Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File:                     CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier:          s5x0uSWJtDJts/POCQf4ISwnt0pk39Hk2k1VuWQQMeg=
Subject key identifier:   CE:1F:C6:B4:78:6C:31:20:C2:1E:19:6F:69:BC:04:28:D2:0D:6E:06
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer:       /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial:       01987C0959205C9A11A18AD8C2EF3534F7EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number:          11DC
Signing time:             Tue 05 Aug 2025 21:00:44 +0000
Manifest this update:     Tue 05 Aug 2025 21:00:44 +0000
Manifest next update:     Wed 06 Aug 2025 21:00:44 +0000
Files and hashes:         1: 5TdpsvGEzHHc2DVMKGITS46zP8M.roa (hash: NtR3z7rxkvkkgqfCc2bT1z0ch/WfYD2HGcwqrNfMm/k=)
                          2: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (hash: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=)
                          3: A0RJOA3D0QS8jyOdklsxwozEZks.roa (hash: sW0q/KPoEvaj+bjphgSA1v3RGwifbXQZawO4nY7ko3U=)
                          4: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: G1aSRGQ5gSJVSdzVQQoGCBRYaQs/jV7jOS1BUcMpQM0=)
                          5: J_GNQPWHaTopYauZz-X71VDCD30.roa (hash: mYWNHSJ/8l+aWGMPXqK6gzDUsBDut0UQO9etVhI8z0E=)
                          6: ivrBGL0q_NF31wGnb6OsQlrkSGo.roa (hash: OcT5ce9nz2OZqGwJctdjZ8/bty60h4IQcxLhct5JKGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:59:20:5c:9a:11:a1:8a:d8:c2:ef:35:34:f7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
        Validity
            Not Before: Aug  5 21:00:44 2025 GMT
            Not After : Aug  6 21:00:44 2025 GMT
        Subject: CN=ce1fc6b4786c3120c21e196f69bc0428d20d6e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:cf:e5:cb:79:d4:bd:71:6e:f4:41:2d:2e:
                    16:a7:cf:87:18:bd:3a:e1:fe:00:1d:51:4a:55:a6:
                    9f:72:6b:2b:ba:13:9e:df:8c:a3:95:69:d8:b8:36:
                    32:a3:dc:6b:dd:74:20:75:7a:c3:cc:f6:0e:e7:c1:
                    df:48:07:96:5d:1e:92:a2:34:a8:99:73:d8:2a:f9:
                    aa:f1:c2:39:31:4b:2e:da:25:b2:45:eb:d2:6d:a4:
                    2e:22:73:54:78:ca:bd:33:8b:5a:5f:a6:a7:67:de:
                    08:d8:33:de:bd:41:a5:da:a4:79:f1:17:de:bc:8f:
                    71:45:4c:6e:1b:e6:04:1b:96:bf:8c:d2:78:d0:c1:
                    c1:8b:7b:fe:17:6b:ca:b1:f5:2e:61:0c:4e:1a:67:
                    fa:65:2f:ef:d9:5b:67:e4:a4:68:80:a4:d2:cb:a2:
                    5a:fd:20:47:65:36:1f:40:f5:b5:8a:07:9f:87:b9:
                    4c:8e:6c:31:4f:dc:d1:88:43:47:73:4d:42:3e:02:
                    92:01:86:9e:c1:dd:67:73:cf:a8:1f:32:9c:82:d8:
                    9c:ff:f3:38:e1:70:c0:7d:65:ab:54:3c:ef:ce:c0:
                    be:61:70:e6:bd:e8:bf:14:c5:78:02:92:f1:6f:82:
                    cf:70:ea:38:41:42:c8:46:cf:2c:97:4b:6f:89:08:
                    3b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1F:C6:B4:78:6C:31:20:C2:1E:19:6F:69:BC:04:28:D2:0D:6E:06
            X509v3 Authority Key Identifier:
                keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:77:9d:09:4c:b7:89:c7:7f:e9:ea:bb:af:92:bc:08:52:06:
         62:e4:56:a4:03:04:5c:28:52:70:19:77:54:6c:1d:22:1b:cc:
         65:df:08:6f:5f:3d:a1:20:89:85:c1:27:71:16:e2:a0:f1:42:
         1e:89:5c:5a:cf:ff:a7:ed:52:67:3e:b8:af:1c:27:1d:d2:87:
         bc:a4:4d:07:14:12:92:78:1c:bd:e2:72:a5:da:bb:70:0e:cb:
         08:87:ab:3d:72:1a:d4:b5:21:4b:1a:41:53:e7:fb:24:6c:51:
         ff:de:6e:6e:83:eb:ed:37:3c:49:43:39:7c:48:bb:2b:5d:75:
         58:85:e6:bd:c3:fb:7e:36:a4:35:08:39:6d:64:81:3d:ab:2c:
         88:ee:7e:56:c2:f9:cc:00:c4:77:99:66:6a:dc:c5:6d:54:e4:
         97:29:71:f0:33:ad:d3:e7:f8:97:05:ea:44:be:7d:8a:2b:90:
         7f:2a:a2:af:2b:d7:19:69:52:08:b1:e3:5c:02:43:62:f5:5f:
         98:c4:a2:9d:ac:ea:ba:ff:34:02:eb:75:1c:cf:18:aa:11:0a:
         8c:6d:78:d4:f6:f0:4e:4e:cf:51:f1:89:33:68:0c:5e:dd:d9:
         25:5e:c6:84:c4:01:ea:13:d3:bc:85:eb:ae:93:ca:4f:63:54:
         62:11:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:29 2025 by rpki-client