Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
File:                     C6VqvctPbwyGuDLswT9eJJch1vg.mft (raw, json)
Hash identifier:          UvpNxd3V1ZAnckZsSvDjxEXnioNxo1Nwxc1+eqfKDfM=
Subject key identifier:   B2:26:0F:D9:88:32:4E:53:BE:55:C2:2D:28:1A:C8:3F:BA:D9:95:5F
Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Certificate issuer:       /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Certificate serial:       01989034AFB91BA0BC924ECA9B3D99740A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
Manifest number:          0CCE
Signing time:             Sat 09 Aug 2025 19:00:28 +0000
Manifest this update:     Sat 09 Aug 2025 19:00:28 +0000
Manifest next update:     Sun 10 Aug 2025 19:00:28 +0000
Files and hashes:         1: 10gRzD3VrAGl4bbzZAnzRnZ-9NY.roa (hash: lcACm1XYWQGs+OoRyS5RawPhw9wP7Mmy1MtCSpjZTr8=)
                          2: C6VqvctPbwyGuDLswT9eJJch1vg.crl (hash: 0oIDhMSeTT3Ky1axUDAaEzY0nMc1C2c84+ck6BD41KE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:34:af:b9:1b:a0:bc:92:4e:ca:9b:3d:99:74:0a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
        Validity
            Not Before: Aug  9 19:00:28 2025 GMT
            Not After : Aug 10 19:00:28 2025 GMT
        Subject: CN=b2260fd988324e53be55c22d281ac83fbad9955f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:2c:70:3d:83:50:69:87:f8:3f:00:4e:98:
                    10:93:29:4c:25:ea:2b:c7:7f:64:84:12:48:14:77:
                    ef:ee:c1:25:3d:48:ac:d5:7b:b9:95:c8:81:b5:48:
                    a5:45:ce:5c:2a:71:72:fa:1b:67:97:e8:6f:b8:c7:
                    f8:96:4a:64:9a:fb:fe:39:ca:12:59:92:e5:43:17:
                    6f:f8:f5:c7:09:38:07:59:51:29:bd:90:d1:f5:b8:
                    aa:0c:52:53:55:0a:0d:26:fb:86:e5:0f:fd:25:bb:
                    d6:92:bf:01:0e:0a:b6:a2:21:2d:14:9e:2f:e4:40:
                    3a:7f:61:3f:ad:fa:db:eb:20:3f:59:c2:65:68:c5:
                    46:5c:c1:0c:39:db:22:1d:f6:a8:fc:81:14:76:cc:
                    c6:6e:df:f3:90:dd:95:ec:1a:e0:00:de:b3:b0:1b:
                    41:92:bd:9a:cb:16:1d:16:aa:b5:70:b8:cb:f6:3b:
                    24:a2:66:76:c6:e5:83:9e:22:d6:b0:25:4a:1f:48:
                    58:17:99:b0:48:0b:91:10:03:29:84:39:d1:c0:ee:
                    8b:44:37:92:71:fd:d8:da:2a:ad:7d:aa:00:85:7f:
                    bc:06:3a:37:9c:d1:a4:1f:b2:dd:c7:8b:a8:94:aa:
                    fb:cd:56:39:79:fe:0a:fd:7d:a3:e3:59:65:64:2c:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:26:0F:D9:88:32:4E:53:BE:55:C2:2D:28:1A:C8:3F:BA:D9:95:5F
            X509v3 Authority Key Identifier:
                keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:01:50:e8:e8:2d:7d:e6:66:0d:1a:b3:a3:02:0a:7a:6c:dd:
         6e:26:81:c3:c2:a4:97:9d:0c:4f:e4:5f:38:e4:0e:b2:b8:db:
         3b:80:ea:19:c1:d8:3f:8e:8a:b2:28:09:c8:73:36:e6:f1:5b:
         81:e6:8e:9b:13:3b:24:ff:a6:fd:97:34:68:69:ef:21:b8:6e:
         b9:0a:20:64:36:02:db:fc:38:38:b2:ab:24:83:1e:3c:84:a4:
         00:02:43:79:dc:42:da:fa:c3:8e:02:67:c0:41:5e:40:49:a8:
         21:46:18:ad:b1:c2:55:79:f7:e3:de:20:39:94:c2:18:22:04:
         23:69:2d:f7:0c:d3:cf:51:44:7c:74:7b:1d:a3:1d:cb:bd:45:
         e7:e7:81:51:d0:47:17:ec:e6:e9:15:0e:8a:8f:e1:c7:c8:e8:
         d0:05:a3:85:65:a8:52:44:c4:22:fc:cf:ea:63:9c:e8:9e:d0:
         fb:21:06:ae:46:4a:5d:03:be:04:bc:d2:a7:db:89:d3:36:9f:
         f9:83:04:95:2a:25:8b:0c:e0:17:b8:8c:4d:f0:c1:23:78:6e:
         89:a0:ce:1b:59:a0:36:a8:ef:9c:8c:78:a4:e3:48:ba:4c:c6:
         39:08:a8:11:52:04:75:2f:d2:20:a6:08:8a:8d:c7:f3:24:23:
         74:bf:e1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:39 2025 by rpki-client