Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          o10Hp79PBDg/6NYUUD6HJEtw39YxYyMvyPQ8CASBySA=
Subject key identifier:   74:7A:CB:02:A0:E7:25:45:5E:AE:B6:A3:BF:AE:AB:36:B0:71:F5:E3
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       01989E5E5CCF1AE50F405DCBD063E7656919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0C11
Signing time:             Tue 12 Aug 2025 13:00:40 +0000
Manifest this update:     Tue 12 Aug 2025 13:00:40 +0000
Manifest next update:     Wed 13 Aug 2025 13:00:40 +0000
Files and hashes:         1: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (hash: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=)
                          2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=)
                          3: Iel88vR033hS2mHZK9DcUHuaXsA.roa (hash: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: +bnU+frYzpt1EiWMR2Zev0pnRZGsuSLXsyxdzaqiSN4=)
                          5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=)
                          6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:5e:5c:cf:1a:e5:0f:40:5d:cb:d0:63:e7:65:69:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: Aug 12 13:00:40 2025 GMT
            Not After : Aug 13 13:00:40 2025 GMT
        Subject: CN=747acb02a0e725455eaeb6a3bfaeab36b071f5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:b3:66:c6:75:95:0c:67:00:0f:3b:db:db:
                    1c:bc:15:9e:bd:bd:82:f8:ba:92:2d:f0:3c:ed:cb:
                    86:d6:9a:00:03:c6:08:e4:68:e4:0c:d0:3c:0f:4d:
                    06:87:67:72:67:9a:9c:c1:cf:55:2d:f2:fa:ee:4b:
                    ae:45:6e:87:07:92:97:c4:da:2b:a4:a4:2c:a6:32:
                    10:29:d7:ec:e4:3c:29:1c:18:2a:50:d0:d8:58:78:
                    ca:c1:d8:5e:ac:02:00:2d:5c:e6:a2:ed:60:da:cb:
                    2e:bc:06:74:4f:11:54:50:21:a3:a4:48:fb:04:e8:
                    e5:77:81:3a:b4:f9:78:27:02:55:7a:e9:6f:64:f3:
                    58:37:04:41:b4:8b:d8:44:22:08:58:bb:ac:3d:16:
                    c4:3d:93:66:fa:70:87:5b:47:82:c2:d8:57:26:b0:
                    b9:ac:ec:27:01:6e:fd:dc:ee:e5:41:46:13:c3:23:
                    e5:c8:51:30:b3:1d:1e:4d:fe:85:53:17:66:df:28:
                    12:cb:09:e9:96:73:5a:29:0d:54:c9:1a:d8:9b:f7:
                    83:45:03:52:f9:00:9e:af:10:44:c9:f4:8c:56:19:
                    f9:45:be:87:fd:30:79:7d:9c:2c:11:39:d0:02:d6:
                    0a:19:99:3f:b3:a5:d9:1a:0f:8e:eb:99:a4:25:57:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7A:CB:02:A0:E7:25:45:5E:AE:B6:A3:BF:AE:AB:36:B0:71:F5:E3
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:aa:72:84:b9:7d:33:08:5d:bf:ca:59:05:ca:a1:8c:ba:ed:
         01:85:59:1d:0b:49:3a:61:a6:80:73:b5:2b:4c:b9:fa:ba:bf:
         fd:d3:73:c3:1c:e8:7e:ab:1f:81:ee:cd:46:04:30:ed:38:ba:
         a9:a6:16:d5:7f:8a:a4:8a:4c:65:65:81:7f:99:20:fa:cc:de:
         e3:03:6a:9b:02:95:d5:48:83:58:d5:25:41:02:fa:5b:12:0b:
         45:0d:27:13:1d:57:58:e4:70:8b:97:c3:db:8b:15:76:50:8c:
         f0:bf:c1:d7:50:85:d6:9e:8e:f4:8e:c1:57:a6:ad:1e:49:2b:
         f3:10:2e:0a:74:4e:05:86:be:cd:14:6d:5c:ec:84:da:45:e6:
         ce:27:59:95:98:31:04:8d:2d:8c:da:a1:79:ee:04:67:e8:90:
         43:61:85:7a:fd:a1:24:08:ab:4a:54:1e:af:01:e9:52:4e:d4:
         da:19:30:ae:bb:b2:ac:b5:a8:f3:ad:50:a5:87:bc:78:df:df:
         60:55:41:00:36:69:3c:aa:6f:ea:ef:a1:75:9f:66:b8:86:76:
         70:a1:63:ef:bc:34:4f:da:62:4b:54:3d:49:ac:3c:fa:3c:5d:
         90:9d:f9:d7:1b:d2:62:de:78:47:e9:71:d2:9b:5c:0a:94:32:
         87:74:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:18:30 2025 by rpki-client