Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File:                     V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier:          YlmdEPMuhcQfUVza2vLdT2OB6rnyTC4LUoMjyppl8mg=
Subject key identifier:   1D:D5:27:F4:0D:74:18:E0:0C:D9:45:77:A3:66:BC:5D:A2:67:8D:75
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer:       /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial:       019873AACAF890F2397D600CDE52D76C07C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number:          0343
Signing time:             Mon 04 Aug 2025 06:00:29 +0000
Manifest this update:     Mon 04 Aug 2025 06:00:29 +0000
Manifest next update:     Tue 05 Aug 2025 06:00:29 +0000
Files and hashes:         1: KvGrSnuEc1cM9X2Nk9gFAk0Nuqk.roa (hash: HFWxJLi4fAw0JkNdDx7HNRCU+Sz89xJhj6dOpXyk9UI=)
                          2: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: j3y94Cw34ENdfgZS07jV/A7Aim7XxSfa3Isu/mvAor0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:aa:ca:f8:90:f2:39:7d:60:0c:de:52:d7:6c:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
        Validity
            Not Before: Aug  4 06:00:29 2025 GMT
            Not After : Aug  5 06:00:29 2025 GMT
        Subject: CN=1dd527f40d7418e00cd94577a366bc5da2678d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:cd:9b:f1:1b:ef:4d:66:6c:8d:5b:74:98:
                    d6:7c:42:a9:dc:cd:1d:f0:a0:44:74:5e:c0:f5:43:
                    84:eb:13:f7:03:73:79:1f:c9:f2:d7:9b:c9:07:c3:
                    46:ab:1c:01:79:39:f4:6a:12:d4:eb:c9:ee:3b:71:
                    73:1e:55:2e:12:26:ee:56:f7:f1:94:a4:03:7c:60:
                    d5:c4:4a:18:d1:59:4f:fd:0e:83:c7:f9:da:7f:82:
                    a4:42:09:25:67:47:a8:f8:ce:cc:83:95:54:99:92:
                    61:fb:ee:37:83:c5:ee:6e:d6:d7:09:21:f9:3a:94:
                    6a:38:2c:ae:c8:5e:bf:27:b2:13:e3:0c:47:71:97:
                    42:09:e9:4f:25:ac:3a:70:cc:1e:36:3c:b7:73:5b:
                    3b:9f:18:6e:dc:12:11:04:30:37:77:e1:69:69:84:
                    62:2c:14:34:b0:01:74:cb:89:26:6d:cd:79:58:90:
                    93:68:6d:00:cf:c0:a2:09:e4:bf:e6:cd:23:ba:9a:
                    18:b6:77:a2:b9:d9:ab:bb:30:22:fe:2b:17:6a:5a:
                    82:1c:04:57:9b:46:a8:53:2d:32:09:23:d5:5f:e2:
                    5e:b9:ff:8b:40:bf:49:1a:13:d0:fa:26:9c:f5:17:
                    54:c6:9b:3c:21:93:f7:be:6c:3d:ff:cb:3c:9e:75:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D5:27:F4:0D:74:18:E0:0C:D9:45:77:A3:66:BC:5D:A2:67:8D:75
            X509v3 Authority Key Identifier:
                keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:4b:b4:79:1c:6a:83:bd:84:45:33:96:a0:a6:dc:81:73:70:
         e6:72:cd:67:ad:0f:58:9e:37:83:7c:93:41:aa:aa:dc:03:0d:
         2a:94:0c:37:9f:15:04:4d:bb:0c:5e:a4:88:c8:81:9c:94:ca:
         e8:43:58:82:0c:54:74:c5:5f:2c:37:58:01:41:a7:5a:9b:c4:
         6b:4f:ae:63:18:6d:92:6e:f6:15:c4:ff:cc:b5:e6:f4:64:c6:
         3d:5d:63:f9:2c:46:c3:7e:b8:0f:4e:d8:23:3a:84:4b:84:bb:
         10:d0:c9:e6:59:e7:b0:69:71:a4:45:e0:99:97:ba:60:f2:b2:
         98:65:55:46:0d:19:0e:34:3c:de:a6:6a:47:6e:fb:aa:3b:90:
         7d:c8:41:b2:dc:ae:a8:b2:47:b5:3f:29:93:ec:d1:90:23:04:
         0f:b3:d4:f7:0c:2e:72:41:1a:aa:7a:46:e0:89:a7:b4:b3:bb:
         46:d8:60:05:27:6f:c0:9a:14:68:88:43:10:65:c0:f0:2b:f9:
         79:30:a9:eb:bf:ce:81:7a:55:d2:83:68:fc:12:6b:90:06:c4:
         69:59:b4:09:c2:5b:37:13:bf:35:62:9f:73:f5:17:da:06:89:
         56:93:36:e6:ab:53:ba:3c:ce:58:5f:f6:11:69:1c:ab:da:89:
         ac:aa:a6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:02 2025 by rpki-client