Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File:                     0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier:          sXczIHZknvF/R1a0gJljGqx3H5654ue1Xumc1tyaV5E=
Subject key identifier:   A2:04:D5:5F:7F:CF:17:42:9B:B8:39:6D:E4:5D:07:E2:76:35:01:C4
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer:       /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial:       01988DA1C9904C2D852D31542F9CBB812936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number:          135B
Signing time:             Sat 09 Aug 2025 07:00:46 +0000
Manifest this update:     Sat 09 Aug 2025 07:00:46 +0000
Manifest next update:     Sun 10 Aug 2025 07:00:46 +0000
Files and hashes:         1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: DAGq+maXv5jxmFDSO1umVqbLW/IIp34lLyfC2MHmG/A=)
                          2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
                          3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
                          4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:a1:c9:90:4c:2d:85:2d:31:54:2f:9c:bb:81:29:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
        Validity
            Not Before: Aug  9 07:00:46 2025 GMT
            Not After : Aug 10 07:00:46 2025 GMT
        Subject: CN=a204d55f7fcf17429bb8396de45d07e2763501c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:78:1e:30:97:a6:e3:c6:61:ac:4c:d5:a6:c0:
                    41:88:79:6e:4d:9f:2f:64:e4:ab:be:83:62:05:50:
                    89:35:18:70:89:5d:7e:cb:98:ad:f5:21:80:75:6c:
                    4b:0b:9b:0b:a9:56:52:cb:de:a2:b0:ab:28:71:a2:
                    f1:59:65:f7:5d:3a:1a:53:d8:7c:ab:ca:38:36:31:
                    12:b7:ae:df:95:80:f9:78:0a:a3:86:3b:4d:c6:67:
                    d4:4a:86:1e:7b:2f:bd:bb:ea:65:3d:d2:d8:b4:dd:
                    27:23:d4:e8:4c:72:4c:bd:6a:a4:86:e7:0e:f5:99:
                    b3:1e:6a:c3:b5:4d:40:c2:94:9b:65:60:03:ef:f3:
                    07:d0:75:55:18:6b:b9:42:ff:2c:ff:a6:b3:ff:af:
                    a7:5f:82:38:ac:83:03:0f:20:f1:40:b8:6d:9a:b8:
                    69:6c:55:6b:13:a5:79:2e:18:73:c0:0d:2e:32:7e:
                    8e:51:ae:cd:ac:e8:8c:0c:ae:38:4d:e6:e1:f1:8c:
                    35:ff:7f:9c:92:bd:29:5e:7c:c1:3b:97:d7:71:49:
                    03:4a:b0:b5:88:8b:33:25:62:26:42:f1:63:63:98:
                    63:62:cc:1e:4b:f8:20:cb:12:75:15:03:38:d0:a1:
                    90:e5:2b:fa:8a:ff:79:39:5b:03:de:82:08:22:e1:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:D5:5F:7F:CF:17:42:9B:B8:39:6D:E4:5D:07:E2:76:35:01:C4
            X509v3 Authority Key Identifier:
                keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:dc:c8:f6:12:27:9c:ed:98:1c:b1:af:09:13:d8:09:6e:82:
         bd:25:8d:ea:7d:f9:26:f1:fc:26:2e:01:76:11:e8:1b:75:6e:
         84:c8:97:91:3c:34:09:fa:af:98:e9:35:c9:83:44:5e:5f:16:
         fe:5b:45:0c:89:88:33:13:a6:3f:25:94:e5:54:73:7e:97:bb:
         01:16:d3:4c:8b:fa:2a:c3:85:d1:18:dd:94:69:a3:7f:b3:51:
         02:1b:4c:51:f8:f5:b0:7f:82:b9:45:97:65:f7:b1:97:67:b9:
         b1:11:ca:1f:dd:e8:58:5d:53:8b:ce:f5:2b:58:b6:2c:37:c4:
         9e:29:29:06:ba:72:b7:14:f8:ff:a3:d9:1c:7d:ac:2d:d2:62:
         b6:91:aa:4f:e3:42:ff:bb:79:51:25:7f:1d:1c:48:dc:95:d0:
         c1:38:31:c7:0f:eb:df:f0:b7:77:6b:2a:d9:98:3b:6b:d8:a0:
         98:f6:ba:bd:c3:89:37:9d:62:1e:01:9b:43:56:4c:75:f5:fd:
         61:2e:c9:09:80:74:d4:b5:2a:8e:db:ac:1d:80:68:0b:93:8b:
         8c:50:bc:b8:ff:3b:3f:7c:9e:c4:b3:5a:7d:38:01:d8:d0:10:
         ec:5b:39:38:60:aa:84:f4:b2:9f:b9:8b:0f:00:f8:d2:4f:34:
         cf:3b:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:35 2025 by rpki-client