Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File:                     oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier:          nsy8caxiNN/I49+BxJgqkVRUlARyD3QVWTgPMVJz/QQ=
Subject key identifier:   1C:28:92:77:DA:90:D8:E2:11:79:16:F9:9E:6C:A4:3B:D6:F0:19:CB
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer:       /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial:       01987450A2224B1A713B1B1F01441769E93B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number:          10BE
Signing time:             Mon 04 Aug 2025 09:01:38 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:38 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:38 +0000
Files and hashes:         1: AItoBBXTr3JSVEunHoKYVScHBBA.roa (hash: bQ8pPRnSjhK+OHhk4/Jjzl0/46sUTmdeipylWtU4pOg=)
                          2: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: cc+yYX1Akjc10hFC3+LxLaRZZQzutl4EckoMS1bUdEg=)
                          3: ublcR1AG8bTtIDegIl4XF5yKZ2U.roa (hash: EReps1m4UdW66UXSYxPeRRxVic46xc68n57xt40fmWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:a2:22:4b:1a:71:3b:1b:1f:01:44:17:69:e9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
        Validity
            Not Before: Aug  4 09:01:38 2025 GMT
            Not After : Aug  5 09:01:38 2025 GMT
        Subject: CN=1c289277da90d8e2117916f99e6ca43bd6f019cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:1b:d5:b2:d4:93:35:f6:c4:c9:37:41:51:
                    ed:a2:47:50:cb:df:7c:2b:6a:79:fb:c7:0d:73:a9:
                    b5:02:2e:f0:e5:c1:97:7c:e7:53:30:af:c3:7f:15:
                    22:ee:7c:bb:45:a2:a5:22:a7:c5:4c:af:6f:d9:59:
                    7e:b3:ef:d0:de:f8:a7:e5:3d:91:7a:bb:84:56:87:
                    8e:49:43:10:69:20:e0:04:14:c6:23:75:50:c7:66:
                    21:b7:89:94:6b:42:5a:79:19:68:3e:b5:35:30:91:
                    7c:45:db:fb:e0:4c:b7:ba:32:3d:ac:e4:44:aa:64:
                    1b:d9:5f:17:2d:db:e8:c0:26:e3:96:7b:b6:5f:12:
                    fa:e0:74:ee:18:3f:1b:81:a0:7f:dd:f1:25:0a:5d:
                    aa:a3:fd:a5:e5:d6:fa:f2:42:f4:84:e2:2d:76:5e:
                    ca:e8:26:cd:93:24:20:ee:6a:09:d9:e1:e5:ca:c9:
                    de:5c:a6:f9:e8:99:9a:c9:23:8e:be:4e:cc:6c:6a:
                    6a:fe:1d:52:55:a9:60:32:eb:c8:5d:1b:91:61:a5:
                    32:dc:45:4c:1d:5b:38:e1:e8:e1:d1:c2:5f:20:8a:
                    ac:b1:69:e1:07:0d:bc:73:d6:7d:27:a5:38:0a:a5:
                    b2:06:ba:cd:74:7c:71:68:28:cc:bd:6c:18:63:0a:
                    d0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:28:92:77:DA:90:D8:E2:11:79:16:F9:9E:6C:A4:3B:D6:F0:19:CB
            X509v3 Authority Key Identifier:
                keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:23:1c:0e:26:ae:a3:49:6a:d9:7c:0f:f5:55:54:04:01:1b:
         2f:31:cb:ce:0a:16:0e:61:66:2e:64:27:4a:44:5f:a7:d4:59:
         8e:b1:86:fa:cf:b9:5e:d5:81:6a:6e:e5:e2:0f:33:01:03:3e:
         27:5d:bc:61:cc:4c:90:1d:7e:e8:f4:a1:34:66:21:1c:85:1d:
         ca:93:dc:ff:ff:93:0a:86:63:1a:10:9e:96:10:82:62:a7:a0:
         4c:78:2a:76:43:83:da:8d:85:2e:74:c1:db:8a:7e:38:12:57:
         53:19:ef:8c:86:2c:02:c8:45:61:38:60:96:8a:8b:ec:fa:2c:
         22:21:e4:16:5d:39:61:4b:d6:02:32:5f:d8:39:fc:b3:18:f6:
         90:46:e5:a9:08:9f:4f:7c:b5:64:25:bb:0c:e2:05:00:48:e9:
         e3:2f:59:9d:69:42:1d:7e:3b:71:99:fb:13:8e:ed:0f:d0:83:
         f2:4d:f1:03:23:c2:b8:f5:19:31:06:2c:f1:eb:8d:df:63:97:
         59:72:84:cf:6d:84:e7:dc:a2:24:81:c6:3c:05:23:91:60:4c:
         2a:b6:96:50:75:58:78:06:e5:f4:5c:af:58:71:6f:8f:26:13:
         89:1e:c6:4f:5b:da:ef:3f:d7:9e:34:5c:e8:b3:10:22:b8:72:
         90:97:d4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:27 2025 by rpki-client