Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File:                     dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier:          mXZca/8/2+EcCZn/xPTomtuv89RBWCn/6ZvSHQxilxg=
Subject key identifier:   97:FA:83:E9:07:D8:61:AC:BA:72:87:98:89:D2:8A:EB:9D:CB:7E:9A
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer:       /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial:       01988BB333633C99729821B51ECBAA5C9C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number:          0D7F
Signing time:             Fri 08 Aug 2025 22:00:33 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:33 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:33 +0000
Files and hashes:         1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=)
                          2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: az65pDAY8YP0rMpKg0iiyE7txI8ES6bOEZ7tE6H9is8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:33:63:3c:99:72:98:21:b5:1e:cb:aa:5c:9c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
        Validity
            Not Before: Aug  8 22:00:33 2025 GMT
            Not After : Aug  9 22:00:33 2025 GMT
        Subject: CN=97fa83e907d861acba72879889d28aeb9dcb7e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:26:70:5c:48:4e:4f:ff:1f:9a:cb:37:ed:
                    4a:49:81:f2:ff:d7:08:cb:c4:c2:55:2b:b5:75:a1:
                    6e:11:3d:90:c0:0f:64:d3:ac:b3:e2:56:4f:bd:a6:
                    9f:96:cb:54:6f:ce:af:d2:c6:36:07:2a:28:c3:c2:
                    89:a8:1a:02:d6:77:60:9f:49:44:ad:b9:41:88:7c:
                    1f:b1:54:f7:ea:24:4b:b9:fb:e3:c8:6f:25:f6:bb:
                    30:a0:15:c0:3a:94:6e:e9:d8:ff:e1:ae:6f:68:c2:
                    50:e2:18:32:86:8e:41:bc:1b:b2:da:7e:56:45:b8:
                    79:ae:8c:00:21:eb:b0:02:6b:bc:46:d4:e9:85:ab:
                    bd:66:1c:b9:3a:93:3f:d7:a1:8c:aa:c4:40:99:9f:
                    55:dd:3f:15:4b:87:eb:70:23:d3:b6:a1:4b:ee:40:
                    04:4c:b9:ec:7d:2e:9e:b2:c8:78:f8:22:19:94:7a:
                    df:34:1f:45:5b:08:4e:ac:6d:00:fc:c1:11:69:73:
                    d9:12:ed:4a:a9:c5:27:e7:6d:e6:18:76:94:d5:f8:
                    f1:d6:ca:fb:b6:ea:21:f1:72:39:0b:a4:f0:9d:71:
                    e8:72:28:b6:ef:3c:dc:e1:7a:5e:5a:46:d9:e9:43:
                    f9:3b:e2:fb:87:2d:00:46:7b:d9:1b:06:87:ef:01:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FA:83:E9:07:D8:61:AC:BA:72:87:98:89:D2:8A:EB:9D:CB:7E:9A
            X509v3 Authority Key Identifier:
                keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8a:b3:91:37:00:bd:3d:d1:fd:c6:91:4a:17:30:6d:aa:bd:
         57:eb:11:a1:e0:a5:1b:6a:3f:91:45:20:04:c1:1e:ad:91:0b:
         15:61:e9:60:78:9e:ef:23:9c:6b:b2:86:b6:a3:69:a5:54:07:
         f0:97:b7:dd:b3:63:8b:0b:10:61:c0:74:5f:82:06:ce:0a:51:
         9a:8d:1b:1c:3f:f2:5b:00:aa:f0:7c:85:a5:de:9b:ab:da:82:
         fd:05:65:70:67:d4:10:7a:fb:fb:d6:30:d6:71:dc:ac:4c:ea:
         7b:34:3d:88:60:4a:79:e4:0e:e3:7b:94:ae:8a:71:02:3d:bd:
         57:ee:de:11:73:27:e6:86:34:72:0f:36:86:1e:bd:71:1e:3b:
         c0:03:60:6e:7e:8c:f0:de:45:e2:91:48:23:6e:62:62:61:71:
         9d:e0:ac:fb:43:1e:60:f1:7b:12:97:69:af:44:24:19:cf:f9:
         8d:dc:73:5a:8b:3d:d9:0f:80:31:31:ae:94:dc:35:45:62:77:
         07:36:63:e2:34:06:90:8a:df:e8:a7:a1:f5:8f:f7:89:c5:23:
         4b:c1:78:80:19:5c:e2:31:37:b5:fe:59:0c:12:df:7c:fc:df:
         d5:3a:5d:4c:b4:0c:da:ee:61:e2:44:a3:e0:eb:04:28:27:4d:
         76:78:66:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:48:06 2025 by rpki-client