Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File:                     d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier:          vqZDw6iS7MUogz8lmmk1p59jV40m09am0omDRrK/+yA=
Subject key identifier:   11:18:BD:F6:E5:97:96:08:D1:56:41:0B:83:12:C2:C6:81:04:3C:8D
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer:       /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial:       019872CF2FB7D38949B8D2A65837691B0D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number:          133B
Signing time:             Mon 04 Aug 2025 02:00:37 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:37 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:37 +0000
Files and hashes:         1: BIbyN6MobH1STyCEPdXKcXxO-0I.roa (hash: Os4l0m9oxr0hmnuszsL7ZwnRaiayTTQWv9r3AFurnXg=)
                          2: Bbz0bBQb7OvBUdzdUU2fR0aTHW0.roa (hash: oXnG95uJE4GWCusPMitN/8TOoOTM8j2qb4pX4QMQ5u0=)
                          3: bdDCotOAfO1kv_FK4imM3A-Vth0.roa (hash: SflKXIddgIp/qAd1Zs2morymiezh6i6wy0uu+gUqlSk=)
                          4: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: rLV49xppH52rKhKYi2LhVsj5zeOpWd7nRC5aKuEeG7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:2f:b7:d3:89:49:b8:d2:a6:58:37:69:1b:0d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
        Validity
            Not Before: Aug  4 02:00:37 2025 GMT
            Not After : Aug  5 02:00:37 2025 GMT
        Subject: CN=1118bdf6e5979608d156410b8312c2c681043c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:be:ce:66:21:b7:09:b9:da:86:93:1e:8d:
                    96:9c:b3:6d:53:b0:00:9d:a7:c8:69:6d:d4:2a:d0:
                    7f:6c:74:d1:f1:48:e5:9e:2a:a9:67:90:b9:27:eb:
                    27:2e:fb:58:e9:31:6b:65:c5:84:7a:22:96:55:30:
                    36:de:7f:6d:47:4b:8b:8c:65:1b:48:95:dd:75:9c:
                    c2:7a:fc:29:be:09:63:d1:02:26:13:d9:e4:f1:c9:
                    72:a6:b5:52:82:11:d1:33:fc:98:28:4a:06:ca:80:
                    37:2e:61:db:95:35:eb:6f:5e:55:85:39:bb:d9:2e:
                    fa:7a:a8:2b:76:bb:04:15:51:75:e6:b9:ff:d7:af:
                    60:94:64:f6:4f:42:b3:ae:9d:73:2b:35:62:5b:d4:
                    87:dc:e7:ae:8a:d6:bf:27:ad:34:92:b8:45:8a:81:
                    6c:b3:10:a5:9e:61:c6:e8:f8:3d:4c:8a:78:ab:2f:
                    4a:1b:62:fb:fb:61:af:9d:ee:39:77:f2:78:40:c3:
                    78:2d:b2:63:0c:28:9f:d6:0f:aa:0c:1d:89:20:cb:
                    87:32:a2:6b:7a:7f:d9:65:76:6f:dd:21:7f:64:39:
                    bf:d0:67:d3:ce:d4:d3:73:aa:57:7a:4b:ee:c1:c7:
                    55:8e:90:93:f7:ad:de:d0:2d:e4:01:e5:57:ba:1b:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:18:BD:F6:E5:97:96:08:D1:56:41:0B:83:12:C2:C6:81:04:3C:8D
            X509v3 Authority Key Identifier:
                keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:30:e7:2d:f0:d8:13:b8:14:96:eb:20:04:3a:1b:d6:fd:82:
         c5:d0:e7:f4:f2:a6:76:27:4d:3c:84:65:d2:a3:c6:6d:ea:2a:
         74:9f:e8:6e:31:df:59:c7:e7:6f:2d:16:82:51:25:b5:6d:8d:
         88:7b:1f:70:93:50:57:19:6f:06:ff:a2:db:9a:94:4e:4f:ed:
         0d:1e:a6:a3:42:30:49:87:74:eb:36:25:c4:18:85:b2:b0:b5:
         ce:7a:e5:29:91:9b:6d:ba:9c:e7:fd:d5:ec:92:12:73:d7:37:
         20:56:8a:a8:69:b6:85:ed:f4:37:79:0d:1e:e9:94:a1:30:85:
         16:f6:3e:61:15:80:3d:31:39:e5:98:a2:fe:c2:03:fe:0e:9d:
         09:40:7e:77:3f:b2:f7:12:9d:e2:59:6f:cc:05:cb:b7:24:db:
         4f:9f:6f:27:64:12:6e:23:9e:43:a0:6f:ec:3a:11:be:f4:f5:
         37:fa:36:e8:a3:93:12:9d:9d:cf:ab:c1:57:47:f6:7b:01:7d:
         71:f8:e5:de:26:dc:51:b5:91:7c:0e:b3:3b:3a:b7:31:ea:a8:
         c3:13:69:f8:a4:bf:6b:3a:a7:b6:0a:e4:cb:ee:da:a5:58:43:
         9f:df:1c:b7:7e:29:37:a0:f3:4b:2a:a4:1d:74:40:48:b3:f4:
         c0:9d:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:25 2025 by rpki-client