Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File:                     ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier:          1xLzyiVrvwnlYPbOUvQ6N57C12IyORHv6pefXQAPddw=
Subject key identifier:   9C:E0:D8:FC:4E:64:2B:5E:21:70:E9:60:1A:35:09:0A:F7:79:75:5A
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer:       /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial:       019875D103D34AD4A52A8C7ED8F257057AFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number:          120C
Signing time:             Mon 04 Aug 2025 16:01:28 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:28 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:28 +0000
Files and hashes:         1: 1-2PnzzFVpt1dGXWeYqhIzX1nVe0.roa (hash: hI/InHmZs9EbHw0E5EzTrrWOPonm9OzaUn8fi0xcF4M=)
                          2: ODB5K147usnzcNTK56uipc26ego.crl (hash: ZOcLpKDszKss0b+9AEWaDvBrYCzkEafPo/QHz2BKJxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d1:03:d3:4a:d4:a5:2a:8c:7e:d8:f2:57:05:7a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
        Validity
            Not Before: Aug  4 16:01:28 2025 GMT
            Not After : Aug  5 16:01:28 2025 GMT
        Subject: CN=9ce0d8fc4e642b5e2170e9601a35090af779755a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:19:d2:ec:27:54:cf:c4:a8:9d:dc:67:e6:91:
                    be:02:83:a7:b4:d8:a6:da:5a:83:17:ee:6a:18:06:
                    dc:11:30:ed:a2:f3:da:ef:a0:39:eb:4d:36:37:3b:
                    a7:3a:da:19:2e:c7:6a:ef:c8:d5:72:19:a2:aa:a7:
                    43:03:a7:50:11:2f:2a:47:39:9c:cf:9b:cc:20:ef:
                    d3:2d:d5:77:fa:27:e6:96:0c:77:49:1b:8b:49:f3:
                    07:b7:60:b3:51:b8:19:5f:ea:a2:8e:bc:71:f3:c6:
                    e9:8c:ec:a6:c9:df:a0:77:2c:6f:64:3d:38:0a:71:
                    4a:bd:74:e1:f9:ae:d5:28:ef:b1:54:ff:ee:87:fc:
                    26:09:e9:6c:da:f8:93:64:b2:52:65:4f:70:c5:da:
                    e9:f8:e4:59:e6:55:7c:4e:54:34:49:8a:15:6b:59:
                    1a:19:40:0e:b3:e1:26:b3:d5:e2:1c:5c:c2:a4:0d:
                    44:84:2a:75:07:57:49:9e:b3:58:fb:54:cb:9f:a0:
                    73:dd:fb:cc:4b:02:e6:ec:86:d9:bc:89:c6:3c:ed:
                    fb:cf:f0:1c:2c:12:cf:3f:cc:0d:27:6d:cc:b7:52:
                    11:7e:07:0c:01:a1:bf:9c:1b:77:d3:b1:1e:02:ce:
                    7c:cd:a0:7b:b6:bd:4c:db:48:32:7d:e3:66:d8:f1:
                    20:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E0:D8:FC:4E:64:2B:5E:21:70:E9:60:1A:35:09:0A:F7:79:75:5A
            X509v3 Authority Key Identifier:
                keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:ef:9c:e3:85:69:6e:6b:a1:de:5a:a5:80:3d:c5:8f:98:
         8a:84:d6:ba:39:fa:aa:49:71:9a:77:87:7a:ef:0e:58:de:da:
         39:29:e8:f4:39:b4:32:a5:61:28:5d:ad:ad:15:d1:0a:5d:dd:
         53:aa:5b:54:d7:76:cc:ec:1f:c5:eb:d8:2e:76:02:fa:7d:59:
         45:1b:bc:c0:db:72:c3:b7:ff:f2:df:e7:34:04:5f:ee:4e:47:
         ad:e9:8a:7a:08:b6:bc:68:5f:ff:91:99:7b:d2:32:4c:ae:b0:
         9a:ca:cd:7c:3b:4c:40:76:66:56:2f:84:18:8e:39:4f:b2:32:
         9a:6e:1a:7b:c9:4a:22:88:72:46:2f:9c:42:de:c2:03:11:36:
         9a:d5:54:74:2c:ca:6b:34:0e:37:04:5c:15:8e:c4:58:c5:39:
         0f:bc:61:83:e7:5c:d0:bc:87:2f:45:c8:4d:cd:3c:9e:8b:85:
         10:48:9c:62:db:2d:a7:2d:a2:9f:a4:e8:af:a6:5f:a3:58:48:
         61:0e:84:dc:a5:27:4c:fe:59:80:de:6e:58:8e:9b:0a:48:52:
         ce:80:69:34:22:e6:55:01:d2:6c:4e:6d:59:48:bd:6a:13:bb:
         ed:a5:08:83:4f:a8:0e:5e:0d:23:98:ef:3b:2d:33:4d:ec:4c:
         30:4c:83:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:15 2025 by rpki-client