Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
File:                     nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json)
Hash identifier:          vqzeDZc0G+3ZmIRexElu5H0j7eq5D9zbZFThiR4as2Y=
Subject key identifier:   C2:2D:47:50:7A:A9:8F:D3:86:4E:BD:DA:D7:BD:94:0E:09:51:EF:BE
Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B
Certificate issuer:       /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
Certificate serial:       0198801DDC99FB4C7BD1FBF5D022115D1888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
Manifest number:          12DE
Signing time:             Wed 06 Aug 2025 16:01:37 +0000
Manifest this update:     Wed 06 Aug 2025 16:01:37 +0000
Manifest next update:     Thu 07 Aug 2025 16:01:37 +0000
Files and hashes:         1: H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa (hash: vyyHUtBQsEXAg98AdmKq411tDHnSJnqHMROP1JZFAyQ=)
                          2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: mjWQky7js9glClQNqC7r0OdKKl2yUte6rjkjL1wDOb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:1d:dc:99:fb:4c:7b:d1:fb:f5:d0:22:11:5d:18:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b
        Validity
            Not Before: Aug  6 16:01:37 2025 GMT
            Not After : Aug  7 16:01:37 2025 GMT
        Subject: CN=c22d47507aa98fd3864ebddad7bd940e0951efbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:94:07:3e:77:cd:c2:3d:3b:9f:62:2d:9e:6b:
                    ce:37:f8:8e:f9:ec:5e:40:fe:93:d5:15:90:0a:c8:
                    fa:83:7f:74:f6:45:f3:1d:91:3b:d0:00:69:32:88:
                    c9:66:26:da:f5:11:91:9f:ef:e3:38:c5:c9:8b:30:
                    d5:d9:4b:db:74:7d:84:3b:b9:ec:ff:10:56:b0:c6:
                    3b:dc:8c:8f:e1:5f:1c:65:d5:b5:68:f3:28:7e:be:
                    35:05:bb:7e:ec:8c:e5:a2:c8:7e:c9:3f:17:9b:5b:
                    28:59:b2:1c:b8:19:63:d8:d7:d9:52:06:d3:e3:6e:
                    7c:33:da:72:7b:29:07:2f:64:be:28:b6:6a:13:cb:
                    bc:15:fc:49:a4:07:d6:2c:56:63:c4:af:05:dd:04:
                    57:7c:4f:e3:58:f1:ea:ed:65:a0:2a:d1:79:99:d6:
                    83:73:5a:f3:5c:be:9b:41:e8:2c:ae:85:74:e5:4d:
                    08:32:57:85:c9:53:e6:05:00:04:8b:4f:05:18:e3:
                    93:d7:df:9e:4e:ee:48:0a:6e:f3:a5:85:0f:ae:de:
                    35:f1:d1:67:41:b9:9e:13:17:e1:66:0b:23:cf:bf:
                    64:80:4c:02:40:d7:4a:65:4c:98:ba:e6:25:22:f7:
                    44:d3:de:51:2a:b7:41:fc:c4:46:3e:70:17:61:0c:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2D:47:50:7A:A9:8F:D3:86:4E:BD:DA:D7:BD:94:0E:09:51:EF:BE
            X509v3 Authority Key Identifier:
                keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c0:ea:ad:16:18:e5:51:30:78:1a:a1:75:0d:c1:b2:13:a2:
         9e:bc:89:e2:47:d1:38:f0:c0:25:3b:66:35:25:c4:50:86:6d:
         ea:f8:7f:25:b2:d9:66:a6:35:1b:d2:0e:52:40:15:32:d0:e2:
         72:f7:c9:60:ef:1e:4f:f7:1b:06:bb:25:31:e9:f7:99:0b:32:
         a9:b0:a8:e6:ad:49:8b:75:ad:c0:08:bd:7c:fa:1b:a5:22:20:
         69:0f:bb:be:ba:be:96:49:7c:ba:55:c9:26:fa:92:69:49:4f:
         ca:5d:4f:bb:64:06:2e:16:77:ce:21:ec:cb:b2:9a:8b:9a:02:
         81:a7:e9:a3:f4:a2:3a:3f:b1:7b:78:06:cb:d4:1d:eb:60:fd:
         98:e5:84:db:5f:24:2d:a8:47:c6:69:29:2e:da:2b:9d:36:17:
         ac:38:59:77:51:01:e8:ea:6e:ee:a7:02:cd:7b:5e:75:95:98:
         80:d2:ce:de:ec:20:14:b3:9d:3e:64:ec:50:07:48:42:77:4f:
         a7:5d:0c:10:55:56:6f:85:f8:f4:57:70:81:9a:d2:12:ad:c7:
         6c:3b:03:1a:ec:67:34:52:c4:96:10:09:90:14:58:20:3b:af:
         77:50:4a:c0:da:93:f6:19:05:08:5d:9d:e9:64:00:56:db:72:
         53:55:41:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:16:30 2025 by rpki-client