Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
File:                     mnuajNgZ9KkgM01-cuwjQIcNd0k.mft (raw, json)
Hash identifier:          hSYy+47Y06Se2jAVQdEUjMMyQmgIWz+QfC2Viv+sd+I=
Subject key identifier:   DC:87:AB:C3:6D:92:EF:07:EC:C3:BF:07:48:8E:B5:ED:17:36:F2:9A
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Certificate issuer:       /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial:       019896DC4354A4FEF773A94806B58C380677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
Manifest number:          0894
Signing time:             Mon 11 Aug 2025 02:01:14 +0000
Manifest this update:     Mon 11 Aug 2025 02:01:14 +0000
Manifest next update:     Tue 12 Aug 2025 02:01:14 +0000
Files and hashes:         1: IKlMOdkuHyBNZAexC-GSK-hjGW0.roa (hash: uA4Q2gsvRlV+sSD0ED9KoTfpAy2mm9Pd7yFqglVpNvQ=)
                          2: ksVbRwAzzCZHci4kH2kQ6u8coqY.roa (hash: QaqWPpVajjOVbtuXKzhecjPRXn+V4yoJpRPVeesXbzw=)
                          3: mnuajNgZ9KkgM01-cuwjQIcNd0k.crl (hash: dW28Dz4GFEZDDQb6PaikQbroMUrKlxmarx5vzi4qnQk=)
                          4: uOUxSiBIbzpDJ7EaKMdYFnC-HEQ.roa (hash: P7xU7zipmmpWbMdR+tIYpEi0SHoYEWAWhVNCw2vAWTE=)
                          5: xH_26XIR8lPG36a6e_UAuv1nVvs.roa (hash: skoMmZjq1jRGHL/wRavlOMxLKJaRep20S4gGa/juF00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:dc:43:54:a4:fe:f7:73:a9:48:06:b5:8c:38:06:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
        Validity
            Not Before: Aug 11 02:01:14 2025 GMT
            Not After : Aug 12 02:01:14 2025 GMT
        Subject: CN=dc87abc36d92ef07ecc3bf07488eb5ed1736f29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:96:8c:56:81:36:ff:3a:4a:83:6c:b6:77:
                    62:03:a1:79:44:58:e9:5e:7f:5a:5e:66:4c:19:8c:
                    96:c7:cb:00:75:09:2f:55:b7:72:c6:eb:0d:05:8d:
                    73:58:ea:d6:42:40:c6:ec:db:32:35:96:8c:3a:86:
                    63:d7:69:80:b9:83:88:e7:a4:2b:ec:6f:4f:16:aa:
                    1f:87:c3:ee:00:b5:b3:3c:18:ec:d8:e7:e6:17:ab:
                    b7:9a:51:9f:9d:59:fa:74:70:3f:e1:55:38:76:c7:
                    35:81:e1:d2:96:b9:4a:c2:ae:6a:cb:df:0f:75:9b:
                    47:b6:34:07:6a:54:10:ad:4c:c1:4e:56:6e:87:51:
                    d6:00:5b:37:05:6c:80:e9:bd:c7:57:60:3c:a5:65:
                    39:b7:7d:c1:9a:5e:10:33:c5:79:91:02:74:59:4d:
                    a3:eb:2c:f4:2f:dc:e2:a6:75:2a:a1:f1:e6:15:c9:
                    7d:c4:f2:e4:51:c5:9c:97:a9:fd:2d:04:0b:8d:d0:
                    fb:09:9a:69:a3:ce:f0:38:58:1d:c4:00:ab:90:07:
                    25:6d:4a:45:b0:02:73:6b:5e:ca:c9:3c:7c:34:2c:
                    d4:36:ed:9d:48:cd:1e:16:ba:06:33:a2:eb:84:a8:
                    79:b9:bc:c6:44:8e:36:c6:72:3e:61:39:f3:bc:14:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:87:AB:C3:6D:92:EF:07:EC:C3:BF:07:48:8E:B5:ED:17:36:F2:9A
            X509v3 Authority Key Identifier:
                keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ba:1e:4f:45:9b:ce:ab:09:7a:5f:76:8e:a5:f7:e5:53:13:
         e9:c8:75:89:58:c9:5d:5a:c6:d7:92:21:98:ad:da:b1:59:d9:
         4d:c7:0e:cc:26:bc:24:a3:d5:9d:de:bf:3c:26:79:05:59:ae:
         09:27:60:f6:02:db:7e:7b:33:58:89:70:2c:78:85:aa:bb:d5:
         eb:64:41:05:fa:0c:81:0f:a0:03:de:84:ed:f6:86:42:99:c3:
         14:7c:be:b7:5c:9b:53:4e:36:20:66:76:a3:b3:2f:39:80:d5:
         d8:da:6f:90:e0:90:d9:d8:d3:ac:e4:ed:51:10:3d:62:23:7d:
         17:4f:4c:a3:39:61:b1:7d:4f:26:d9:db:7a:4a:c6:8f:72:4c:
         54:21:8a:73:2a:18:97:73:23:4a:cb:8b:a4:ac:e1:05:fa:5e:
         55:ea:f3:5c:13:a0:fc:60:9b:89:b5:b8:04:82:2e:1a:72:fc:
         db:34:4a:77:a3:3f:42:9f:39:b0:c2:5d:c1:98:93:c1:a4:4c:
         d1:87:6c:4b:f0:22:ea:7b:46:10:d8:4a:66:75:2d:e3:8f:e1:
         15:d7:b3:87:f8:c8:64:3a:f2:f8:db:b3:31:3b:f9:12:86:af:
         21:c6:96:02:d5:09:35:00:9c:26:ca:1b:32:3e:15:46:86:fc:
         b8:6d:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:35 2025 by rpki-client