Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File:                     77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier:          hJT7KKa4fira0LFoQ1DJdMQEHgY3SovLJQA/r/r92u0=
Subject key identifier:   AC:87:60:1A:30:2A:4F:B2:6B:93:75:9C:9B:EE:CD:9B:29:E9:BC:BD
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer:       /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial:       01988D6A83E41A6F0AC7ACE84F4ECEB3494B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number:          0DC6
Signing time:             Sat 09 Aug 2025 06:00:24 +0000
Manifest this update:     Sat 09 Aug 2025 06:00:24 +0000
Manifest next update:     Sun 10 Aug 2025 06:00:24 +0000
Files and hashes:         1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: gy6126QjO1N38O7AsZYJBQQz58jf1xpM1+0tGpNTqEk=)
                          2: ONW_HHb2ZjsySF4n5zNLufP_Ugo.roa (hash: Fs9suOzCDzlX3MVkt67omPbuhLWfHekY4xcrsMfgW7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:6a:83:e4:1a:6f:0a:c7:ac:e8:4f:4e:ce:b3:49:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
        Validity
            Not Before: Aug  9 06:00:24 2025 GMT
            Not After : Aug 10 06:00:24 2025 GMT
        Subject: CN=ac87601a302a4fb26b93759c9beecd9b29e9bcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:b2:06:55:ae:c8:e5:eb:7b:a1:20:51:fe:
                    c6:e7:37:ef:97:f8:7a:4b:0f:d5:1a:2e:d6:dd:04:
                    db:29:6f:52:48:4b:58:03:1b:de:87:c9:bc:e3:0a:
                    45:75:2b:4d:81:3e:57:ed:4b:17:d2:16:a4:bb:05:
                    c3:fd:8f:3b:dc:46:93:62:ab:30:63:2a:8a:fa:1b:
                    27:fb:5a:a9:23:ea:70:01:47:1f:7d:1b:a8:d2:25:
                    8c:99:c5:d9:83:00:4c:a1:32:c8:66:c1:08:4b:b8:
                    ad:f0:fa:0d:e6:a3:44:a3:b2:bd:d7:95:fa:26:4b:
                    56:9c:f2:75:9f:63:46:96:a2:36:ea:dc:10:f5:da:
                    ed:91:82:46:71:1b:55:82:6d:eb:b3:1b:29:ef:d0:
                    b6:07:d5:3f:45:71:31:49:b0:36:2b:81:5a:bc:de:
                    cd:9a:92:74:05:56:a4:1e:97:50:1d:c7:a1:d4:30:
                    62:e0:86:42:c9:57:ab:60:71:1a:fe:1b:de:38:c1:
                    57:f7:6d:a6:53:ec:36:e4:7c:a3:7f:ef:d1:7e:f7:
                    8e:4a:12:3b:91:4b:dc:24:1e:c0:a4:6d:79:bd:04:
                    ab:04:fa:d0:ac:c9:f3:96:0f:b3:4c:dd:61:7b:b4:
                    93:f4:ef:85:69:1c:4f:6c:c5:51:51:af:80:84:02:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:87:60:1A:30:2A:4F:B2:6B:93:75:9C:9B:EE:CD:9B:29:E9:BC:BD
            X509v3 Authority Key Identifier:
                keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1a:70:6e:04:11:ab:3f:01:2b:ac:74:15:38:36:c7:19:0e:
         0e:44:2f:59:60:26:e2:85:93:40:da:47:e7:65:b7:a0:a2:9a:
         eb:bc:68:d2:d1:6f:fb:14:1c:d6:51:19:8f:ec:97:a6:24:4c:
         60:62:9c:af:3c:92:ba:2c:37:d4:ba:86:07:fb:8a:bc:29:7c:
         0f:f7:fa:a4:44:38:12:12:c1:c8:3e:62:07:e9:5b:98:79:6b:
         c2:be:d2:30:c0:04:7a:61:68:c7:67:0e:bd:8f:9a:a0:d8:82:
         55:61:57:0c:eb:d3:21:89:9f:4a:86:cf:e4:76:a0:96:bb:ee:
         9c:9c:fd:23:97:14:fa:61:fe:88:56:18:9a:16:5d:ec:52:24:
         98:02:99:1d:4f:57:11:34:ac:9b:2d:a4:8b:49:dc:52:5d:89:
         f0:c2:59:95:93:03:40:de:b4:4b:c6:e4:b9:53:19:51:31:50:
         14:9c:f2:1b:4d:f3:79:a3:a1:48:3d:37:e3:62:07:bc:87:d4:
         b5:7f:0b:0c:67:3f:2c:26:c8:52:2f:97:19:71:48:03:ef:18:
         8e:4b:04:43:aa:9b:42:97:4c:e1:26:8b:1f:a3:cf:67:b8:1c:
         c9:40:c1:10:24:45:8c:0c:be:cd:e3:ba:c7:57:a8:f8:67:8d:
         0e:1b:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:29 2025 by rpki-client