Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
File:                     RV9UXiqU8FHOuPgPRGwcthwObI4.mft (raw, json)
Hash identifier:          fXfmPEA3TABe4CxFT8XDyczCo0MGKtRBUrcwihCp8/w=
Subject key identifier:   0A:7F:72:9C:F7:F2:B2:12:1E:01:92:51:ED:53:96:6A:7A:26:E4:14
Authority key identifier: 45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E
Certificate issuer:       /CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
Certificate serial:       01987418B8EEA4EE6CCA9625BE6C797E9417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
Manifest number:          3A
Signing time:             Mon 04 Aug 2025 08:00:33 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:33 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:33 +0000
Files and hashes:         1: RV9UXiqU8FHOuPgPRGwcthwObI4.crl (hash: c19jdSujxvk/ceNKFgNgjisJylY8FitnyxrWotLv7Ok=)
                          2: tfcLpKerdpFoXOb5QmMUPRfvX3g.roa (hash: KomNoR2J4PlIML4Y+vVt+wvjHhv9BWoRwvkNwWbeubw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:b8:ee:a4:ee:6c:ca:96:25:be:6c:79:7e:94:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
        Validity
            Not Before: Aug  4 08:00:33 2025 GMT
            Not After : Aug  5 08:00:33 2025 GMT
        Subject: CN=0a7f729cf7f2b2121e019251ed53966a7a26e414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:42:7d:ea:6d:68:00:ff:77:0c:3c:6f:76:
                    a3:74:7a:c0:e5:9e:e1:23:6d:e9:2b:87:b3:1f:c5:
                    bc:f6:73:f2:c9:d3:ca:2c:b2:01:87:e7:42:ee:9b:
                    06:74:a9:20:35:6b:ae:31:a6:97:b4:84:09:7e:05:
                    1e:51:a3:25:ad:e2:41:e3:af:d7:72:7c:a4:11:2e:
                    5c:0b:84:c6:ce:0d:23:94:7f:bf:69:04:ca:7d:76:
                    0c:ac:54:84:af:eb:85:a1:ec:7e:99:d2:de:26:01:
                    6a:d3:21:c5:3d:0c:c7:9a:d4:bf:40:23:b0:fd:d3:
                    c4:b1:7c:87:a9:b2:d8:55:49:30:c2:88:bc:8e:6f:
                    8c:40:48:8d:f6:cd:c4:c4:4b:a1:cf:bf:99:23:ab:
                    33:d1:9b:4f:5f:95:2d:a8:fc:93:20:9e:b6:cf:03:
                    c6:dc:7f:4d:d7:03:48:c3:cc:f6:d9:a2:49:77:85:
                    da:45:0c:f2:69:21:4a:fc:7b:ac:a0:30:02:5e:19:
                    fe:03:89:2a:7f:6d:e6:65:21:32:9f:37:40:88:9f:
                    53:9c:38:d5:7e:54:ce:fa:5a:9d:5f:83:aa:64:af:
                    2e:87:ad:88:0d:3d:36:ce:54:d8:7f:13:e4:cc:cb:
                    3b:55:2b:e2:76:26:4c:94:64:0c:49:4d:bb:1a:81:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7F:72:9C:F7:F2:B2:12:1E:01:92:51:ED:53:96:6A:7A:26:E4:14
            X509v3 Authority Key Identifier:
                keyid:45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c6:44:f0:07:27:ba:4a:b4:bc:cf:aa:7c:62:2d:49:c3:e5:
         ef:fc:55:15:a1:a9:6c:b8:c0:1b:32:cc:43:e8:dc:d3:d4:8b:
         1a:8f:99:6c:8d:cb:94:8f:45:6b:ec:06:9a:d0:d3:f5:2b:0a:
         b4:99:56:9c:c6:68:1e:30:68:d2:08:59:54:fe:87:49:20:b3:
         c7:72:18:b6:64:c5:7c:8c:a1:42:70:8b:86:4b:23:59:cb:c8:
         c8:31:16:1d:46:a0:6f:0b:17:a2:cc:8a:52:cf:65:af:d1:02:
         e4:d1:9d:a1:af:f5:c8:1b:ab:e8:09:02:63:f2:9c:ba:eb:18:
         3b:09:0a:3a:91:08:9c:b4:22:38:3b:dd:65:3e:36:1a:b9:a2:
         65:9b:d7:72:a6:a0:98:9a:22:ef:a6:86:79:42:22:d1:51:1a:
         7f:b2:45:4b:ca:2b:63:67:c4:50:10:9b:61:db:25:04:46:c6:
         94:6d:c7:43:06:96:e3:63:52:de:bc:64:ac:b7:7d:2b:c9:15:
         63:7f:ac:57:a7:a2:80:06:05:f7:07:0d:0c:e3:0a:b0:8f:77:
         d7:02:d4:ac:47:57:9f:0e:c3:84:1f:43:3e:01:a4:42:59:bf:
         20:bf:10:26:d6:11:57:b5:ef:8d:ca:d4:49:e8:1b:53:0b:f6:
         aa:da:85:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:36 2025 by rpki-client