Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File:                     Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier:          T4xqnPtjOkC5bdKowoDoXxtN3YK6ekDr2yYaoOjMzrM=
Subject key identifier:   C3:25:77:1F:82:18:E6:48:D6:C4:D9:C1:A1:80:EF:9A:77:95:69:8F
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer:       /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial:       0198816706D97010F713CAFF9062FFDEE758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number:          0E2A
Signing time:             Wed 06 Aug 2025 22:01:09 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:09 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:09 +0000
Files and hashes:         1: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: guN6cYTDW4XYyITs5g+3oLXUNmvRmQVEzNF5KuVXGjk=)
                          2: q75mVExwlcu32JNTYIQla5p7m1o.roa (hash: x+d/+bvOF1j8LDo0fwzIQNZsHB7Abtd57CLyM/qqXNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:06:d9:70:10:f7:13:ca:ff:90:62:ff:de:e7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
        Validity
            Not Before: Aug  6 22:01:09 2025 GMT
            Not After : Aug  7 22:01:09 2025 GMT
        Subject: CN=c325771f8218e648d6c4d9c1a180ef9a7795698f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:b0:d6:c8:00:64:45:8a:86:81:c7:ea:e5:
                    a3:ae:4e:af:4e:60:3c:ae:ff:24:d2:1a:8d:16:f4:
                    2b:da:05:3f:bb:27:ed:c0:0f:d1:bc:ee:23:bd:39:
                    1d:eb:4f:bd:61:12:13:95:0d:fa:9b:c3:2c:f7:9f:
                    83:03:0f:44:64:f1:13:6c:21:f0:b5:ea:00:37:45:
                    4b:a5:60:ec:27:33:37:b0:35:4a:69:d0:8f:9d:5b:
                    c2:51:c7:8b:e5:66:a0:51:e5:e9:04:cd:05:a7:35:
                    c6:e7:42:35:59:55:85:fa:63:40:fc:fb:7b:dd:96:
                    34:75:f2:93:e2:81:aa:14:cf:cb:25:ad:c6:aa:d3:
                    58:84:26:0a:75:5a:59:bf:04:dd:a7:1b:4b:9c:1e:
                    ed:af:10:dd:38:54:25:33:cd:f2:48:04:93:97:ce:
                    68:d1:90:07:96:43:a4:60:95:50:54:48:ff:e0:1c:
                    09:ad:28:5e:c3:96:75:ba:e6:20:42:82:3d:8a:27:
                    85:64:94:32:c3:94:65:f6:78:8a:bf:6b:07:f8:ff:
                    31:d9:f1:d4:2d:d5:65:65:b2:6c:4f:9a:2d:fa:cd:
                    cf:2b:0f:6c:8b:05:35:8c:de:63:6e:16:d2:82:7e:
                    bb:6e:fe:8c:34:55:f7:21:bd:27:fd:60:63:0f:9e:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:25:77:1F:82:18:E6:48:D6:C4:D9:C1:A1:80:EF:9A:77:95:69:8F
            X509v3 Authority Key Identifier:
                keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:11:bb:f3:78:cb:e2:ae:99:9b:84:37:62:22:8e:6d:f7:32:
         26:b0:47:ee:d3:2d:d2:b8:53:63:64:33:63:80:b7:34:8f:6e:
         0b:b5:42:96:22:cf:89:0a:b5:bf:41:48:47:ff:34:00:eb:83:
         a8:c1:67:5b:8b:ad:b9:9e:29:91:5a:8c:b5:87:bc:81:64:73:
         d5:80:a3:1b:e6:b4:73:7d:a0:6b:ac:37:03:b7:4f:f7:66:b5:
         55:71:e2:b1:c7:35:d4:2d:e0:46:13:48:40:0c:d0:25:43:bf:
         f7:76:37:3a:e3:a7:eb:33:43:ba:5e:d4:b6:89:4f:fb:a3:fa:
         b6:b2:c9:00:46:43:8c:a0:45:ae:9d:1b:18:e1:69:c4:a0:e7:
         2c:66:a2:a5:8f:93:53:9b:33:ef:7e:9d:d6:08:e9:91:ed:26:
         d5:bc:60:f8:3a:a5:f5:30:7f:e3:20:5d:12:95:7a:25:e8:38:
         80:93:9c:f7:2f:13:eb:95:71:fe:3c:63:f9:8d:3d:7b:e1:c4:
         0c:95:99:1a:70:9b:74:2f:67:9f:8c:5b:cc:2c:66:92:a6:52:
         1d:a6:ab:71:a6:f5:4b:81:cc:bd:a9:f2:60:c0:b2:1e:b5:73:
         ff:34:5b:02:95:b2:ec:44:e2:c4:93:7c:c3:0d:27:46:42:30:
         ab:c2:8d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:34 2025 by rpki-client