Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File:                     0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier:          crCZKTJA6/sppat0l4LcovWLVa3etih5PRlUO2xoukQ=
Subject key identifier:   6A:54:1D:F9:3B:BD:3E:0E:0F:9A:80:63:A7:4B:C0:D1:61:E2:CE:35
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer:       /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial:       01988DA1CE1ED2871209E256E99776577996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number:          113A
Signing time:             Sat 09 Aug 2025 07:00:48 +0000
Manifest this update:     Sat 09 Aug 2025 07:00:48 +0000
Manifest next update:     Sun 10 Aug 2025 07:00:48 +0000
Files and hashes:         1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: I7+mR+sS+atpq5d+BNdLu9CoUhiznSBleq+KXvb3Guo=)
                          2: jM6ObOeKnGJ-XMKGH2l4W5ZCd2A.roa (hash: KTQ2TAHXzAzojs4IsYPpcpBSdUKcZYE1gqliIFvrHcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:a1:ce:1e:d2:87:12:09:e2:56:e9:97:76:57:79:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
        Validity
            Not Before: Aug  9 07:00:48 2025 GMT
            Not After : Aug 10 07:00:48 2025 GMT
        Subject: CN=6a541df93bbd3e0e0f9a8063a74bc0d161e2ce35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4a:f1:f4:7f:c9:e3:b6:8f:92:f8:47:d5:21:
                    8a:32:86:8c:a5:b3:a9:36:00:26:91:ec:86:a2:bb:
                    37:c0:a3:88:15:7b:2d:10:45:16:76:59:6a:75:13:
                    87:ae:57:bf:82:5a:8a:30:69:48:07:1d:f0:cb:ec:
                    6f:6c:d7:75:b6:26:ad:71:78:23:a5:68:09:12:7f:
                    8d:21:69:6f:04:a7:38:b0:31:6d:c7:80:05:d5:f1:
                    64:8e:14:7d:50:79:4c:4a:4a:4e:07:f3:39:a5:9a:
                    b8:4a:45:ac:40:60:a8:19:af:96:c6:e3:58:9a:5a:
                    74:ab:d2:97:1e:f9:87:d6:bd:9d:de:16:c2:b7:31:
                    23:8c:4d:10:18:6e:c1:b5:4a:c2:6d:82:d8:5d:c2:
                    52:2f:0c:d0:a0:c4:b5:3c:66:bd:8b:ef:3d:79:df:
                    d6:6c:5a:f1:b8:94:4b:b1:62:c6:2d:64:1f:00:fb:
                    94:62:d3:4b:6a:31:84:35:64:76:40:5d:b5:b2:de:
                    ed:9d:e4:1d:4b:0c:71:40:6e:88:da:d2:4d:ad:18:
                    e9:39:59:c1:dc:f2:46:a3:89:dd:0b:55:82:f8:8d:
                    d8:b7:7c:61:9b:c2:fd:c9:60:8d:d3:53:18:70:c3:
                    e1:83:61:bd:17:56:5d:6c:1e:6e:8c:06:e7:cf:97:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:54:1D:F9:3B:BD:3E:0E:0F:9A:80:63:A7:4B:C0:D1:61:E2:CE:35
            X509v3 Authority Key Identifier:
                keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:3b:74:1b:76:5d:6e:c5:45:6b:61:fa:62:b5:46:26:ac:
         40:de:a3:94:dc:1d:57:4f:26:87:5a:2f:d9:42:b0:e5:5b:2c:
         34:62:c5:92:2c:d4:f5:a5:da:03:d9:c0:b4:62:3a:a2:31:47:
         90:e9:c6:79:71:46:26:f1:0e:3d:67:5f:9d:36:b3:20:be:f9:
         71:3d:83:86:3b:07:13:45:f8:22:b5:25:e3:f4:6d:85:23:36:
         48:4e:82:07:e7:e4:76:cd:9e:2b:45:a1:56:57:97:08:7b:24:
         cf:8c:94:ae:46:2d:71:47:ea:6d:3e:08:fd:fe:5c:ff:bc:f5:
         ab:7b:9b:12:3a:ee:8e:40:56:53:df:5e:25:9d:5e:9e:f7:3d:
         a0:33:bc:7d:d2:98:ae:32:f1:20:56:2b:21:9a:73:a2:85:b8:
         91:90:16:7e:68:61:32:45:61:01:58:bb:41:a0:79:4e:02:fb:
         81:88:85:37:c1:3c:a0:23:29:06:f7:66:51:0b:15:7a:2c:37:
         7b:20:3f:e9:ee:75:83:71:f3:20:d1:42:ca:2e:92:e0:e3:51:
         4a:ac:81:a1:f4:f7:65:ab:ca:e3:35:6d:d3:1b:0f:4b:03:f6:
         6b:8c:17:cd:f3:69:79:33:87:92:51:53:81:50:3d:85:d7:6c:
         fa:8c:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:39 2025 by rpki-client