Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
File:                     dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json)
Hash identifier:          0AuQA306aDBBnSddlTX8DfwqvQMZCAfC1ujER+Hiexk=
Subject key identifier:   44:08:13:AD:87:1E:96:1F:73:E3:DC:14:D1:B4:27:0C:68:61:15:2E
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Certificate issuer:       /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial:       019882B0E6F17F052D2068D5949FD40E9E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
Manifest number:          0F3E
Signing time:             Thu 07 Aug 2025 04:01:28 +0000
Manifest this update:     Thu 07 Aug 2025 04:01:28 +0000
Manifest next update:     Fri 08 Aug 2025 04:01:28 +0000
Files and hashes:         1: 6APrd79kmuyNwpex626uNLGMIX0.roa (hash: 7Zm/lOFTt+AfdsIxcjvvrXgteW7mXkxvg9D1ZZh9It8=)
                          2: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: M4JS8tu73JxpHARGEoIojx78Y7yuRI0sQ6jacRCkwfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b0:e6:f1:7f:05:2d:20:68:d5:94:9f:d4:0e:9e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
        Validity
            Not Before: Aug  7 04:01:28 2025 GMT
            Not After : Aug  8 04:01:28 2025 GMT
        Subject: CN=440813ad871e961f73e3dc14d1b4270c6861152e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:0d:0f:41:a8:38:ab:ab:b8:be:46:91:2e:
                    73:35:b4:08:0c:3c:05:c0:92:13:2e:83:a5:51:95:
                    59:be:e1:0e:25:6e:20:c8:16:d8:55:93:e1:f6:ea:
                    0b:60:95:16:8a:2a:e4:0a:ff:be:d1:d5:d1:ba:54:
                    11:f9:2f:42:4e:9b:1a:6c:e0:dd:b0:0b:e2:e1:cb:
                    7e:c5:21:00:c3:69:6f:ee:f1:af:4e:99:b1:12:52:
                    d2:ba:57:cf:4d:49:ed:8a:51:d8:ed:72:b7:d3:28:
                    6c:3c:ce:31:1f:a3:ff:b9:cf:a6:15:98:2c:db:a2:
                    fa:26:8d:bb:f8:46:b0:24:1a:b5:2c:0b:6f:ab:56:
                    5f:04:08:4e:85:c0:41:74:1b:4e:23:d9:3c:e6:94:
                    f6:c2:35:d0:66:bd:a6:53:57:5f:11:79:be:10:d7:
                    0e:c6:89:1f:e3:ab:4f:6d:c4:5b:2a:7f:41:28:83:
                    7d:ba:60:62:c0:f2:e5:d0:d0:d7:cd:01:9f:17:cb:
                    b7:7c:f9:3d:d0:29:4a:e3:7a:5b:4c:e5:97:8e:27:
                    b0:8c:76:60:1c:89:53:34:d3:bc:98:ff:29:9f:b2:
                    60:49:57:a5:fe:ed:24:11:b2:f2:1a:dd:27:48:d0:
                    15:ee:e6:12:a0:69:4d:fc:c4:aa:7c:3f:c9:e6:da:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:08:13:AD:87:1E:96:1F:73:E3:DC:14:D1:B4:27:0C:68:61:15:2E
            X509v3 Authority Key Identifier:
                keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:40:b1:53:00:43:d7:cf:e9:04:16:2b:d0:96:6a:13:d0:c7:
         c8:16:b1:f0:f3:db:17:dd:05:4b:4a:80:1e:7e:f7:40:e2:24:
         88:2a:4f:36:65:29:4b:82:e2:43:fa:b5:e0:d6:8d:89:22:a6:
         36:df:b0:05:4d:22:93:f5:d3:f5:d4:d0:ab:1b:56:09:4a:1f:
         fe:8b:51:06:0e:e5:10:95:dd:98:cb:a5:e4:48:1f:d6:fa:4c:
         24:f7:94:b1:13:12:35:62:6c:ce:67:f0:7a:b3:08:91:d4:e3:
         ce:37:9c:48:81:63:45:b2:15:16:e5:32:2e:50:47:a4:ab:f2:
         d2:51:c4:66:50:03:ee:68:7a:48:e5:31:5e:8e:7b:1b:ff:72:
         4a:3b:7d:77:69:83:12:19:77:b9:59:b2:4f:7f:20:ff:18:41:
         40:43:40:b6:4b:74:e0:d3:e4:0a:14:4f:78:a2:58:7a:e1:d7:
         be:d0:d5:c1:a3:ad:19:5c:e4:39:b7:23:92:aa:ca:fe:52:2d:
         43:10:a1:83:3c:6e:23:6f:12:f7:a7:62:42:63:f2:3c:b4:d3:
         b7:c4:85:c7:53:e6:a3:0a:4d:45:65:1f:34:07:70:bd:e5:7d:
         fc:ee:6f:34:cd:95:d5:40:f8:71:4b:c8:bd:3b:1c:82:74:8f:
         ac:42:ce:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:10 2025 by rpki-client