Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
File:                     sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json)
Hash identifier:          djpeTA/6ldf00I40+a1ORvVi8EDfcIdERgdwX8sC7fQ=
Subject key identifier:   7F:D0:AB:1C:55:C0:DA:AF:D1:9F:6C:45:13:AB:EE:2B:DB:F2:EC:33
Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
Certificate issuer:       /CN=b04d175653fbbde8d989d27e3827bc011e020a01
Certificate serial:       0198936D4C841C4CBC3AF47FEA90EFF9F377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
Manifest number:          06EB
Signing time:             Sun 10 Aug 2025 10:01:10 +0000
Manifest this update:     Sun 10 Aug 2025 10:01:10 +0000
Manifest next update:     Mon 11 Aug 2025 10:01:10 +0000
Files and hashes:         1: ALNKyGQyY09MK9vl3O2X07J6-JA.roa (hash: H9wbzE6PP25p3vlBAxK5eVjK/F1/4ACUWAsYKWxNkUQ=)
                          2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: FbRT60mRBYnaQpmqKAnCY2udQP4DgyXbwusGkB9Sw1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:6d:4c:84:1c:4c:bc:3a:f4:7f:ea:90:ef:f9:f3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01
        Validity
            Not Before: Aug 10 10:01:10 2025 GMT
            Not After : Aug 11 10:01:10 2025 GMT
        Subject: CN=7fd0ab1c55c0daafd19f6c4513abee2bdbf2ec33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ab:4f:b4:f6:1b:e1:0f:dc:17:61:16:20:e3:
                    55:fa:ac:40:3f:02:4c:ff:f6:2f:5e:66:33:06:99:
                    e8:87:38:a6:cd:f4:ba:3a:ea:df:cd:11:f4:c2:ca:
                    03:36:c6:66:f5:cd:b3:13:7a:4a:1f:61:46:b9:78:
                    45:b1:56:fe:6f:e9:32:dc:0d:c7:5d:da:de:67:21:
                    ad:d1:8d:d2:47:d3:77:f4:a6:53:19:8a:99:1e:f8:
                    46:49:01:0b:c2:6d:18:29:5a:2f:5e:5f:a0:a8:ca:
                    7d:9f:d7:9a:97:2e:13:fe:c2:4e:50:35:af:c9:28:
                    76:3c:87:18:f5:27:47:b2:41:54:7d:20:8a:8b:4c:
                    ff:6f:d7:71:aa:0b:6e:92:31:b7:c8:18:c5:e6:d1:
                    13:f6:fa:55:66:e6:01:73:01:c9:04:db:d2:fe:ce:
                    7d:63:e7:54:95:1e:3b:06:df:ad:7b:7f:63:35:71:
                    5f:0e:60:92:ed:1c:f3:f5:a2:5c:a9:69:26:c1:aa:
                    0e:af:33:84:e9:3d:eb:e7:51:55:e5:74:9e:aa:e7:
                    8f:79:ec:8c:d4:5d:3e:66:cf:ec:5f:7f:d8:eb:bc:
                    3d:f8:ff:16:9c:31:5b:a0:40:9d:57:96:c9:07:8d:
                    fa:7d:58:f2:1e:30:d6:67:7e:41:35:5c:9c:80:9f:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D0:AB:1C:55:C0:DA:AF:D1:9F:6C:45:13:AB:EE:2B:DB:F2:EC:33
            X509v3 Authority Key Identifier:
                keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:e6:fa:a8:12:e9:95:6e:a8:1d:c6:cb:ac:cf:f9:fb:49:
         ce:70:9a:b2:48:da:35:56:de:4b:fa:b0:d1:1d:d1:44:15:85:
         e4:ad:00:11:56:28:a0:b1:15:c6:21:c7:47:09:5b:f1:35:06:
         fa:f8:d4:7b:ae:0c:cd:58:7a:9a:f3:6d:09:72:fc:32:b7:6e:
         2b:bd:8c:6b:b9:9e:20:b6:39:37:67:71:ec:44:9c:a9:21:22:
         7e:60:bf:b8:18:b9:6b:be:4f:a6:95:1a:5a:be:7f:55:8c:d7:
         ab:f0:f9:ee:6e:80:15:33:df:e9:70:5d:11:91:09:2d:4f:50:
         6e:85:d2:6d:a5:13:db:d3:1c:e0:c5:7b:46:de:e8:86:00:75:
         14:e0:b6:89:f9:37:5d:82:bf:89:40:b0:a0:2b:ac:1c:35:21:
         b3:73:24:04:ed:b6:fa:37:e2:f7:30:af:09:eb:40:d1:a6:21:
         15:5e:b4:1f:41:2f:0d:a1:d0:11:f2:2f:e3:99:ec:69:fd:55:
         16:68:40:e2:db:01:21:97:96:1e:05:f5:65:4b:0c:3a:c1:4e:
         b8:c1:1a:0a:9c:f7:e0:ee:f8:af:45:75:d2:8f:96:80:4c:35:
         ed:64:c9:7d:c3:50:d9:da:d4:17:07:b3:a1:af:9c:8b:f9:b5:
         0b:38:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:59 2025 by rpki-client