Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
File:                     ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json)
Hash identifier:          OElbh2lMSFK8oD/EHZ3gUPddW6wZfS4AjipAAtNoGOU=
Subject key identifier:   0C:4E:B8:A9:8E:37:0B:DB:55:3B:23:52:06:2C:6D:20:8F:98:B0:B3
Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
Certificate issuer:       /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Certificate serial:       01988FC75AB96739E1FEEAF6A95CF5DAE68D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
Manifest number:          07E4
Signing time:             Sat 09 Aug 2025 17:01:03 +0000
Manifest this update:     Sat 09 Aug 2025 17:01:03 +0000
Manifest next update:     Sun 10 Aug 2025 17:01:03 +0000
Files and hashes:         1: Egv_COpkQ4qE0m0lj_BQmNwIMRA.roa (hash: 7o6c3PTeF8AIq/25Q6USnosQEeLS7MscdEHZbwRxm6I=)
                          2: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: hpxJRUINQaF4+aNpfB1cVkrgREAwWe1ujonJYvV9BY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c7:5a:b9:67:39:e1:fe:ea:f6:a9:5c:f5:da:e6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
        Validity
            Not Before: Aug  9 17:01:03 2025 GMT
            Not After : Aug 10 17:01:03 2025 GMT
        Subject: CN=0c4eb8a98e370bdb553b2352062c6d208f98b0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:2e:4f:6a:1c:e2:9b:7e:ca:67:00:f8:93:
                    1f:ca:83:09:1c:37:58:28:d1:63:fa:c3:8a:36:30:
                    c3:5f:28:86:b2:a3:55:c5:d9:cc:e5:7d:22:2c:d7:
                    d3:8a:05:11:5e:d2:5a:88:ef:82:5b:7e:15:e4:9e:
                    d5:2b:af:b9:b0:5f:9e:f1:e3:e9:ec:3b:d6:9b:73:
                    77:cd:fb:98:b4:bb:5d:5c:ab:00:f3:a0:16:ec:13:
                    9c:2c:48:54:65:1f:18:ce:b7:3b:03:9e:38:b3:e7:
                    9f:57:1d:c5:c8:0a:5a:ae:32:ba:ba:67:35:c1:72:
                    0f:8e:f0:69:8c:33:9c:45:1a:e1:45:1c:d2:70:3d:
                    99:66:16:52:f0:46:7e:ff:a5:6f:9d:7c:eb:98:ef:
                    f3:d2:6c:0c:77:2f:4b:b1:ec:71:2e:8e:88:7b:30:
                    74:24:0b:38:1f:73:53:ee:a2:ef:25:51:d1:f8:0a:
                    e4:52:bb:5e:79:cf:fc:94:aa:a8:33:97:5d:de:05:
                    31:e1:cf:05:36:e7:6f:18:2a:02:ee:46:52:d1:ce:
                    34:4d:66:1b:2c:6b:3c:46:b4:91:18:45:bf:a9:e0:
                    bb:f8:8b:ef:a0:73:51:a3:6b:47:76:eb:f9:77:b2:
                    c5:fc:95:b0:eb:c6:1c:cb:af:7e:3a:8d:60:45:90:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4E:B8:A9:8E:37:0B:DB:55:3B:23:52:06:2C:6D:20:8F:98:B0:B3
            X509v3 Authority Key Identifier:
                keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:60:b1:b6:cc:e4:d9:8d:0d:b9:5c:51:77:76:36:d8:e2:3e:
         04:b9:ee:7e:7b:a1:3e:1d:ca:a8:13:44:cc:b7:e7:e3:56:2f:
         08:1a:18:4c:cd:d3:69:a7:a7:a3:06:15:c3:a7:a3:d5:c1:87:
         20:96:7c:1d:5f:cd:9a:a1:e9:38:05:a2:45:41:76:f9:06:d0:
         fb:6e:c5:79:b5:cb:56:06:4f:a0:d8:bf:1f:4f:98:48:3f:ff:
         3f:f2:f9:11:be:98:98:79:a7:f9:dd:df:77:73:a5:2e:16:df:
         ea:c6:34:da:f6:41:38:18:59:a3:80:1e:5c:57:f8:f7:08:b2:
         35:5d:71:09:6a:20:04:a5:13:d2:a5:31:07:e3:d5:47:d7:fc:
         18:2f:68:19:e2:2e:1b:e3:bb:e0:77:99:35:f9:64:95:9b:0a:
         77:6e:3a:6e:a6:56:78:f2:7d:5c:33:f3:cc:37:2b:07:35:90:
         79:5b:3c:dd:10:f2:6e:b0:51:65:a3:fc:5c:61:ee:4d:6b:90:
         6f:73:0b:b2:37:21:d3:12:5b:fc:69:fd:aa:14:bf:6d:72:1b:
         d7:89:57:2b:a3:2d:83:4e:d0:6f:93:35:09:23:15:18:bd:ef:
         21:fc:04:8b:bc:cc:f4:58:1d:8b:e8:e7:b7:b1:90:99:7f:78:
         2c:a7:e4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:53 2025 by rpki-client