Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          PNuy9flK1jgFxl8JeQHha8sHNmd1tcaH5yvoxSfowvg=
Subject key identifier:   AB:85:69:55:28:54:9E:EE:F9:64:67:A3:DC:3A:6B:99:F4:9E:80:74
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       01988B7CD4237A522C4A9CB10BD1F410E621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0C11
Signing time:             Fri 08 Aug 2025 21:01:10 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:10 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:10 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: 6Cf0WvtD+AYwxbtpSxlpxMmKdday+5XL7+OgldftWDo=)
                          2: c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa (hash: wpEquj9Ig8LsCQE7Y+MbSVtYeoDlqqJ8cepm+207hA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:d4:23:7a:52:2c:4a:9c:b1:0b:d1:f4:10:e6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: Aug  8 21:01:10 2025 GMT
            Not After : Aug  9 21:01:10 2025 GMT
        Subject: CN=ab85695528549eeef96467a3dc3a6b99f49e8074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4d:12:dc:04:26:c3:ce:07:34:3c:9c:64:f1:
                    65:72:32:66:6f:2a:1b:dd:50:a4:0f:ef:26:df:62:
                    88:56:68:c0:53:b9:70:2e:28:ef:ef:b9:7f:49:b4:
                    6d:01:fb:0f:28:6e:a4:08:67:d6:3b:c2:00:13:14:
                    1c:ac:09:ff:6f:a8:56:e5:f4:8b:a9:2e:93:3d:32:
                    05:6f:cc:5c:60:dd:2d:c4:2a:cc:2d:ad:ab:d4:c1:
                    38:ff:e2:80:75:c6:27:51:85:fd:81:bf:be:46:11:
                    39:12:68:7a:51:23:5b:03:90:3d:16:0d:d2:6e:08:
                    51:81:5a:cd:52:06:31:ed:31:db:22:e1:92:00:96:
                    94:e6:47:a9:17:b1:de:e6:a1:91:8b:73:7f:47:08:
                    07:cf:aa:53:b3:a6:1b:86:5a:d0:c2:0a:c7:3e:99:
                    a0:b3:cb:a5:dc:f9:04:28:40:80:c8:a5:2a:19:28:
                    e0:7a:f1:74:be:7f:3c:f2:86:77:47:43:db:fd:1b:
                    f3:26:37:75:7e:84:77:07:78:9a:2a:fd:c1:13:7a:
                    b5:69:01:9c:8d:63:15:af:a1:07:bf:c3:53:02:8b:
                    ac:26:44:fd:4d:0a:0c:13:71:e0:a8:8c:21:45:5c:
                    4e:d3:2e:b0:df:3f:ce:da:88:42:8b:ae:44:dd:f2:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:85:69:55:28:54:9E:EE:F9:64:67:A3:DC:3A:6B:99:F4:9E:80:74
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c1:57:46:f4:b0:88:00:36:ff:fd:f4:3d:cc:71:9b:c0:8b:
         77:0d:9e:1c:7c:c5:c1:ce:03:4f:0e:df:4a:a4:f9:a1:c8:5b:
         fc:da:f9:48:72:60:b1:53:25:b3:35:40:23:04:14:5c:2f:b8:
         69:e5:3e:4f:ac:64:32:51:bb:8c:30:de:dd:25:18:ca:12:fa:
         71:a5:9e:7a:b1:e5:b2:48:2e:3a:df:30:25:53:3b:8c:50:d3:
         1c:22:ff:08:91:5b:1b:b6:05:e3:5a:7d:02:c5:1e:fc:ee:c0:
         07:6f:12:08:58:02:24:c8:13:ad:d6:7a:19:a0:e3:ee:76:69:
         f8:9b:7f:92:c1:64:9d:0f:80:5b:52:dd:21:d4:13:c3:b3:24:
         cb:21:3d:51:7b:6d:1f:e3:3d:42:83:3f:07:30:e6:00:a8:db:
         67:d1:d3:f9:40:db:64:8f:c5:07:2e:d2:d8:22:c8:e8:a3:a1:
         30:2f:48:c6:07:05:d5:68:70:ee:73:d2:5a:de:17:3f:26:de:
         ad:f6:8c:d2:ec:04:6f:f3:15:22:52:9e:2d:73:35:44:c5:0f:
         f2:74:c5:34:84:33:77:8a:66:5c:5d:e3:c7:18:f9:f1:e9:6a:
         b3:8b:69:ca:7c:67:ce:34:20:67:2e:11:da:57:d8:90:b1:66:
         ca:ca:3d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:53:13 2025 by rpki-client