Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File:                     RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier:          krf0ngklep92kt48UX65njlehEaWPx8QeZDriYjuMoM=
Subject key identifier:   56:7B:3D:E7:4A:54:F7:3E:32:C1:52:2D:12:9B:98:09:93:F8:61:A0
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer:       /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial:       01987D8A6DAE661DC6AF99B271F2CB5DD80D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number:          0C06
Signing time:             Wed 06 Aug 2025 04:01:20 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:20 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:20 +0000
Files and hashes:         1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: /pHj2mijn2nV6PNNLy+qM1fgWSA4mV/zsIaVzo0zc3I=)
                          2: vqjdm1KiZFUuymq7gFNn9nu1xeI.roa (hash: n5Ik+8X2gw4ASROPfXrEyi/m0Dt0d0dYMw901zfQlQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:6d:ae:66:1d:c6:af:99:b2:71:f2:cb:5d:d8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
        Validity
            Not Before: Aug  6 04:01:20 2025 GMT
            Not After : Aug  7 04:01:20 2025 GMT
        Subject: CN=567b3de74a54f73e32c1522d129b980993f861a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ab:33:df:52:f2:7a:cd:61:22:d2:ba:68:6e:
                    07:4a:cd:93:f7:08:36:4c:ad:aa:b6:11:0d:b9:5e:
                    3b:27:c8:83:1e:7e:ac:4c:ec:06:ca:56:a4:aa:f7:
                    33:f2:1b:3d:5a:87:32:72:07:3f:f9:47:d3:3f:84:
                    fb:c6:88:05:83:e7:b3:7b:bb:c2:6c:34:09:7d:45:
                    23:81:ab:0a:95:dc:29:4e:01:84:d5:2e:94:6e:18:
                    03:67:63:85:7b:98:4a:bc:31:68:4c:25:27:68:52:
                    1a:4d:e1:fb:23:d1:cf:bf:d8:00:ba:9b:75:95:b8:
                    f4:e2:c2:f9:45:99:dc:c2:4f:4d:a2:a7:af:ac:90:
                    fc:f4:4f:db:2f:61:a8:bd:dd:ec:cc:20:4e:95:e9:
                    8b:87:e4:ab:b9:59:69:03:5f:a0:b5:fd:34:ad:59:
                    68:08:24:ea:d4:ae:80:f4:64:08:02:d7:e6:9c:0f:
                    b9:c8:7a:c2:18:05:77:e3:83:fd:25:96:51:3a:fb:
                    d5:ad:47:a8:10:8c:8f:d4:5b:27:76:12:71:0a:37:
                    80:5d:4c:64:4d:a3:97:21:cd:b6:d1:04:3a:29:09:
                    ad:e9:c4:d0:c3:ee:df:53:31:f0:0a:0d:2e:09:0f:
                    59:e1:7d:fb:08:20:2c:07:e1:fb:5c:bf:e2:d3:42:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7B:3D:E7:4A:54:F7:3E:32:C1:52:2D:12:9B:98:09:93:F8:61:A0
            X509v3 Authority Key Identifier:
                keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:df:95:68:55:c1:08:e3:9a:9f:2b:38:d4:13:68:15:27:3c:
         fc:10:c6:a5:5c:d9:73:f0:59:ba:fb:fd:3a:38:04:d9:f7:a7:
         b6:18:c9:cd:71:14:f6:4f:e0:7c:b8:53:99:18:fb:4e:d9:28:
         ba:2c:97:af:0c:02:61:f4:17:35:46:5b:03:85:dc:d8:55:88:
         8e:52:00:63:dc:90:51:f4:19:04:ff:aa:4c:f0:a6:c4:3d:78:
         a2:43:2a:c8:48:cd:ca:d8:95:68:41:12:7d:06:d1:80:ca:ee:
         fc:d4:be:7d:32:d2:24:5b:c0:38:3a:84:dd:4c:e6:42:5f:11:
         72:7c:ec:9b:95:e2:e7:4b:a2:a9:ec:c9:35:25:99:6d:a8:26:
         ec:5e:ee:c7:2c:e0:67:01:ac:65:7e:62:84:65:34:10:0c:f6:
         7c:a8:c9:08:f9:b2:eb:df:ae:62:54:95:78:b7:c8:34:35:44:
         f6:bb:81:38:29:49:9e:b7:c5:77:9c:18:df:6b:c2:5a:f5:77:
         8c:85:fb:c0:59:f1:23:4b:c0:ba:fb:f2:3a:ff:2f:0a:84:ab:
         16:e2:77:14:20:a6:05:eb:2f:c2:f2:b7:a5:bf:c0:8b:82:1e:
         e9:6b:db:c2:e7:52:09:38:ed:aa:a5:cc:4c:29:ff:a8:5a:2e:
         9d:3d:a4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:01:28 2025 by rpki-client