Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File:                     mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier:          awRfFYkQLpkmIsAFCwyaeBR64FFiG+4NRtGvAHqRkco=
Subject key identifier:   38:6C:0C:78:8A:DD:EA:A3:C1:1A:52:1D:90:0C:ED:A0:20:BE:06:C8
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer:       /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial:       01988BEA5F78B498474BF2A04E46402A026B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number:          031B
Signing time:             Fri 08 Aug 2025 23:00:49 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:49 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:49 +0000
Files and hashes:         1: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (hash: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=)
                          2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: w9G3IYsT34fzZWTyQEILrvibMrlL4fEIR8YBDlzKtFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:5f:78:b4:98:47:4b:f2:a0:4e:46:40:2a:02:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
        Validity
            Not Before: Aug  8 23:00:49 2025 GMT
            Not After : Aug  9 23:00:49 2025 GMT
        Subject: CN=386c0c788addeaa3c11a521d900ceda020be06c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:22:f6:80:5d:44:32:e7:c7:a8:75:8f:8f:
                    58:06:a2:6a:0a:dd:fd:3f:5a:5d:7c:0e:39:78:3c:
                    cf:df:89:14:04:2d:ec:42:ca:4b:e4:1d:25:08:a1:
                    10:7d:ec:2e:05:36:92:0a:35:4f:40:a4:5e:ea:1c:
                    7c:a4:75:53:7b:10:1d:f6:e5:c7:ac:9b:f1:9b:64:
                    88:10:55:c0:1e:18:45:be:f9:3b:9d:66:d3:44:eb:
                    36:9a:71:51:63:f4:d9:c1:14:29:5d:9e:58:27:c4:
                    17:00:bc:92:2e:21:07:e5:46:db:61:93:df:15:11:
                    82:56:f6:b7:8e:9e:90:59:ff:61:2f:17:7e:20:57:
                    7c:ec:49:1b:b5:5f:b6:a5:52:84:d6:95:85:2a:f5:
                    5f:0a:a1:01:9d:41:7d:77:fb:d1:da:a8:a5:d9:86:
                    7e:0a:64:13:a4:c0:83:b6:0b:e7:ad:74:03:3b:8b:
                    70:82:d2:d8:9c:f6:34:3a:1a:6e:fa:8b:c0:96:f9:
                    27:e2:4e:6e:90:a5:f5:6f:09:9f:b3:25:07:34:2a:
                    49:26:8b:2b:9c:c5:6b:68:a1:c2:69:21:09:06:7a:
                    6b:75:26:6b:6b:6d:30:bb:42:b6:9a:f0:02:c4:f9:
                    49:2d:e0:a2:11:6d:48:46:d2:ea:1a:bd:f9:ae:49:
                    98:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6C:0C:78:8A:DD:EA:A3:C1:1A:52:1D:90:0C:ED:A0:20:BE:06:C8
            X509v3 Authority Key Identifier:
                keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:30:33:2c:c5:4e:a8:4e:b9:98:2f:f3:8e:6f:4c:be:86:42:
         b7:cf:4e:e8:38:3c:46:4e:ec:9f:28:c6:9e:96:76:62:19:23:
         86:dd:a5:3b:a3:f8:fa:be:6b:6f:ea:0d:b4:d4:63:92:e2:6c:
         31:6a:61:c4:78:55:e9:0f:23:67:cc:4b:69:ee:fb:99:e1:05:
         4b:a2:25:56:4e:f2:95:c6:43:45:19:be:1d:eb:9c:31:d5:e1:
         2c:6a:e2:78:eb:59:05:64:2d:46:f7:3f:9c:8d:2d:4a:b7:17:
         b8:12:ca:ac:4b:b8:bc:0e:bd:5f:a6:e0:75:36:ee:9c:04:e2:
         e7:aa:0b:89:11:b4:9d:59:47:37:60:6c:20:14:dc:c9:64:3c:
         c3:f4:97:dc:e6:e2:6b:d9:3d:3b:1e:ce:07:b1:36:73:79:b5:
         26:ee:33:cc:c8:24:28:6b:b5:52:c7:c7:ae:8c:da:90:55:b9:
         df:39:3d:7c:c9:70:61:b6:2c:f8:7b:a8:cf:f4:e1:fb:af:35:
         19:07:0a:19:60:e6:3d:01:c9:f7:d8:a1:16:5b:1b:07:d1:bf:
         86:5b:b8:03:13:c7:a6:03:c9:3f:5c:5e:d9:d9:c7:9d:f9:09:
         4c:33:16:e6:e6:5b:cc:65:ed:de:3f:a4:f6:48:b9:a8:db:ab:
         8d:45:36:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:33 2025 by rpki-client