Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File:                     tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier:          0uYQYutSqhpmZefsB6vlAoUGIi7glI4kWrWLcblC1Ow=
Subject key identifier:   D3:1A:12:F5:6E:C5:99:81:69:21:8B:E2:71:05:60:66:84:36:6C:C2
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer:       /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial:       0198737430DD6652AC6D847FFB0933194005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number:          0C7A
Signing time:             Mon 04 Aug 2025 05:00:51 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:51 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:51 +0000
Files and hashes:         1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=)
                          2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=)
                          3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: zQLt/6lTo5Ytv8GiCCfI+KSNTaB977ar0NFsBNRa7Wo=)
                          4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:30:dd:66:52:ac:6d:84:7f:fb:09:33:19:40:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
        Validity
            Not Before: Aug  4 05:00:51 2025 GMT
            Not After : Aug  5 05:00:51 2025 GMT
        Subject: CN=d31a12f56ec5998169218be27105606684366cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:b4:e5:48:80:7c:95:0e:96:9f:82:d8:91:
                    50:ce:76:49:73:a0:62:bb:2c:ff:4d:0c:b8:05:df:
                    c3:60:53:6d:b0:e6:f1:f6:20:72:d0:25:0f:07:cd:
                    11:5a:9d:ae:83:ee:84:46:43:bd:05:18:25:9f:b9:
                    96:dc:f8:72:6d:45:e5:4d:2a:a9:40:71:02:15:ea:
                    87:c9:8f:09:18:88:b9:ca:cd:a7:58:a9:5c:83:88:
                    46:31:c1:9f:de:a4:cc:ad:a4:2c:a8:d3:14:47:23:
                    fb:71:f0:73:5b:32:d6:c1:ac:b6:d8:b5:74:60:32:
                    b9:d8:5b:57:e4:73:8e:08:f1:6a:61:87:c1:83:ba:
                    16:86:cf:b8:b3:2a:0f:3e:4b:69:b1:08:d5:f9:6b:
                    5a:e3:50:2d:c4:51:8b:0c:f9:85:49:cd:c2:35:43:
                    93:e8:b4:35:c0:3c:d9:cc:3e:a8:3e:36:58:f4:f3:
                    f4:07:67:d5:04:6a:c9:c9:53:02:1e:cf:19:58:ca:
                    b7:92:f5:c3:fb:b4:6a:d0:3d:a3:05:d3:62:38:8c:
                    09:f2:bf:1d:8c:73:59:6e:af:72:ce:72:30:54:b6:
                    95:f9:0d:74:02:50:1f:56:6a:9b:64:dd:8c:d7:de:
                    27:06:5e:ee:47:85:96:9f:25:89:dc:f7:44:95:1d:
                    8a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1A:12:F5:6E:C5:99:81:69:21:8B:E2:71:05:60:66:84:36:6C:C2
            X509v3 Authority Key Identifier:
                keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:be:5b:21:7f:2d:96:05:82:d4:90:80:a0:ce:20:d0:b8:66:
         94:11:f7:2d:d7:5a:89:00:4b:e4:42:e8:34:73:be:60:50:81:
         f6:87:82:74:67:fb:26:a7:20:a0:ed:ce:4d:93:e2:35:c5:77:
         d1:91:06:4e:b3:b8:94:24:c7:a2:b1:44:53:6f:7e:77:08:0b:
         dc:32:19:33:32:ff:a9:1e:4d:e9:75:06:65:e3:62:23:35:ae:
         12:42:dc:04:a3:78:ab:83:5c:8f:0d:bf:43:3f:d3:7f:d8:d6:
         cc:1f:09:87:f6:d1:cf:d5:b4:4d:36:1f:d8:db:4b:ae:90:3b:
         4a:c3:af:8e:34:67:b9:c2:99:e7:d6:9e:4e:7d:25:6a:85:5f:
         9d:f0:16:30:e8:72:94:1b:23:ae:01:6c:a4:a2:c6:9e:7e:10:
         16:d7:d7:5d:47:ea:1b:1a:73:5c:de:90:d7:86:39:f2:51:76:
         04:60:de:e5:e1:ee:92:e0:d5:a7:29:92:0c:85:b9:b4:d5:22:
         57:d2:43:19:b0:a3:5f:5e:50:64:66:d0:ef:05:6d:b0:52:87:
         9a:72:db:09:9a:da:f8:4d:e1:15:89:94:82:a7:4a:76:68:08:
         24:ac:b1:27:67:54:57:95:2a:62:82:18:05:6a:65:4c:db:1e:
         58:e0:58:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:48 2025 by rpki-client