Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File:                     5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier:          t1nL06aI9u0HTIJppnWoUqDLQkc9kMhwFDRbpF4z57E=
Subject key identifier:   58:F3:0D:A3:BB:41:AC:30:06:FB:25:1B:69:9A:2D:24:F8:02:AB:2C
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer:       /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial:       019892FF6D4B9F7068DAA94B07D0907B1A27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number:          0C7E
Signing time:             Sun 10 Aug 2025 08:01:09 +0000
Manifest this update:     Sun 10 Aug 2025 08:01:09 +0000
Manifest next update:     Mon 11 Aug 2025 08:01:09 +0000
Files and hashes:         1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=)
                          2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: Y7vcyRUrV+EYqiRKAoCqcYSpqfXXYaVggy6HGTofUUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:ff:6d:4b:9f:70:68:da:a9:4b:07:d0:90:7b:1a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
        Validity
            Not Before: Aug 10 08:01:09 2025 GMT
            Not After : Aug 11 08:01:09 2025 GMT
        Subject: CN=58f30da3bb41ac3006fb251b699a2d24f802ab2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:83:d7:da:d7:4e:48:ad:11:0b:bd:01:df:
                    f2:8e:b5:21:1f:49:bf:a8:75:0c:f9:96:97:50:d1:
                    b9:dc:d7:6d:47:76:44:21:00:46:b5:bc:9f:3e:53:
                    2c:b6:3b:f8:71:ed:9e:80:d6:7c:1b:21:f4:df:2c:
                    86:5e:cf:af:92:cb:8b:a4:57:c2:72:b6:34:64:9c:
                    04:89:98:35:b8:1e:20:8b:72:a5:c8:4e:db:8b:8c:
                    6c:61:4f:94:70:0b:14:f7:96:86:d0:6d:e2:e0:0b:
                    5b:37:28:73:7d:9d:52:31:cf:b7:d0:7c:f9:15:2b:
                    ca:1b:14:9b:25:64:fe:55:35:a1:3e:64:f5:ed:e1:
                    36:9f:9b:f3:1e:b9:97:97:45:64:cb:51:2e:9f:2c:
                    fa:e9:e7:15:21:6d:8b:93:3e:11:38:ff:d8:5d:31:
                    94:6f:71:87:0e:85:a1:4d:60:04:a2:cd:79:7c:66:
                    6d:e6:b0:0a:03:0d:da:1e:67:56:1a:cd:23:3f:55:
                    e3:03:f2:7d:e6:e5:8d:82:eb:c4:4e:82:ba:5f:1f:
                    d8:7d:42:fd:f4:c3:01:7a:33:7c:61:be:ba:46:75:
                    43:29:18:48:f7:5e:37:3a:0b:ce:aa:b5:b6:5e:9d:
                    d9:37:12:ff:75:df:f8:aa:92:96:6b:c8:a3:70:67:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F3:0D:A3:BB:41:AC:30:06:FB:25:1B:69:9A:2D:24:F8:02:AB:2C
            X509v3 Authority Key Identifier:
                keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9d:3d:44:5d:90:68:8a:93:68:1e:81:4e:2b:d9:dc:cf:a1:
         d4:02:13:27:53:18:d9:96:c5:e3:7e:ce:f7:1d:13:74:f6:51:
         27:24:99:2f:73:b0:50:26:9c:66:c4:43:26:31:04:cf:9d:4a:
         29:41:82:90:91:0d:fc:e2:ce:31:40:17:66:ef:e9:7c:3c:e0:
         9e:c2:c2:aa:f1:df:b3:a6:95:3e:8a:91:55:fe:dc:9a:01:2f:
         f0:70:c9:08:a4:78:5b:d0:e0:03:aa:ba:de:7a:be:4a:bd:20:
         1e:69:2d:b7:74:01:35:b9:ff:7e:32:86:a7:cd:fa:4a:99:7d:
         3b:2a:4d:db:d7:0c:eb:86:82:ab:75:52:cd:8d:45:27:29:88:
         f1:ba:54:7a:df:83:cd:fe:12:a5:48:dd:f6:38:a9:ed:41:85:
         45:83:44:59:f3:30:23:fc:63:1d:19:65:66:c5:e3:08:8b:6a:
         84:ff:2a:08:c9:9d:17:28:f6:19:d4:90:90:7b:5e:70:0f:56:
         05:f8:3b:4d:18:df:4a:bb:6e:b4:0d:dd:8d:88:53:3c:fe:fd:
         e7:be:9f:bf:92:c5:45:ab:95:ad:f7:df:be:8a:cb:6e:b8:a3:
         15:3a:0b:2d:c0:78:f8:8d:15:9f:5c:8a:61:1c:a9:69:4d:7c:
         b0:a2:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:41:34 2025 by rpki-client