Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File:                     557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier:          nCIyMHZ1jmDKR6cIktImmFO8Prvg9w7lHmxOE8iPXb8=
Subject key identifier:   27:75:B8:C2:9B:F8:DC:D1:F6:03:6E:64:F7:07:2D:1A:EF:20:95:2F
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer:       /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial:       019873E2B61F601B1D3867CB2FF62B6C36C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number:          0AE8
Signing time:             Mon 04 Aug 2025 07:01:34 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:34 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:34 +0000
Files and hashes:         1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
                          2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: k+tdMRti0XzS3XS41HQBtjb5RhDdzLYpEIRkWqexPvc=)
                          3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:b6:1f:60:1b:1d:38:67:cb:2f:f6:2b:6c:36:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
        Validity
            Not Before: Aug  4 07:01:34 2025 GMT
            Not After : Aug  5 07:01:34 2025 GMT
        Subject: CN=2775b8c29bf8dcd1f6036e64f7072d1aef20952f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:90:a3:8f:0a:5c:16:d6:19:f4:2c:93:2a:e3:
                    1b:a9:fa:e6:93:36:d3:d1:01:f7:60:f6:ec:0f:3d:
                    86:c8:fe:11:3e:26:91:4d:ee:42:2a:f5:f6:ef:f0:
                    e0:28:35:bf:7a:88:f4:19:e0:d5:03:2b:de:63:3b:
                    93:44:e6:6a:72:c4:97:ce:ed:cf:6d:30:29:3e:e7:
                    8a:89:14:27:7f:6c:7a:e1:9c:eb:b6:cd:31:7f:49:
                    c1:14:3a:41:f8:f9:99:08:6f:6f:39:52:55:92:54:
                    0a:16:be:9c:5b:26:9c:73:63:2d:33:4f:97:5f:c3:
                    39:69:6c:18:3e:5b:38:7e:70:71:50:26:c6:38:ff:
                    6a:c4:c2:24:09:d1:88:1a:0f:36:68:27:10:75:5e:
                    37:69:cf:ed:d3:1b:3d:3d:d8:f7:a4:ff:dc:f3:e6:
                    4c:ef:c0:70:8a:44:6a:75:5a:77:1e:16:00:0e:82:
                    94:05:43:55:d1:fd:80:54:c0:f2:b4:8f:9e:d2:01:
                    fe:75:1c:a6:7e:d9:e5:06:fc:c4:58:b9:6b:04:f0:
                    13:0a:14:6e:38:9d:03:db:2f:f8:da:70:5d:18:27:
                    df:aa:e6:9e:62:05:89:96:6b:79:2d:67:b8:4a:bb:
                    aa:25:4f:47:8b:5f:48:cd:35:bb:9e:a9:87:66:53:
                    15:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:75:B8:C2:9B:F8:DC:D1:F6:03:6E:64:F7:07:2D:1A:EF:20:95:2F
            X509v3 Authority Key Identifier:
                keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:ac:1b:b6:42:27:05:a9:16:d7:f3:8a:47:b3:51:7a:c9:
         87:73:16:f5:b0:a9:5a:f4:0c:d3:30:db:17:ab:de:25:15:10:
         36:50:0b:d6:78:5b:78:73:ff:39:ac:c1:23:7c:56:27:1f:3f:
         79:65:79:aa:f1:c3:52:07:23:a8:39:38:2b:ff:3e:12:e9:a7:
         db:6d:9b:ed:60:e9:44:88:ee:f5:2c:03:e2:c9:32:68:1a:2e:
         ca:c5:ee:8f:fc:f0:8f:41:bf:d2:4b:6e:f1:5e:d2:97:c2:6f:
         ca:d7:98:7d:91:7c:7b:98:e1:19:6b:8e:07:56:3a:ae:4d:bb:
         24:e2:d6:47:5d:a6:87:a6:2f:14:c3:19:5f:10:6f:25:dc:d6:
         af:cb:1e:10:41:ff:5c:94:8c:ac:47:ed:e9:d4:1d:64:05:cc:
         c2:13:6d:cd:f3:43:d3:c5:cf:d5:8d:27:e9:60:ba:8c:f8:7b:
         30:df:7b:61:08:8a:fc:3f:e3:0d:e2:63:7c:1f:81:c2:58:73:
         06:56:5d:6a:c4:32:59:1d:87:24:fa:86:d4:72:69:97:a0:d5:
         43:39:29:27:d3:66:9d:fd:4d:ed:75:6d:07:4b:81:c6:57:eb:
         88:77:26:ad:ce:07:2e:87:8f:c8:c3:1b:6c:da:f0:83:1c:88:
         40:38:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:57 2025 by rpki-client