Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
File:                     0lYiRXob4zoBJYhmoGfgRH39iWQ.mft (raw, json)
Hash identifier:          9Ble27i8dXY0sZEakVBl1B06UJ72UwNCja4+WJHRuf4=
Subject key identifier:   27:3F:B5:18:69:4F:67:AF:5E:57:F5:3F:F1:55:05:A1:73:EA:8C:07
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Certificate issuer:       /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial:       01987D1BFC17DB6E2D74EC114BA8256A5E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
Manifest number:          08E7
Signing time:             Wed 06 Aug 2025 02:00:42 +0000
Manifest this update:     Wed 06 Aug 2025 02:00:42 +0000
Manifest next update:     Thu 07 Aug 2025 02:00:42 +0000
Files and hashes:         1: 0lYiRXob4zoBJYhmoGfgRH39iWQ.crl (hash: n4wEa4zoGvMQTKManvH1feRr39JIu2HQ1wo0QhNK8/w=)
                          2: 1-8dBe3weDEH5lmPUfaCTy1F_iQ0.roa (hash: Usc03D+6sIRxj8MO/R5pSlLN/4nGI6YHAGwKCty72xE=)
                          3: BZ6xhJfrN5RhRf6aXwKr795wQzI.roa (hash: Sf+y1lLm8gMUQKO4zkjlgPHIcjW4+YLH23G2t7sxkBg=)
                          4: POa1_1lG2fZrcfZRxbGnmzL6mIU.roa (hash: hZbXwNqNEsVBnStQz74wqfWaYd+uX0JeS3LWv9uiIFs=)
                          5: dOb6T3OXGQhPHEiptZe57ohMT40.roa (hash: GPGKsltxe4+qDNQ/6wiIDNbmlS41MFY6pNidlYOqIB8=)
                          6: p51-PJoT-E47Il5-C4i0wMvLMrQ.roa (hash: v6b35eBQ2NIYxUqWiW7LPB2L21OTBBy59B+EGu/7XOc=)
                          7: tfLXGQ5PJkMa3PshyPbQs6SgEew.roa (hash: 8rcVApOGw4v1UyjSDglLR5/i6c9sG5r3XdZlHqPb4QI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1b:fc:17:db:6e:2d:74:ec:11:4b:a8:25:6a:5e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
        Validity
            Not Before: Aug  6 02:00:42 2025 GMT
            Not After : Aug  7 02:00:42 2025 GMT
        Subject: CN=273fb518694f67af5e57f53ff15505a173ea8c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:96:49:e6:a2:0c:39:ed:7d:d9:ce:bc:86:
                    dc:08:f4:8d:7c:1b:7f:9b:78:c1:e3:10:d9:8a:f0:
                    70:bd:26:0c:81:d6:9a:f0:06:dc:9f:64:a9:f0:00:
                    8c:0e:7a:44:a2:cd:49:14:a8:21:27:35:cd:51:a6:
                    74:56:8d:ed:55:0e:ad:d1:f1:d9:63:47:4d:87:2d:
                    6e:02:42:cb:f3:f0:1b:57:d9:82:c6:dc:40:66:0f:
                    e2:42:14:f8:62:5a:ae:65:1d:77:64:69:81:cd:7e:
                    8e:e7:41:9e:c6:57:20:32:ed:40:39:a6:d4:1f:5f:
                    22:3a:45:bd:71:0a:5a:ea:99:76:6a:24:cb:ba:8c:
                    dd:a5:30:87:ab:33:15:f5:2a:62:04:63:29:53:6c:
                    e1:16:ef:0c:f3:fc:e3:9a:d8:c6:c7:47:f4:cc:e3:
                    d5:5d:04:86:1d:61:28:5b:00:59:36:d4:07:1b:68:
                    62:67:5e:81:bf:df:ee:b3:a9:4a:1d:b7:d1:da:b5:
                    1d:a9:db:d3:28:29:f3:a1:21:a8:41:bd:32:6a:c6:
                    70:11:f6:d6:c6:c6:47:3a:20:4b:46:92:ae:e4:21:
                    9d:67:88:d3:b2:6f:15:ef:bf:ba:c1:47:01:8b:70:
                    b9:c2:06:a2:f2:69:ae:af:57:50:22:d9:99:f3:8a:
                    a4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3F:B5:18:69:4F:67:AF:5E:57:F5:3F:F1:55:05:A1:73:EA:8C:07
            X509v3 Authority Key Identifier:
                keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:63:e6:86:2f:28:7b:cf:c8:a8:fd:3b:74:d6:b5:73:ed:c0:
         5b:d2:72:92:be:9d:69:87:94:b6:a5:1d:67:f6:12:bc:5d:fa:
         18:85:5c:4b:32:36:e3:8f:ef:b3:a2:e2:27:e8:86:fe:d8:ec:
         87:38:f4:a5:b8:4d:b6:ca:d3:55:55:17:bb:17:ed:be:67:5c:
         57:32:7c:c8:f8:4d:ee:0f:ef:39:69:6e:e4:d5:a8:d4:8b:3f:
         c3:f2:f9:56:71:dc:34:24:23:b5:b4:4d:61:1f:b4:75:83:26:
         b9:4a:de:a6:23:67:d9:5e:a0:96:b4:01:9f:df:41:e3:f1:30:
         76:4f:c5:03:e3:fe:f3:00:0e:c5:39:e3:40:dc:3e:3f:1b:f5:
         d6:f2:cb:ab:7c:bb:48:95:b9:7f:b5:d9:5d:67:8f:83:7e:fc:
         29:9e:3f:92:52:51:5e:cc:10:d4:f3:cf:9a:1f:9c:75:61:33:
         5f:3b:d6:b1:27:96:a5:d3:e6:33:91:4e:88:ac:e6:17:ad:20:
         d6:3d:72:d1:fb:d2:5f:14:21:bb:1d:14:16:42:e9:1b:96:18:
         06:85:b4:3c:f2:cc:f6:32:78:00:d2:a2:77:82:03:6f:1d:34:
         40:83:b2:42:a7:2b:48:9d:7e:44:c3:25:45:ae:14:c6:2c:fe:
         d4:98:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:58 2025 by rpki-client