Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
File:                     DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json)
Hash identifier:          ZSamkbqX8w+Ugm/znKvx0Cvq4WUO6Ec/xRlV/0A6pno=
Subject key identifier:   70:12:34:40:DD:C1:B0:00:41:02:DE:FC:14:A8:18:31:64:1F:C4:20
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Certificate issuer:       /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial:       019872CFED3CD6DBBBFAF5D231621CE66518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
Manifest number:          08BD
Signing time:             Mon 04 Aug 2025 02:01:25 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:25 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:25 +0000
Files and hashes:         1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: YHdZEOkcdkKaXqGo9zH6GvgOkuGOeKwnSkaic94sxWM=)
                          2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=)
                          3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:ed:3c:d6:db:bb:fa:f5:d2:31:62:1c:e6:65:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
        Validity
            Not Before: Aug  4 02:01:25 2025 GMT
            Not After : Aug  5 02:01:25 2025 GMT
        Subject: CN=70123440ddc1b0004102defc14a81831641fc420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:c7:29:7c:2a:e1:64:9f:3b:2f:3a:34:b5:
                    6a:81:7e:a0:a3:d3:c5:b6:df:92:e9:0c:c8:c0:06:
                    a6:66:9e:3b:63:45:8c:90:51:73:86:7e:6b:a2:57:
                    1b:ec:11:58:d0:ef:ed:55:3f:6b:8c:98:9a:b2:ea:
                    be:27:32:b5:36:4e:7d:e3:97:c4:87:a3:04:39:c6:
                    de:90:64:da:12:96:7e:60:3c:05:8b:30:33:dc:e4:
                    89:9d:c6:98:a2:91:a0:4b:2e:55:20:74:58:b9:c8:
                    af:e3:d6:44:c7:00:d1:78:55:6a:7f:34:21:96:d3:
                    0f:2b:a8:7b:bb:e3:98:70:f5:c4:a4:69:c8:2c:b3:
                    a1:50:bd:2e:c9:49:94:88:c0:13:ba:6d:cf:31:a9:
                    33:db:2a:37:06:b1:cd:4f:26:50:c1:8e:d1:67:7e:
                    21:8a:72:40:a5:41:30:76:48:b7:c6:d8:53:16:27:
                    3c:a2:6f:86:26:c3:bb:53:8d:7e:ee:f2:d9:66:03:
                    12:c7:4f:64:ae:80:0f:33:34:eb:84:35:30:51:c5:
                    ab:e4:d0:61:9b:97:8b:17:00:3a:3b:e3:73:93:dc:
                    54:86:e6:89:67:6b:86:b1:4a:14:d9:5f:6f:c2:a3:
                    4f:dd:6d:03:a8:a0:2c:1d:7e:74:ff:c3:5b:c9:fb:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:12:34:40:DD:C1:B0:00:41:02:DE:FC:14:A8:18:31:64:1F:C4:20
            X509v3 Authority Key Identifier:
                keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:dd:07:8b:0e:64:da:57:c8:0b:c9:d8:25:45:04:b1:7a:76:
         be:b9:9e:c0:ad:20:ae:e0:cf:2c:1d:b6:3e:35:93:38:01:ba:
         d4:8f:6b:0f:7c:eb:45:71:6e:8d:1d:24:4b:45:b0:cd:73:ea:
         b9:df:f4:57:79:d6:dc:91:f5:9a:2c:b0:d9:03:f7:51:5f:2b:
         63:cb:3e:13:a4:df:4b:9d:12:92:6e:d6:c4:63:21:64:96:12:
         47:dd:73:ac:2b:fd:ff:91:1d:b8:e0:51:13:42:13:bd:27:27:
         74:7a:33:ae:bc:70:99:3f:0c:0e:13:ce:c4:44:d5:03:44:2b:
         79:de:89:47:45:f1:eb:34:da:23:f4:3e:9b:a6:f6:3c:2d:7f:
         32:40:26:6d:a4:65:d9:f1:6a:55:6c:32:20:55:86:44:c3:40:
         b4:0c:d8:fe:21:ae:6f:7d:b3:8d:74:41:15:3f:21:42:a7:cd:
         4d:da:21:2e:10:3d:4c:3d:32:0c:f6:2b:96:26:1e:c7:12:0f:
         71:fc:36:94:c0:d1:83:b2:1f:e4:da:95:a7:97:c5:05:14:db:
         f0:49:c0:af:48:bb:61:72:82:f5:42:ef:20:e0:93:49:9f:9c:
         40:34:4d:67:5b:6a:43:63:b5:9a:fe:09:f1:b2:ee:28:4b:a1:
         91:b6:03:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:14 2025 by rpki-client