Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
File:                     rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft (raw, json)
Hash identifier:          OBnWiSNR+H0HFSmr1bMJy8OU7D9N6qwS3S6FtfCJlrg=
Subject key identifier:   7E:57:AD:82:F3:79:D4:0A:F4:C2:C2:5E:24:0C:90:54:BB:B2:F9:6A
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Certificate issuer:       /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial:       01988D33DDFDD0BDD4F0A41DDA2320CF41DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
Manifest number:          0E98
Signing time:             Sat 09 Aug 2025 05:00:43 +0000
Manifest this update:     Sat 09 Aug 2025 05:00:43 +0000
Manifest next update:     Sun 10 Aug 2025 05:00:43 +0000
Files and hashes:         1: NRGRL-46NCSPaGi9AZCwzE3w5nE.roa (hash: u0L8t2q2EBStWXwxFZXL40Y75wNx2nDlIz7mo+UHSk8=)
                          2: rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl (hash: LjBPBuT+rKvSOQ+kjcUsRAmvtnlD6tvlaHF4gH6k9ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:33:dd:fd:d0:bd:d4:f0:a4:1d:da:23:20:cf:41:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
        Validity
            Not Before: Aug  9 05:00:43 2025 GMT
            Not After : Aug 10 05:00:43 2025 GMT
        Subject: CN=7e57ad82f379d40af4c2c25e240c9054bbb2f96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:66:69:36:c7:55:c3:b7:65:a5:34:07:c3:47:
                    2d:18:18:ec:c3:fa:aa:84:a1:9d:4a:72:d7:ce:fa:
                    f5:ec:c4:06:e6:d9:ff:14:d5:93:fe:1b:69:b1:c4:
                    46:bb:cf:38:46:b7:63:46:eb:28:fa:63:40:b6:fc:
                    c1:55:27:a9:c8:14:cd:e0:2e:bc:e7:4d:bb:90:5b:
                    e3:38:1f:6c:57:cb:fe:87:5e:91:1a:09:a3:e5:c0:
                    3f:cb:0f:1a:a6:95:95:22:13:47:6d:82:a0:8e:6f:
                    4d:61:47:32:ce:94:2d:e9:0d:f9:7d:80:c8:89:fa:
                    ad:89:20:1f:d4:45:ea:12:b4:e0:fc:b9:a4:88:79:
                    35:90:84:8e:e4:fe:cf:f3:76:ce:5e:bb:40:ec:e9:
                    00:04:c1:70:9f:99:da:b4:67:4b:13:d3:ac:7d:d6:
                    8c:0a:c6:a8:4b:1e:a2:03:5c:27:7a:85:0e:21:68:
                    c5:a3:e7:6a:9d:ed:fe:41:ef:47:8a:db:29:98:4f:
                    f6:5f:f7:90:b3:6e:21:24:d7:fc:19:5f:cc:62:85:
                    79:39:05:77:ff:36:5b:b8:93:8d:8d:07:cb:c6:67:
                    4c:4b:f4:35:89:86:f2:53:f4:b6:0f:15:42:14:a3:
                    09:44:2e:48:e5:5b:39:d5:a0:84:0c:91:6d:56:40:
                    ee:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:57:AD:82:F3:79:D4:0A:F4:C2:C2:5E:24:0C:90:54:BB:B2:F9:6A
            X509v3 Authority Key Identifier:
                keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0e:5f:74:d0:b1:a4:61:c3:d2:93:22:9f:fd:a7:83:20:c4:
         cd:3e:0a:a5:65:0c:8e:32:c8:2a:4d:db:d5:e6:13:cf:c2:10:
         dc:47:fb:5e:ac:06:b2:92:6f:88:41:70:8f:7b:b3:4e:35:9a:
         ae:50:8c:31:32:5e:94:92:00:3b:17:da:96:25:b8:8a:a9:f8:
         6c:3e:8b:67:bf:cf:28:14:61:38:f2:58:bd:f6:d2:3d:45:9b:
         34:19:bb:ed:63:e4:29:9d:84:3c:dc:d7:a5:f8:0c:e5:dd:15:
         d3:ec:1a:5d:1b:27:0b:c5:5a:d6:da:d8:fa:c1:4b:56:ff:0a:
         8c:f2:26:b1:e3:c5:9c:64:c5:a7:9e:42:75:86:8d:b8:4f:22:
         0d:ca:6d:b7:a7:da:ef:8d:d0:d9:b5:93:ad:85:0f:fa:99:b6:
         3b:c8:87:81:e1:1d:40:14:3a:4a:28:77:87:18:35:f1:0d:09:
         7c:04:5e:f2:da:f8:71:b4:8a:82:a6:bd:bb:0f:e5:3b:4d:0a:
         96:a3:db:7a:d9:50:5c:60:5b:39:b0:b2:38:ba:7d:63:ce:d3:
         7b:e8:d1:59:74:1f:ca:71:05:70:b7:13:a4:c3:64:bf:64:08:
         ae:3f:51:a9:4a:65:1d:34:01:c7:fe:5a:ac:6e:c8:a4:a9:4f:
         9e:d4:07:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:41 2025 by rpki-client