Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File:                     oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier:          8FQuge+j4JK6U6/lK+PRzMTKlBk/v71TwC77kEsXge4=
Subject key identifier:   09:A4:78:3C:67:63:F5:CC:B9:6A:D7:EA:59:C0:E9:E3:33:90:CE:9A
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer:       /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial:       0198843146B5DEE5D6BD2789378BCEC91FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number:          0EE1
Signing time:             Thu 07 Aug 2025 11:01:18 +0000
Manifest this update:     Thu 07 Aug 2025 11:01:18 +0000
Manifest next update:     Fri 08 Aug 2025 11:01:18 +0000
Files and hashes:         1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=)
                          2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=)
                          3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=)
                          4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=)
                          5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: wosWdhD+t2Jnxo1gE96uDfPMtPnFLc4aKe49u2RQ/1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:31:46:b5:de:e5:d6:bd:27:89:37:8b:ce:c9:1f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
        Validity
            Not Before: Aug  7 11:01:18 2025 GMT
            Not After : Aug  8 11:01:18 2025 GMT
        Subject: CN=09a4783c6763f5ccb96ad7ea59c0e9e33390ce9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:43:89:92:96:fe:f0:b5:88:ba:1c:11:03:
                    ad:93:f9:e9:cb:49:32:16:2e:8f:a9:cb:8b:50:69:
                    da:36:54:8a:98:fb:a3:39:f4:b5:3e:39:fe:15:dc:
                    ff:98:7e:7c:8f:41:a6:0e:2a:e8:2f:20:b4:d0:58:
                    cb:c6:ba:f3:9e:9c:4d:e2:3b:b5:b0:f3:3f:fd:dd:
                    5f:25:0a:60:9b:c1:56:73:df:eb:e4:2e:9c:72:d4:
                    32:50:34:1a:b7:42:e1:e0:ec:32:eb:c8:a9:e3:e5:
                    8f:9b:29:b2:39:7c:f1:09:c6:7d:49:48:cc:93:9c:
                    b5:38:cd:87:c4:a0:cc:ac:93:2b:2a:3e:d9:a8:de:
                    19:10:ac:c0:87:a2:04:97:49:d5:c7:4b:d1:e6:72:
                    1c:bd:c4:bf:08:e8:6f:b5:09:47:cb:fb:97:f4:f5:
                    55:36:e4:38:2b:fe:7c:be:da:fc:20:e6:89:9a:d8:
                    97:03:05:2a:3f:36:1d:43:6c:2e:82:68:99:b0:df:
                    90:15:da:6d:37:fa:bf:11:fb:d0:b5:e8:9b:51:f0:
                    91:4a:61:86:61:8b:4a:b0:aa:0c:ef:6d:ea:15:c3:
                    2d:fe:f0:c0:e5:45:35:e6:77:af:15:82:b1:4e:d8:
                    bb:96:16:e3:a6:e9:e8:36:04:b1:ac:af:ed:e9:09:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A4:78:3C:67:63:F5:CC:B9:6A:D7:EA:59:C0:E9:E3:33:90:CE:9A
            X509v3 Authority Key Identifier:
                keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:95:54:12:11:53:4f:33:13:4f:38:04:0f:13:13:a9:59:7e:
         4a:ed:f3:f0:69:dd:7b:a5:c0:06:00:f8:13:37:80:11:30:3f:
         bc:dd:0c:73:09:86:3d:a8:90:01:cd:b8:c9:53:06:64:de:87:
         0c:d3:d6:e7:45:8b:77:df:e3:7c:60:b0:8b:8e:af:e0:61:9b:
         50:ab:92:30:fd:0a:5f:25:57:d3:01:e6:60:75:6c:90:83:0c:
         f1:86:e9:cc:f9:ae:c3:3b:b3:c3:d9:3c:00:55:61:38:ab:48:
         0d:dc:76:68:3e:63:fb:b2:b3:f6:86:f0:b0:cf:83:13:bf:32:
         d1:a7:be:c6:a6:59:22:c0:2a:a5:5f:ff:d6:20:b0:c3:58:d8:
         31:4c:8f:f9:fb:f8:60:12:17:d7:79:4d:f1:55:93:85:4e:51:
         bd:0c:33:5d:10:c4:bb:40:05:b1:6b:ae:2b:b7:e6:17:e7:3d:
         0f:d8:a5:27:56:85:fc:2e:5c:50:92:13:37:22:73:5f:92:86:
         ea:91:31:91:23:4f:0f:9f:b5:27:64:fc:10:ec:51:3c:3e:10:
         10:fe:1d:9c:2b:6d:d0:9b:c3:2a:2c:0a:56:65:67:f2:2c:98:
         46:15:a6:af:31:57:77:9f:e5:e2:33:20:b2:4d:34:2d:1c:47:
         5d:cb:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:03:36 2025 by rpki-client