Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File:                     t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier:          tWlz1Fg3xXtx/HfJ93XalQgz7lvQbGxXjTwkz2FEQGY=
Subject key identifier:   0D:52:B1:56:07:2D:72:73:66:9E:E5:14:28:AC:4B:1A:45:C8:94:FC
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer:       /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial:       019873E276E961A2558D8EA8DFD0F9AF87D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number:          0AB7
Signing time:             Mon 04 Aug 2025 07:01:18 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:18 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:18 +0000
Files and hashes:         1: 96zfb_as6Uu1dQBioEPRjkMoH0A.roa (hash: ZbDgERbOZ82dnNJrpA+vEp4hFeMsEzejOuHoVOcv55k=)
                          2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: sL1put8kM80UMLuUd8nfqh5Slmi/kpGZF7l1TOknFqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:76:e9:61:a2:55:8d:8e:a8:df:d0:f9:af:87:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
        Validity
            Not Before: Aug  4 07:01:18 2025 GMT
            Not After : Aug  5 07:01:18 2025 GMT
        Subject: CN=0d52b156072d7273669ee51428ac4b1a45c894fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:1e:b2:9f:dc:2c:55:24:48:17:bd:5a:ee:
                    cb:40:d4:3b:bf:ff:e5:7e:7e:2b:14:60:d4:02:2e:
                    04:0d:9c:23:24:02:7f:e3:09:dc:f5:8a:bf:e3:25:
                    44:8d:48:51:b8:a1:5b:8a:d1:98:c5:09:e5:5a:c2:
                    0a:a8:72:e3:0b:7d:2f:59:e7:36:b8:e3:9a:15:d9:
                    af:20:51:0e:4e:de:a1:a4:dc:dd:21:87:89:f1:79:
                    bd:57:7e:29:f3:80:97:08:bb:a2:29:db:1b:f9:ff:
                    96:5a:bc:04:dc:99:1c:a4:bb:b6:8f:c7:57:4e:57:
                    7a:a4:03:cd:fe:52:e7:6a:c4:fd:30:ec:f2:d4:b1:
                    45:19:4c:80:c6:1b:1c:14:18:51:1a:c6:19:98:eb:
                    fe:be:31:fd:d2:ad:ad:34:16:23:54:18:80:76:d3:
                    1b:6c:55:a1:ad:71:88:86:97:42:4b:40:42:24:6f:
                    f5:b6:bd:ee:00:e8:aa:de:b3:23:45:3e:96:56:32:
                    57:bf:e5:d3:d4:73:a2:ce:d8:97:f0:3c:95:03:c7:
                    a5:27:c8:f7:6d:01:a7:32:10:98:62:28:ad:64:70:
                    47:fd:30:05:f6:e0:01:6b:5a:63:49:a9:67:99:01:
                    2e:33:c4:85:36:ce:96:c1:47:5a:17:94:cb:4c:b0:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:B1:56:07:2D:72:73:66:9E:E5:14:28:AC:4B:1A:45:C8:94:FC
            X509v3 Authority Key Identifier:
                keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:6a:62:0b:c2:32:79:ec:4c:4d:1d:58:f0:f0:c0:18:f2:ef:
         21:6a:db:43:1e:8c:47:04:2c:b5:fc:5f:a2:d1:30:47:fc:f9:
         b5:ad:9d:9a:f4:13:5a:d8:46:2e:1b:f5:e8:81:47:3b:63:63:
         93:02:36:54:f8:91:a9:aa:90:b5:1a:7a:26:a5:e6:4c:1f:c4:
         39:a2:49:52:16:3b:df:f3:9c:a8:94:8d:8e:30:e8:5b:d0:97:
         52:aa:a4:51:5f:c0:e2:5b:58:fd:bc:e4:46:97:a1:37:44:9f:
         17:8f:a1:a3:ac:d7:3b:6f:60:31:b3:5b:07:c1:b6:d1:fd:04:
         c4:09:69:12:1b:55:50:d8:ff:91:fc:db:10:95:6c:66:f3:51:
         fb:82:f3:fe:b8:68:bb:40:b5:3d:1a:01:43:c8:e0:23:cc:fa:
         b7:0a:6b:c8:e7:12:b5:93:d8:12:78:b3:1f:93:8b:42:26:40:
         7b:2b:c7:6e:4a:b1:88:c4:52:d0:43:12:39:35:49:fc:07:ac:
         94:c4:5b:73:84:f9:cf:c2:48:b2:18:e5:49:dd:b9:a6:0a:1e:
         aa:10:77:bb:6b:4b:25:34:dc:ce:32:cd:c2:a3:b9:a4:45:66:
         f7:19:8e:fb:86:69:13:ee:ad:c0:2d:e0:59:b9:64:c8:82:e3:
         e0:d4:c3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:05 2025 by rpki-client