Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File:                     C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier:          07x8fUbsRvS7OPf9pUDhUuuERQ/bGPXq0hQitqllHU8=
Subject key identifier:   2C:7F:BE:86:41:2A:CF:20:27:A5:86:56:EE:DA:E8:43:3B:AB:CA:F5
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer:       /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial:       019892C82928B945BE6E8E1B7E2C4008F712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number:          0CF6
Signing time:             Sun 10 Aug 2025 07:00:47 +0000
Manifest this update:     Sun 10 Aug 2025 07:00:47 +0000
Manifest next update:     Mon 11 Aug 2025 07:00:47 +0000
Files and hashes:         1: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (hash: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=)
                          2: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: jzZpe9yQgXuD6mJ0fPT607iBCxXzfIgmVSileJNs/V0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c8:29:28:b9:45:be:6e:8e:1b:7e:2c:40:08:f7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
        Validity
            Not Before: Aug 10 07:00:47 2025 GMT
            Not After : Aug 11 07:00:47 2025 GMT
        Subject: CN=2c7fbe86412acf2027a58656eedae8433babcaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:e5:cc:85:80:ec:70:75:e9:0b:5d:b7:dc:
                    50:df:f8:93:9d:0e:6b:6d:af:25:94:cd:33:99:8d:
                    16:c9:37:6d:85:50:d9:b8:9b:9c:0d:89:cc:e4:eb:
                    9f:8d:23:53:f4:98:a3:bb:6b:7e:99:48:31:8e:34:
                    78:b3:66:3d:c6:e7:a9:17:51:6a:7d:f8:80:a6:0a:
                    76:7b:f5:47:bb:89:0c:e6:89:3e:ac:fb:d8:ce:81:
                    b7:ed:fc:ad:53:da:ea:e1:dd:27:61:77:80:eb:cb:
                    76:47:09:a6:e2:85:ce:78:5b:03:ec:cb:8e:4b:7b:
                    3f:c6:87:79:39:69:2f:14:c6:9a:36:da:41:3c:87:
                    77:cd:6b:f0:62:80:75:5c:6f:af:06:c2:71:27:62:
                    1a:a0:fb:60:7d:fc:51:4f:19:ef:7b:bf:6e:c7:df:
                    1a:94:fc:e2:00:c2:34:6b:de:a5:70:78:60:99:ca:
                    66:c0:43:13:2b:e2:b3:99:a0:c1:78:0c:e0:12:0d:
                    5e:41:7c:f5:dd:a4:1b:1b:32:e7:93:f1:fc:a7:f9:
                    84:06:a5:ed:3c:20:40:7c:33:07:e1:f4:47:17:f8:
                    c2:5b:4f:57:07:cc:91:5c:58:ef:7c:06:e3:92:8f:
                    2b:8a:fd:60:c5:61:31:fd:09:fe:06:4f:8d:16:8a:
                    78:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7F:BE:86:41:2A:CF:20:27:A5:86:56:EE:DA:E8:43:3B:AB:CA:F5
            X509v3 Authority Key Identifier:
                keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c4:f6:a3:db:f9:fb:2e:f9:76:0d:32:ee:c6:1a:93:20:c6:
         f8:5f:f1:6d:13:16:de:bb:34:0c:6e:b7:8d:bc:3f:1e:71:65:
         96:d7:16:f7:8b:fa:5a:20:3f:6c:b7:6f:fe:03:24:ca:90:1f:
         93:b2:37:d8:ed:72:fb:0b:54:b9:ac:6e:d7:e0:b1:7c:8f:3d:
         53:1d:e1:aa:eb:88:fa:ce:ca:ab:64:10:2c:25:d9:f4:7a:92:
         ca:b1:7e:13:d7:5b:c7:f0:32:1c:fc:66:10:31:24:e8:83:70:
         77:bd:b0:07:5a:75:40:9c:c0:f5:5f:88:f2:a7:e2:7c:1e:32:
         06:e0:82:83:68:03:76:b6:af:f3:e8:d5:f2:50:6e:88:98:06:
         32:fa:c9:e7:68:b2:63:2f:bf:5c:52:d5:62:a3:5b:a5:3c:fa:
         cf:cd:ac:b6:95:c8:7f:52:53:88:43:40:d0:52:a7:72:a8:5d:
         bb:50:c0:52:50:0b:7a:df:21:bb:19:af:81:43:88:e8:6f:ea:
         2e:f9:c2:ed:7d:02:01:45:8d:11:a7:ad:7c:90:5e:d9:20:8d:
         db:bf:fd:93:79:5a:3c:7a:b4:73:c8:8a:bd:d8:a6:db:21:70:
         2a:32:56:58:a3:70:61:20:3a:e5:4a:3f:45:7b:2a:4f:5a:b4:
         a2:fb:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 14:01:04 2025 by rpki-client