Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File:                     dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier:          19F1NOTRzTlTV4Ss9adeG6wvhKlqaHauIGA9tCOE0Sw=
Subject key identifier:   DD:9C:E6:88:EF:0A:AB:A5:06:70:1A:E6:6E:02:A1:E9:0E:0C:66:6A
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer:       /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial:       01988FFE15913135EA1A654988077424E32D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number:          0A90
Signing time:             Sat 09 Aug 2025 18:00:50 +0000
Manifest this update:     Sat 09 Aug 2025 18:00:50 +0000
Manifest next update:     Sun 10 Aug 2025 18:00:50 +0000
Files and hashes:         1: Zeibnx0jQfHrKCngsBYyNBtyCY8.roa (hash: 1tTIgh7rGioAClAEx5jMHBx5r9sM7mmraGPRQnv9pR0=)
                          2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: oJGtkpAF5u/dvtdA90O8nVzQQcGalQoJ0081H53ITf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fe:15:91:31:35:ea:1a:65:49:88:07:74:24:e3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
        Validity
            Not Before: Aug  9 18:00:50 2025 GMT
            Not After : Aug 10 18:00:50 2025 GMT
        Subject: CN=dd9ce688ef0aaba506701ae66e02a1e90e0c666a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:f1:ae:77:82:83:33:f3:9e:26:22:43:02:
                    1e:36:6b:7d:c0:92:8b:ae:78:9e:05:ce:76:af:f2:
                    52:0e:5c:ff:93:01:9e:c8:47:4b:3d:cc:0a:bc:fb:
                    59:73:91:53:7d:80:62:0e:fd:ba:92:71:93:ed:fe:
                    fb:e0:1a:4d:fd:1d:76:a3:b9:eb:e5:f2:33:f0:bf:
                    6b:53:a7:aa:15:c9:bd:c7:71:64:5b:c4:5a:8e:79:
                    77:9c:41:a8:a4:69:8b:83:ac:20:a7:cb:2b:70:ff:
                    aa:46:6b:0c:f8:d7:54:b5:33:6c:4f:51:ec:37:78:
                    3e:e6:43:43:cb:63:66:93:3c:c7:13:f8:62:bb:8f:
                    41:4a:84:7e:dc:f9:78:2b:a6:60:f2:78:46:69:76:
                    3d:6f:37:a5:c0:04:e2:83:75:04:05:98:e9:6a:00:
                    06:a3:6b:f6:a1:c9:6b:aa:69:eb:74:93:39:36:f3:
                    ca:5f:bc:73:f9:60:3f:30:ac:fc:fa:e1:09:10:9d:
                    f4:4d:72:87:aa:77:36:cb:d2:62:7f:4e:34:aa:28:
                    0b:cd:18:79:fc:0e:8f:86:0b:2e:6c:10:e2:ed:55:
                    46:11:61:af:35:6a:e2:e3:c9:51:fc:13:70:b6:37:
                    48:c7:e1:8d:f5:7f:26:58:70:1e:77:f0:35:70:77:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9C:E6:88:EF:0A:AB:A5:06:70:1A:E6:6E:02:A1:E9:0E:0C:66:6A
            X509v3 Authority Key Identifier:
                keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:2f:a3:0e:59:45:39:eb:4b:51:e4:83:ab:e3:5f:f5:71:00:
         bb:ba:9b:86:dd:9b:e0:6f:c6:db:74:28:db:41:07:90:9e:c8:
         b8:31:b9:35:01:a6:d2:4e:d1:f1:34:e6:28:5f:7b:13:60:e2:
         9a:8c:a8:c2:8c:71:67:b0:ed:c3:e8:ea:fa:04:4a:d9:ec:5d:
         b5:56:32:d2:ea:22:58:0e:bb:b6:e9:0f:31:1a:b9:97:fd:ee:
         b5:85:fa:7e:7e:45:84:51:9a:dd:f9:be:55:63:a2:a2:4f:e9:
         87:76:74:31:c0:8b:fd:ec:2a:d8:2c:dd:85:e2:fc:65:55:3e:
         30:6c:2f:c0:32:4c:32:dc:43:20:31:57:ed:9d:6a:0a:0b:21:
         38:f6:97:95:82:8b:e7:06:d4:7a:01:7c:0d:18:35:fd:38:b8:
         10:93:62:76:1a:e0:11:57:d1:34:ab:8e:11:4c:df:99:28:86:
         7a:f3:79:17:d7:ab:0f:9b:34:5a:15:eb:db:80:00:8a:76:4a:
         95:b5:0f:62:1d:73:77:dc:34:94:56:b1:31:de:43:57:f5:77:
         d0:8d:83:66:db:64:3f:36:07:1b:0e:8b:53:a3:a6:3c:b9:bf:
         75:13:ed:4c:85:51:70:7d:fb:e3:2f:75:70:ba:6f:68:4c:9d:
         75:d6:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:33 2025 by rpki-client