Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
File:                     pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json)
Hash identifier:          6Xftt4tdTkKHRUdc8XIIPHEpz2Fkegor3r+SAtaX1Yg=
Subject key identifier:   92:F4:EE:65:68:77:7B:6B:92:E7:9A:7F:17:99:11:D7:DF:FD:74:13
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Certificate issuer:       /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial:       019880C1DF3938FAFEC323B353ED29B06B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
Manifest number:          1019
Signing time:             Wed 06 Aug 2025 19:00:45 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:45 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:45 +0000
Files and hashes:         1: mxHqegiIzk-5yKnAa0W9InQ8xh8.roa (hash: 1T8S7F5C1unZ11xq+jwLnSOyvWawPuJqcLvoyNmvP44=)
                          2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: DHwsAbTbC/0gL/e69kMhgEURh6t6vNFYRPYncKw0z58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c1:df:39:38:fa:fe:c3:23:b3:53:ed:29:b0:6b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
        Validity
            Not Before: Aug  6 19:00:45 2025 GMT
            Not After : Aug  7 19:00:45 2025 GMT
        Subject: CN=92f4ee6568777b6b92e79a7f179911d7dffd7413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:6f:7b:1f:be:68:96:21:6f:c0:ef:62:25:
                    b9:65:07:81:1e:7d:03:80:49:03:8e:1b:a4:f1:92:
                    9b:9b:21:67:16:3e:12:77:6e:ae:7f:63:1c:a0:c5:
                    d2:0e:f7:b1:d1:9d:11:42:8e:8b:65:18:d9:ea:a4:
                    56:72:7b:d2:76:d2:ac:15:8f:ca:77:ab:76:84:9e:
                    58:98:ad:43:0f:33:6a:c6:d9:68:84:66:39:8c:b7:
                    a0:0d:50:44:ee:d0:d1:6d:ab:57:15:50:da:65:52:
                    a1:bd:e9:98:0f:8f:cf:53:c1:3f:71:70:5d:d0:77:
                    3c:c9:9d:6f:9b:0d:f1:14:50:02:80:23:74:07:82:
                    bf:05:6a:fe:97:be:d6:ea:10:a3:19:9f:3e:dc:df:
                    0b:29:6d:fa:d8:6c:b2:07:d8:a3:38:cc:17:5f:ba:
                    f9:d9:61:bd:84:f5:83:8b:ab:f9:d0:bd:81:7c:b2:
                    2b:b2:54:f1:c2:b2:25:30:c1:18:a0:93:55:20:1d:
                    3e:06:df:3a:33:7d:a0:bf:b9:71:d4:74:ba:f8:56:
                    5c:bf:56:04:f2:07:e5:05:d0:79:8f:c0:5e:4b:e3:
                    cc:90:18:0c:6a:a3:88:0c:cf:2c:0a:c1:f1:08:3a:
                    4c:f9:06:7b:ec:72:a8:8c:03:58:57:e9:eb:6d:5c:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F4:EE:65:68:77:7B:6B:92:E7:9A:7F:17:99:11:D7:DF:FD:74:13
            X509v3 Authority Key Identifier:
                keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:81:2a:e1:ab:8d:c3:b8:90:63:0b:58:b2:2c:f2:9b:dc:0a:
         c9:fa:24:cc:c1:c6:dd:45:c3:ad:87:d8:69:21:0a:27:b3:3c:
         9c:ed:e0:11:97:bf:97:31:fd:49:37:6a:1a:63:de:ad:4b:35:
         57:69:10:bc:c5:6d:9c:46:51:a3:c4:f0:21:3f:0b:c4:81:70:
         7d:6d:8e:af:d7:40:b9:ba:3b:7c:ca:f3:3b:74:01:43:70:09:
         ac:6e:3f:14:5a:80:92:77:17:fd:ba:cb:5e:5e:7c:f9:b7:8b:
         de:c0:fe:f5:d1:42:d1:c8:ab:0f:e9:63:86:09:3f:cb:e2:31:
         a7:8c:ad:db:c9:87:38:52:df:a1:9e:fb:64:f8:94:d1:a1:f0:
         26:da:0f:60:a3:69:1b:8e:fb:ff:e1:11:90:d6:63:51:cb:7e:
         89:8a:da:81:10:1e:3b:fc:b2:b4:95:a7:36:89:79:f8:88:84:
         a8:79:0e:00:e3:1c:cb:d9:87:62:b8:8b:ad:fa:df:2f:7c:d9:
         ca:ac:3e:74:f9:6f:92:6f:a5:14:c0:82:d6:24:68:83:82:42:
         f1:a7:ef:d7:1b:d9:93:b5:f1:3c:b9:ba:da:5b:01:08:ac:ce:
         e7:54:35:9b:36:0a:bd:b2:7e:26:2d:b7:23:3a:9e:ca:d6:bc:
         05:da:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:22 2025 by rpki-client