Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
File:                     s30V5DRw7wodxwEHQ5P-cPLfjQY.mft (raw, json)
Hash identifier:          pBJiUe/M6bVuei7XUMZQM6xb2lCp9w2L7queT5lMF7Y=
Subject key identifier:   1A:78:E1:AD:1E:01:73:B3:19:95:A1:40:AA:1C:78:E4:7F:7A:41:81
Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
Certificate issuer:       /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Certificate serial:       019893DA97FD89A4070BB0CBD7895BFA70D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
Manifest number:          06EC
Signing time:             Sun 10 Aug 2025 12:00:33 +0000
Manifest this update:     Sun 10 Aug 2025 12:00:33 +0000
Manifest next update:     Mon 11 Aug 2025 12:00:33 +0000
Files and hashes:         1: htjbCi_8qWneZo93vjbuIGh7N8U.roa (hash: g/IDR+6xEAPBW47ZPcz7WOY/otLteI/yTBnpVyBmbgA=)
                          2: s30V5DRw7wodxwEHQ5P-cPLfjQY.crl (hash: HZ1+47Fbg2A80izeKPn4GKWj4hMrLSnt7IB2CwNDDIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:da:97:fd:89:a4:07:0b:b0:cb:d7:89:5b:fa:70:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
        Validity
            Not Before: Aug 10 12:00:33 2025 GMT
            Not After : Aug 11 12:00:33 2025 GMT
        Subject: CN=1a78e1ad1e0173b31995a140aa1c78e47f7a4181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:df:02:c5:c9:db:33:3b:e9:87:36:b1:ec:
                    02:84:18:1d:a3:f9:05:2e:82:64:5d:83:6f:21:d5:
                    50:fd:81:b8:52:a9:da:43:42:fa:69:df:f1:3b:4c:
                    69:c1:8a:56:eb:52:77:c7:a9:b5:a4:bb:84:19:35:
                    58:f6:ef:ba:9f:ce:3f:68:43:39:33:33:e9:db:14:
                    10:ba:12:6c:18:21:4e:ba:f9:07:c1:5a:b4:ad:99:
                    6e:f9:f1:32:99:2b:22:9b:c3:31:0c:60:62:10:53:
                    7d:84:d4:ba:5c:83:c7:5e:92:b5:5d:c2:93:cb:26:
                    c2:81:58:ef:62:53:37:8d:09:80:29:ff:a4:5e:de:
                    70:60:0c:c9:02:52:16:2c:28:cc:37:07:f4:79:af:
                    bb:74:2e:7b:1f:06:e3:9f:a9:2b:a8:ce:97:6a:13:
                    72:d9:60:ae:1a:69:91:8e:51:60:65:0e:a4:eb:b2:
                    b5:59:b5:41:62:31:eb:e7:79:3b:64:71:04:d2:a6:
                    c5:7b:97:cf:8a:c0:e4:e3:5a:42:c5:a1:0c:a7:2c:
                    76:76:d8:75:20:08:0a:a4:f9:7b:c0:05:d1:97:70:
                    e4:2b:01:5d:fe:6c:50:72:29:08:99:a4:94:e4:fe:
                    cc:f8:24:54:fd:b6:93:c6:ba:e4:7b:90:0c:1a:2a:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:78:E1:AD:1E:01:73:B3:19:95:A1:40:AA:1C:78:E4:7F:7A:41:81
            X509v3 Authority Key Identifier:
                keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:79:c9:5c:ea:ce:2b:df:19:b7:a0:6a:ea:05:b4:5d:cf:3f:
         fa:17:c1:cd:ef:ee:cb:c4:29:5d:da:ba:73:12:c7:6b:64:bf:
         75:26:cf:58:a6:2e:2d:14:96:86:d3:3a:59:c4:e4:04:4a:40:
         d1:bf:83:c5:ac:7c:03:67:33:44:6b:85:c9:b5:41:21:02:d1:
         d9:4b:68:52:f4:9b:66:c7:99:c7:2a:22:44:7b:12:02:7e:26:
         fb:85:ea:39:41:c7:ec:44:23:f9:86:49:c3:02:7e:a0:4b:bd:
         a4:91:fd:cc:7a:1b:b6:04:a8:f3:22:88:e6:9d:fd:aa:85:37:
         ef:b1:8c:66:f3:a2:76:a8:ea:93:2d:34:b9:98:5e:09:2e:81:
         c6:8c:bb:73:14:2a:17:04:96:f2:a2:18:25:ed:e8:15:c8:55:
         b8:67:8e:ff:4d:0a:44:25:a5:8e:47:e1:e1:fb:79:12:04:a9:
         a6:41:68:2c:80:59:59:5c:27:fd:56:fa:db:0c:2b:da:7e:18:
         4f:cb:ae:02:bc:5a:f0:9e:2b:9b:06:f7:be:96:9c:16:6d:49:
         aa:f0:01:bb:ac:14:23:83:0b:21:61:fd:41:9c:5c:8b:b5:49:
         7b:54:cd:b8:94:13:09:b6:81:43:db:a0:ad:e4:af:f2:0b:59:
         1a:db:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:43 2025 by rpki-client