Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File:                     MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier:          oU6zUKp859wCbrQM5Le1jfV0vCeBaGKwUQP90g0m8YE=
Subject key identifier:   CF:6E:6A:14:9F:49:3A:90:57:1A:BB:0D:6D:C0:5D:2B:84:4E:22:E1
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer:       /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial:       01987AF6C4CC150ED0AC54D3D2CCF9E1C93A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number:          0EA2
Signing time:             Tue 05 Aug 2025 16:00:49 +0000
Manifest this update:     Tue 05 Aug 2025 16:00:49 +0000
Manifest next update:     Wed 06 Aug 2025 16:00:49 +0000
Files and hashes:         1: 0IHmyTelW8zpO-_QdR9UfSEkXAI.roa (hash: UlYSOxczUbkdfKJ9miYaE+QEa9fb9mQhLOlffEgcsoY=)
                          2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: uhAa3SBpq6LRRqUBQvYuqdGFn24ls5puGTDj02PdqHA=)
                          3: PQvHlqxPOZ5EcVf6KsUmqrHycoQ.roa (hash: 3ksFdFv/Fa3gpXmdL0Lg1ZLkcfv0kVJRQQQ2mO5ywLk=)
                          4: ahJNP8kQoasOGfOn59FuyopzzTg.roa (hash: 6vRaJqB5sPcJZ3/fvcKuSD1RiGeRJgHPqC0FIBy6qGg=)
                          5: al6s6WgAHfcCaxm7dnRoKhGccgc.roa (hash: dELh70vEBgRpyjJwV+u67ZFF6OWlxJRy1hJNSwq3TqA=)
                          6: cz_i6inXtcUIjcIN9oJWb2HinvM.roa (hash: PQ0BLB4sI2B91vehL/dzDGr3GUpFGQqMElA5h/dx7n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f6:c4:cc:15:0e:d0:ac:54:d3:d2:cc:f9:e1:c9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
        Validity
            Not Before: Aug  5 16:00:49 2025 GMT
            Not After : Aug  6 16:00:49 2025 GMT
        Subject: CN=cf6e6a149f493a90571abb0d6dc05d2b844e22e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:fb:81:c0:86:55:3a:f1:72:02:ec:6c:3d:
                    02:f8:12:e4:91:fb:9e:86:56:90:00:6b:1d:b9:e0:
                    d7:2c:a3:c6:70:a9:ff:06:a2:2b:2c:81:df:d7:ac:
                    ef:2c:3e:ec:c1:8e:bd:cc:2c:6e:6e:fa:1f:61:56:
                    5d:0f:8d:45:55:a0:ff:b3:11:7a:fa:19:5a:61:e7:
                    94:a6:38:17:73:2b:17:12:d0:61:89:a2:8d:32:4b:
                    ce:2c:81:6a:90:4f:44:3c:c3:01:ff:3d:ed:82:47:
                    0d:71:28:8e:b4:31:04:f6:7e:df:29:e5:e2:d7:f1:
                    bf:ce:dc:f6:c5:8e:1f:74:4a:8b:77:3d:69:8b:d6:
                    68:38:da:07:dc:19:d6:db:38:9e:fb:9d:e0:0f:ed:
                    20:47:da:4b:27:89:d2:0f:2c:f6:6d:f8:53:61:ad:
                    69:5c:34:1b:a1:9c:db:41:01:29:60:fd:4e:9b:cd:
                    d3:6d:c9:65:d2:a0:1f:b4:01:a6:36:cf:ab:bf:48:
                    07:32:57:d9:0c:ee:1c:b3:0b:92:a9:ed:60:c4:ac:
                    b4:02:95:4c:90:d0:87:14:26:10:62:03:a5:ab:6b:
                    a8:2a:34:9c:23:28:5c:bd:41:76:75:8d:43:e0:27:
                    29:18:f0:1f:5a:f2:d1:75:8f:00:e3:2f:88:67:1f:
                    4a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6E:6A:14:9F:49:3A:90:57:1A:BB:0D:6D:C0:5D:2B:84:4E:22:E1
            X509v3 Authority Key Identifier:
                keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:bf:64:51:c5:94:9a:94:63:d9:b9:b2:03:31:cc:71:40:57:
         35:48:a7:53:0c:08:ec:40:e9:2d:ab:ee:74:21:a7:60:d2:5b:
         e4:1a:6b:15:1c:bc:78:6a:18:32:7f:5a:83:12:0d:49:19:ec:
         53:ee:7a:b0:31:d4:16:6b:f7:8b:a9:b9:c7:f2:26:9c:91:11:
         30:d7:4d:81:de:3a:76:1d:59:8b:cc:58:0c:68:97:d8:84:c9:
         4d:20:6c:4a:d6:09:d2:04:9d:e2:12:c7:64:c9:df:4c:d1:a6:
         0b:08:b0:a7:39:fb:34:e6:f9:3e:92:f6:7b:f6:77:df:4a:ab:
         b0:1d:0c:22:09:86:5e:6b:43:ac:da:3c:7b:d0:33:71:3e:16:
         ec:e5:d9:ef:e2:f8:e3:b8:43:6d:68:2c:6d:07:51:33:f0:7c:
         64:57:ea:92:c5:da:2a:eb:59:09:55:7b:71:44:81:d0:af:bf:
         f3:82:d2:2f:d4:96:cd:24:fb:0c:ee:49:f7:53:10:51:2c:b0:
         98:c8:5b:62:ad:c7:f2:4a:95:44:40:01:f0:bf:7c:62:ea:9d:
         75:4e:b4:d4:3a:6a:77:f0:95:d0:b5:30:50:ec:58:ec:6a:c5:
         bc:24:f9:57:49:f5:af:9d:32:2d:f4:98:9f:52:e6:3a:d0:78:
         b8:3f:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:16:45 2025 by rpki-client