Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft
File:                     RRbrDuN6cQdkYexsuouSWsXiigQ.mft (raw, json)
Hash identifier:          s1lpRiiSfUtlt/J7APFQ0qE/nmu7vCAq6i9tT+1PIMw=
Subject key identifier:   61:5A:40:43:ED:15:3A:8C:DB:8B:77:A9:58:3A:0D:F6:A9:FD:78:D1
Authority key identifier: 45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04
Certificate issuer:       /CN=4516eb0ee37a71076461ec6cba8b925ac5e28a04
Certificate serial:       019874F4AB633FC1E9A9682F494DDA1BD3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft
Manifest number:          0C58
Signing time:             Mon 04 Aug 2025 12:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 12:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 12:00:48 +0000
Files and hashes:         1: 1-t2gnE5sOGltaGyK08vMro9QjaY.roa (hash: KqgeQLln5bUSPOutirb1nGDGQJDA+7LtG2hn/tE6y4I=)
                          2: 99QLROUQNHiiqB_a3SA6ZvSr3YI.roa (hash: sNlxkO/aixuwJo13PpX/CwbLGrB7NAaO23Tw9EkoOSE=)
                          3: RRbrDuN6cQdkYexsuouSWsXiigQ.crl (hash: cj7T51Eb+GpAYaO0C/OXtdlEfxWy6PGekIFlCZVwQAo=)
                          4: dvJNx6RbxjDoJCEwF7HnrhRhptU.roa (hash: DVANgVeWMmrYwoLblH+nDJmKwe1mEMcVwTPkEqM0534=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f4:ab:63:3f:c1:e9:a9:68:2f:49:4d:da:1b:d3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4516eb0ee37a71076461ec6cba8b925ac5e28a04
        Validity
            Not Before: Aug  4 12:00:48 2025 GMT
            Not After : Aug  5 12:00:48 2025 GMT
        Subject: CN=615a4043ed153a8cdb8b77a9583a0df6a9fd78d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:80:ff:86:9b:cd:5b:8b:0a:d4:47:d3:7f:c5:
                    ee:f9:be:73:a2:68:b8:ad:73:63:7e:43:99:d3:5f:
                    16:bb:da:ed:35:8f:92:b4:2c:91:a1:a2:19:a9:b6:
                    4c:f3:d7:2a:70:2f:c5:80:5e:5c:3f:82:29:16:c0:
                    84:8b:f8:66:05:e0:5f:c1:a6:20:10:cc:09:3c:66:
                    6d:f2:a1:a0:51:bf:2f:6d:69:6a:c0:33:4a:18:cd:
                    e3:d3:d4:ad:29:52:d7:04:32:50:34:77:a3:36:99:
                    34:8f:f8:3b:24:86:aa:55:de:b1:07:5f:60:c4:af:
                    6c:5f:c9:fe:d8:86:f2:69:5a:8c:47:a5:8f:bd:03:
                    55:8a:69:1a:04:ed:2c:e7:c5:39:51:0f:28:21:19:
                    b1:66:57:a2:c3:67:0a:ae:a9:1f:d2:e8:11:f4:5a:
                    09:a2:14:a1:84:4c:9c:56:4d:1a:82:b1:39:10:63:
                    0d:7f:00:35:84:7e:b9:0d:ba:96:68:ac:b3:76:d0:
                    b7:c7:e6:6a:9e:77:7a:02:de:b3:95:aa:28:dc:bf:
                    30:f9:d3:c9:84:8d:93:6e:7c:1c:b5:c3:c9:45:fb:
                    da:48:8b:af:aa:4a:16:b9:24:69:72:3a:f3:62:09:
                    c5:d6:77:de:b6:8b:14:ec:fd:56:67:aa:44:90:23:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5A:40:43:ED:15:3A:8C:DB:8B:77:A9:58:3A:0D:F6:A9:FD:78:D1
            X509v3 Authority Key Identifier:
                keyid:45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d7:a0:5f:c4:af:70:72:68:75:46:b3:94:44:d9:4e:19:46:
         c2:22:e0:80:b4:e3:88:96:b0:41:c3:69:9e:5a:60:89:c7:47:
         e0:96:da:db:15:48:03:ad:27:b6:b4:47:31:1f:b5:77:eb:23:
         62:17:d0:d2:2f:60:85:3d:fa:c1:5e:ba:93:e5:e6:90:10:72:
         87:69:36:54:60:62:27:16:9a:c0:43:dd:d0:9d:db:52:f8:df:
         df:38:84:f4:38:8e:f7:fe:d9:7b:ce:f9:51:6b:81:50:ad:9d:
         38:9a:71:70:21:ee:7d:39:c7:45:ed:71:f0:8b:f5:54:8d:7a:
         77:f4:1a:08:76:d0:1f:25:cd:a3:21:66:b6:84:39:aa:67:29:
         97:57:23:cc:ba:0e:3e:ec:48:5b:6f:d4:ae:df:f2:52:97:76:
         c0:6b:bc:81:52:1b:48:a3:6f:ff:6c:95:8d:b2:b1:ba:2c:b8:
         1a:0a:4e:a9:3d:d8:3e:4d:72:29:74:5d:da:09:0e:98:1b:b0:
         e4:e9:12:51:49:d3:e9:10:32:1a:d1:b6:58:48:b1:5b:88:e1:
         0d:5a:50:b2:7a:b6:c9:d0:1a:13:11:3a:48:48:6d:56:85:8d:
         d0:23:b5:08:3a:3d:f3:f9:c0:15:aa:ba:48:be:a7:94:3c:f1:
         4a:52:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:45 2025 by rpki-client