Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
File:                     73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json)
Hash identifier:          nQSTnwOdQk+PRpQswVvtshyr2sHpI1ShjHu7OYH8/Jw=
Subject key identifier:   50:65:7E:5B:F5:89:8A:30:DC:F9:19:E7:F3:B3:CC:80:6E:1F:1B:30
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Certificate issuer:       /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial:       019872CF2458F113B481303E4494BB2BE041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
Manifest number:          0BDE
Signing time:             Mon 04 Aug 2025 02:00:34 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:34 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:34 +0000
Files and hashes:         1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: m96mwh3KkuXpx8/r8xqwwWVa9n4V8zJFrUYTQu4NR4A=)
                          2: uuMH9xwnTCchffmAJa-oKrLfAYc.roa (hash: gi00uqlY9uodrepVtMPHWYj2E0gYu71bOvNoVXlRiVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:24:58:f1:13:b4:81:30:3e:44:94:bb:2b:e0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
        Validity
            Not Before: Aug  4 02:00:34 2025 GMT
            Not After : Aug  5 02:00:34 2025 GMT
        Subject: CN=50657e5bf5898a30dcf919e7f3b3cc806e1f1b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:37:ae:c4:54:68:f9:ce:50:c0:cc:23:eb:
                    d7:7d:d0:94:5b:f4:21:39:63:86:a8:7b:39:18:24:
                    5f:6f:96:a6:26:f2:6e:79:13:c1:82:ed:56:7b:a7:
                    09:9f:86:78:b6:9b:89:7c:83:83:58:4b:cb:ba:e5:
                    6c:aa:ec:99:7e:f7:77:7b:c6:93:a2:31:9d:9f:38:
                    e9:d7:db:7b:34:53:1c:25:f5:bb:51:e7:0f:c2:48:
                    a5:a1:18:0d:2f:bf:66:0b:54:73:99:45:23:b5:30:
                    ff:25:3f:22:52:5f:e2:a9:12:d1:a8:2d:68:5e:27:
                    0c:f5:e8:cb:6f:48:fc:c0:fc:e4:92:65:59:98:d1:
                    9e:b8:03:9b:2f:1f:27:31:2a:3a:92:a8:93:d4:af:
                    61:f3:87:52:f9:10:90:f0:40:11:81:8f:b9:db:3e:
                    fe:ec:49:31:4b:ba:ee:4a:1f:ea:cd:db:f9:24:67:
                    6f:93:1b:57:bc:81:52:48:86:a5:4f:1f:21:b6:e6:
                    24:b0:2b:13:95:82:62:fa:07:68:76:af:79:46:34:
                    73:7e:27:20:22:d3:cd:83:68:39:d8:fb:25:64:20:
                    80:ac:21:f0:d3:95:06:87:20:0b:bd:fc:92:1b:d6:
                    28:55:c5:13:94:1b:7a:b6:95:e3:77:6a:19:12:51:
                    c3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:65:7E:5B:F5:89:8A:30:DC:F9:19:E7:F3:B3:CC:80:6E:1F:1B:30
            X509v3 Authority Key Identifier:
                keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b6:15:77:14:c3:4e:62:b4:52:9d:6c:7b:0e:e3:a7:37:14:
         09:b8:f8:d3:b9:bf:c8:a2:b5:7d:a3:df:aa:5b:83:d0:0e:36:
         9f:a5:0e:c4:3e:37:bc:ea:5e:60:90:b9:5c:3b:46:e4:b5:a9:
         6a:63:dc:85:17:6e:e5:d9:14:89:52:5b:17:51:1f:cb:07:bb:
         ac:37:f1:2f:08:79:f0:a9:5d:b8:09:da:30:88:e3:5b:6c:be:
         9b:4d:d5:85:ab:19:a8:31:fd:03:c6:99:d1:b9:fd:00:45:1a:
         bb:d5:7a:5d:2e:8d:e5:3b:ba:f1:4f:45:eb:11:e0:06:cc:89:
         0e:de:d6:11:74:d7:15:11:7d:4d:ed:c2:ca:cf:94:47:68:43:
         5b:ee:24:67:97:2d:58:2b:94:15:2d:8e:0d:da:a2:e9:2f:18:
         85:d6:b3:71:ad:86:d7:45:d1:28:d6:bd:3c:b0:df:9f:f8:cf:
         b1:15:64:34:30:f5:d2:5e:ca:ab:86:f5:34:05:5b:f4:99:38:
         8e:9f:f4:a9:cc:de:ec:32:c4:1d:24:3d:a5:e2:98:e8:d4:aa:
         c3:7c:a6:53:81:6f:75:b0:8b:dc:54:ac:bf:b1:88:89:db:16:
         5b:9d:a1:bb:e6:e8:1c:07:ff:ca:b7:4e:45:ef:fd:c6:4a:42:
         6a:0d:40:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:06 2025 by rpki-client