Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File:                     C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier:          MlLQXgfDLcC4SJl9Q4DwQZECvlr2OirGMbUkA7Bt0SM=
Subject key identifier:   76:46:B3:64:18:D8:C5:30:16:3F:8E:9D:C1:25:13:EF:08:5A:34:F6
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer:       /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial:       01987450033691EFCFE243A0A7BF6A08E375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 09:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:57 +0000
Files and hashes:         1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: Ap2k4SSeNhOww3D13dstBqQyl0GdDtKDe6jXMEtRIaU=)
                          2: h4zrMqfOoefngHFo_c_Z31Wn-uw.roa (hash: rUimB7Pd+YTy8jaYyx7sVXzcYUcWrZdClxDPlBTFsaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:03:36:91:ef:cf:e2:43:a0:a7:bf:6a:08:e3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
        Validity
            Not Before: Aug  4 09:00:57 2025 GMT
            Not After : Aug  5 09:00:57 2025 GMT
        Subject: CN=7646b36418d8c530163f8e9dc12513ef085a34f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:32:27:09:b2:fc:2a:52:e8:41:0e:df:7b:c6:
                    67:8b:79:2a:2d:40:a2:2c:3e:73:d6:4a:45:a5:a9:
                    79:62:25:ef:5a:2b:df:b5:85:b6:b2:81:9d:f3:59:
                    46:6a:8e:98:4b:36:1f:59:ba:e7:66:d7:63:0f:2d:
                    bf:47:72:b3:f6:bd:8a:1a:bd:0e:fd:45:c3:cf:9f:
                    6f:df:43:93:5b:5e:52:2a:2e:ce:b0:02:29:ea:bf:
                    d7:4b:4b:6f:81:26:4b:71:b4:1c:05:3c:e2:ed:67:
                    8d:08:bb:fc:20:dd:04:dc:0c:41:b5:02:8c:31:84:
                    5d:43:61:c5:6b:5a:8c:5b:bf:32:c0:dc:ed:e0:30:
                    cb:79:57:c0:6c:af:a2:7b:da:26:fb:5d:16:8a:0d:
                    93:ad:53:da:af:29:5d:34:14:c7:c4:56:b1:44:39:
                    58:39:b4:7d:cc:cd:b2:57:e3:69:cb:20:5a:0d:30:
                    db:38:e6:10:85:d4:bf:19:19:0f:8c:33:97:14:ce:
                    6f:01:f3:a2:d2:6d:ea:50:29:e9:73:c7:c7:6b:f6:
                    b5:ea:b5:88:ef:c5:ca:3e:6d:fc:bf:8c:bd:2d:b7:
                    04:66:9e:db:ea:13:a7:f8:a7:81:cd:32:8d:56:13:
                    5f:ea:37:72:1a:28:6c:bf:fb:ae:df:91:a7:0c:ab:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:46:B3:64:18:D8:C5:30:16:3F:8E:9D:C1:25:13:EF:08:5A:34:F6
            X509v3 Authority Key Identifier:
                keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1a:c7:d7:59:11:3c:04:d8:3c:cb:56:0b:1e:f7:83:2e:6f:
         2c:ce:d4:92:55:9a:53:63:10:e2:b9:af:e5:aa:2b:5f:d3:24:
         9b:9f:39:c2:ef:29:ea:4c:bc:b6:3a:a3:81:4c:8f:5b:26:b7:
         8c:e1:6e:94:16:f8:51:20:09:e8:79:9a:ff:a3:06:d4:c9:93:
         4b:71:ab:89:c4:23:2a:56:a7:e9:5c:55:12:1b:e5:88:d8:62:
         cd:43:38:fc:23:48:58:1b:59:38:b9:61:9c:bd:34:91:a6:ab:
         4d:bc:31:9e:4e:7d:c6:8c:77:a2:a1:57:81:32:31:f9:1e:7e:
         ad:4e:c3:6c:7a:cc:17:8d:e6:0d:37:f0:98:2f:fd:a1:5c:43:
         0d:3c:a0:7b:90:a7:67:8f:3f:bd:41:ac:4a:81:ec:61:b2:d9:
         72:33:d3:c1:f3:46:f3:46:f2:7c:ba:dd:5d:f0:b3:75:67:04:
         b9:7a:71:58:32:f3:19:72:b6:61:a0:16:31:ef:c0:79:28:a6:
         66:e3:7b:22:d5:bf:7f:da:06:a4:fa:ff:7c:5a:a5:27:eb:14:
         31:a1:54:53:90:16:c1:aa:b0:23:47:95:db:0d:b6:e3:a1:75:
         8c:0d:df:07:14:55:39:19:89:fd:50:95:d7:9b:d1:68:52:11:
         81:a5:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:50 2025 by rpki-client