Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
File:                     52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json)
Hash identifier:          YK6D3kDEq5sw56ixcs16poA5cYf4YhtVZkMrXJyBq7I=
Subject key identifier:   4A:0C:EB:E1:9C:64:47:DD:34:22:88:0D:BD:BD:E4:02:9A:31:4C:62
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Certificate issuer:       /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial:       01988167697928FF7331ACC316A3BECB743D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
Manifest number:          0AC4
Signing time:             Wed 06 Aug 2025 22:01:34 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:34 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:34 +0000
Files and hashes:         1: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: utNPDmxjNWLGILMkGClT52xB+ry28R9757KPo88XJfs=)
                          2: lxXNUCeQItpUU-WIqT27d6PPlu0.roa (hash: gRV2uGVItKOTTis9BRa/lRn5duot/VIpG4JMEM2dMPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:69:79:28:ff:73:31:ac:c3:16:a3:be:cb:74:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
        Validity
            Not Before: Aug  6 22:01:34 2025 GMT
            Not After : Aug  7 22:01:34 2025 GMT
        Subject: CN=4a0cebe19c6447dd3422880dbdbde4029a314c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:b8:c5:29:08:9f:27:07:e0:0f:78:19:3f:
                    ab:24:77:59:c9:d0:59:b4:d6:dc:96:db:52:33:9c:
                    6c:f8:32:b8:93:a5:90:80:09:86:5b:da:36:2e:5d:
                    0b:99:47:fa:b8:af:aa:ec:f3:f8:88:bf:9b:c1:bf:
                    40:08:11:35:c0:7d:34:e4:bf:66:17:b8:3e:01:d9:
                    d6:b2:db:aa:1d:ff:cd:55:68:3d:29:d1:0b:ff:94:
                    37:ef:02:f4:d1:93:d6:26:20:6f:8c:4e:4d:ee:a3:
                    f6:83:f0:97:8a:45:6b:81:98:cf:5d:d2:e4:9a:39:
                    a7:12:a3:7f:29:96:3a:59:46:29:d9:6b:7e:ca:0d:
                    2f:f3:00:b6:03:76:b8:f8:15:57:af:7f:8d:ef:ba:
                    e8:5e:25:da:0d:03:fc:73:37:19:5f:ec:df:0a:c9:
                    04:1c:3e:03:a5:d6:b4:39:25:16:b0:56:39:16:c4:
                    ce:71:97:f0:c0:e1:e4:98:83:65:f5:74:a0:06:58:
                    76:dc:43:60:1d:dc:c1:73:76:48:68:a0:8f:a0:5c:
                    7a:53:d1:2a:63:64:2b:6c:3c:34:be:f8:16:38:8e:
                    2d:b2:34:13:b9:d0:b5:a3:a6:57:9b:3f:35:61:47:
                    ec:94:72:7c:54:71:84:1d:e9:f7:5e:bb:bd:8e:67:
                    3d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0C:EB:E1:9C:64:47:DD:34:22:88:0D:BD:BD:E4:02:9A:31:4C:62
            X509v3 Authority Key Identifier:
                keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:ae:fd:a0:bb:83:8c:ee:ca:81:f0:97:a0:b2:67:46:2b:
         0e:2b:da:77:8d:fe:6c:67:13:ed:e9:4c:e8:d4:93:44:53:f7:
         96:dd:06:ff:ab:e9:fc:fb:91:f5:95:72:74:0b:45:93:53:4d:
         02:8e:9c:c7:ef:7e:b9:96:89:1a:d3:b0:81:7a:49:b2:52:37:
         ca:82:24:1b:b0:b1:5a:89:5f:d1:64:c0:49:21:fb:04:70:28:
         9f:d4:a8:e3:c1:61:40:62:af:de:64:17:db:0d:0b:ac:0c:fb:
         38:4c:47:db:9c:8f:42:33:c8:c1:81:fb:4a:1e:15:39:bd:84:
         30:51:63:30:7e:3a:3b:3f:a7:51:aa:bd:cb:6c:d1:c1:fd:00:
         98:5d:c0:f8:25:80:c5:67:94:9b:8a:2b:fc:65:92:bf:38:25:
         f0:74:e8:2a:30:b0:61:25:90:19:a7:10:3b:a0:78:9f:ea:b0:
         4b:21:e9:da:91:01:5b:eb:26:31:9f:2d:b7:fa:39:04:97:1b:
         35:a8:50:ec:b7:b0:3b:16:e4:21:1b:2e:58:5a:0c:92:0c:36:
         5b:36:1f:28:ec:21:8c:87:c7:37:94:48:d4:7a:5b:22:8c:45:
         a6:c7:82:c3:da:04:59:4d:32:40:67:f4:97:a3:5b:99:2c:9c:
         d0:f4:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:52:36 2025 by rpki-client