:71:c1:3d:73:9c:9c:7f:a1:
                    72:bb:ac:ef:84:6a:01:4d:e6:37:f4:25:36:4d:34:
                    c6:4e:71:2f:99:19:5e:f6:a7:b4:e7:c2:b0:51:ce:
                    3f:ad:9e:79:62:b6:d1:e4:ab:f7:17:f2:3c:d6:70:
                    93:35:a0:ef:58:5e:5b:f5:b4:7e:20:a3:d9:1b:ed:
                    5e:bb:12:9f:51:09:16:3a:c7:96:81:28:e4:c0:46:
                    51:e4:77:6c:97:57:6b:2d:24:b4:5b:a8:b7:4e:65:
                    b0:15:0e:85:ea:83:12:a4:74:1c:f7:1c:c5:f1:0d:
                    94:7b:e6:4c:17:79:15:30:f7:25:59:b8:73:6e:9d:
                    50:be:3b:4e:f0:63:e3:e4:9e:6a:96:93:0f:a4:a1:
                    e3:21:08:36:16:f2:fc:1b:6f:88:7d:61:c2:ae:26:
                    98:a4:4b:a0:f3:ab:db:01:e8:14:25:f3:d5:2b:76:
                    13:1b:0c:ed:5e:46:b8:53:bb:05:2e:25:65:e9:40:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B5:CF:F2:80:4F:72:0C:4D:C5:9D:A2:1C:9D:2F:C3:3C:2B:FA:9C
            X509v3 Authority Key Identifier:
                keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ca:eb:08:9a:21:9b:85:00:a9:ee:01:fb:be:aa:f9:50:eb:
         f5:db:d5:c4:b0:7e:1f:95:40:1b:30:6a:1e:8f:15:c5:98:d3:
         f6:2c:29:ca:0d:49:31:cf:b9:d0:8e:66:40:04:4e:df:fa:f8:
         a7:6f:02:d1:c6:18:02:c4:fe:9b:3b:dc:e8:17:91:4e:cb:78:
         7d:8a:91:80:17:93:67:78:cd:b4:a4:f7:ef:ea:96:02:23:a7:
         3b:13:59:c6:7f:93:a5:29:30:04:cf:af:62:ad:ec:43:ee:d6:
         b6:c7:a1:19:20:14:24:09:39:e6:fd:e1:2f:33:55:33:03:5e:
         44:1f:f9:6b:22:51:4e:39:20:32:0b:98:7e:d1:cc:bf:43:26:
         75:c6:d4:88:e0:63:85:80:f2:57:fb:e6:de:24:a2:dd:1a:ff:
         d6:1b:9a:10:49:b0:ea:a3:df:ac:9d:3d:0d:c5:6e:1c:de:db:
         95:91:16:a7:07:7e:c9:0d:39:5b:02:98:ff:e3:4d:9a:c1:a5:
         f6:6a:bd:d0:41:b1:8f:18:ae:2e:17:69:78:50:3b:ea:30:66:
         9f:b0:5a:9b:0c:ee:14:e6:74:19:37:5d:44:d4:3c:ec:90:87:
         15:d5:00:1d:49:78:62:56:81:82:6d:ad:5c:65:2c:c3:da:1f:
         69:53:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:34 2025 by rpki-client