Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File:                     DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier:          adfJV7rJZ9A3UxsNSEIiVrO+uQaiRpDHuHedVxsS3CQ=
Subject key identifier:   01:EE:D0:54:22:61:3C:85:03:3B:33:BD:AD:64:FA:16:12:89:C7:7E
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer:       /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial:       01988356155E082B9A232AD8E8E7592570A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number:          01DB
Signing time:             Thu 07 Aug 2025 07:01:53 +0000
Manifest this update:     Thu 07 Aug 2025 07:01:53 +0000
Manifest next update:     Fri 08 Aug 2025 07:01:53 +0000
Files and hashes:         1: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: otmiVyYqHw7auv0DZZ6BHsspU49zV7KNKYzI9RrhVcI=)
                          2: cZNRC54iklgNWYm4bOxRUrThNWU.roa (hash: 7TUW8rEcRA76OYIr9WRYyb0EVyDB9PyjFL1/RYt7YQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:56:15:5e:08:2b:9a:23:2a:d8:e8:e7:59:25:70:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
        Validity
            Not Before: Aug  7 07:01:53 2025 GMT
            Not After : Aug  8 07:01:53 2025 GMT
        Subject: CN=01eed05422613c85033b33bdad64fa161289c77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e0:f5:0d:a2:89:37:a5:75:ba:b6:2c:b3:bc:
                    b2:66:e5:08:3f:a5:6c:39:d2:d6:a9:06:87:05:14:
                    f4:b3:0b:cd:92:ea:a1:43:58:81:4c:5b:48:89:79:
                    5b:d6:7b:c0:7c:a7:68:6a:9c:96:37:be:ff:d8:61:
                    60:d2:17:7b:25:ba:4f:85:da:71:81:bd:e7:57:f6:
                    91:db:3c:d9:7b:7e:66:ff:ce:75:96:be:fe:31:89:
                    66:87:43:f6:3d:c8:ba:d3:70:9d:97:e8:c0:2b:84:
                    0f:76:87:dc:34:bf:ac:4c:ad:7d:cf:57:f0:3f:19:
                    6d:2a:45:71:01:26:c5:9e:15:2a:e5:d9:59:f5:85:
                    72:90:4d:30:75:f9:25:27:60:e5:15:68:f1:f7:61:
                    c9:db:e9:75:5a:79:d9:cd:56:2e:0b:bc:07:10:5a:
                    a5:67:57:88:2c:9a:45:d8:08:9a:9f:38:2c:44:f7:
                    c0:60:df:4e:db:e9:eb:3e:9f:c4:87:d5:17:f9:c0:
                    cb:01:1d:56:85:f5:c9:9a:4a:a7:b7:df:ce:f9:84:
                    0c:9f:60:01:45:5f:3e:52:03:6a:9c:4a:dc:94:f0:
                    20:dd:6c:dd:bc:67:95:eb:ff:0e:45:97:28:11:cd:
                    8e:1c:71:f2:dd:f2:94:e4:fe:65:f6:0c:e6:b8:73:
                    49:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EE:D0:54:22:61:3C:85:03:3B:33:BD:AD:64:FA:16:12:89:C7:7E
            X509v3 Authority Key Identifier:
                keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:31:b5:df:1b:52:e2:c1:e8:98:49:ef:52:8c:62:c5:97:d6:
         34:1f:ae:cf:6b:e4:c9:bd:d6:73:ed:e0:c7:3d:cc:14:41:fe:
         9d:d6:5d:0d:ff:01:0e:77:98:a3:13:b1:76:6e:df:4e:0d:0c:
         9f:96:86:dc:e8:5d:4b:eb:f1:32:47:0f:1a:9c:7a:a3:5e:b6:
         55:aa:74:a3:73:67:3b:16:79:a5:e4:f5:34:9b:80:53:eb:d0:
         57:c1:3a:d2:82:e8:c3:ed:e7:e4:1a:c1:a6:43:ca:98:00:ee:
         22:94:be:99:75:1d:13:25:51:44:41:17:11:76:b8:f6:93:95:
         5a:cc:5c:36:d2:a8:3c:6a:d8:4c:9d:f0:7b:a9:3a:dc:90:cb:
         93:68:c5:3d:84:8c:3d:0f:20:96:ee:af:2d:d6:71:58:e4:3e:
         bc:35:c1:b1:d7:d9:bb:39:98:98:8b:a9:75:86:ac:d4:ef:84:
         5b:a7:71:00:6a:93:59:0e:70:52:01:8d:08:00:29:5e:bc:25:
         37:37:bb:30:11:c2:1b:f5:7a:11:7e:3d:39:0c:32:35:df:59:
         56:b6:04:2b:6b:d0:00:26:13:7b:db:4c:09:79:5d:48:72:38:
         5c:5a:41:12:8e:44:d2:aa:5c:21:73:07:e0:d2:2f:b2:f2:4b:
         19:7b:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:42:30 2025 by rpki-client