Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File:                     o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier:          0gzKAp0IEGSo5cAs+2p26CygQA29LLU4iXH+dXmfErM=
Subject key identifier:   D3:DB:A1:AB:02:9B:80:F4:BD:59:CE:60:FF:65:F1:20:6F:31:E1:AE
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer:       /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial:       0198752BBA45C9BF1C8FEBB6952C0C3B7610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number:          1132
Signing time:             Mon 04 Aug 2025 13:00:56 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:56 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:56 +0000
Files and hashes:         1: RN1TQT-xsg56kc-nHBGX1sw7VuM.roa (hash: D7xpV8ZZw/mpW8KuuJCirKc+B2zWMvFel25IE+bx6qQ=)
                          2: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: ggC7fiOmCSWVLQjPv8rJMrjTeMUOO2cWRopavvaeOnc=)
                          3: p12bDBAT0QPkWrhSOmjX5OOfRYU.roa (hash: I61D+01sCFA7/6eEMCDLtoz2JVh8EMCx1bfIAf32jrk=)
                          4: syr1WAsKdpbK3B-2acqa83QBouY.roa (hash: 7AhmNgpdXoA3dOcpljZ7vHI4I+47jOSplCREprRNiXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:ba:45:c9:bf:1c:8f:eb:b6:95:2c:0c:3b:76:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
        Validity
            Not Before: Aug  4 13:00:56 2025 GMT
            Not After : Aug  5 13:00:56 2025 GMT
        Subject: CN=d3dba1ab029b80f4bd59ce60ff65f1206f31e1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:0a:77:f5:30:d4:1f:12:21:26:74:6a:34:
                    2a:46:64:69:4d:1e:13:ca:7b:3c:7d:bd:fd:7c:ec:
                    48:4d:fa:36:96:b2:e8:fd:eb:96:4e:9d:8c:c7:48:
                    37:57:dc:e3:ed:12:7c:b1:91:73:e5:eb:fd:16:9b:
                    68:dc:b2:58:ab:2a:33:b0:a3:3b:29:32:72:51:07:
                    5f:ba:58:31:99:7b:ab:be:e4:39:78:fd:05:39:a0:
                    58:05:15:44:a6:ed:b3:b9:87:91:b9:67:a4:fd:5f:
                    60:d4:f1:dc:ec:a7:69:59:11:6a:78:e7:e7:d9:28:
                    6e:61:03:50:10:e6:49:47:40:6b:7c:25:e6:4f:e7:
                    03:8d:90:da:05:a7:74:65:5c:06:80:0d:0a:78:9d:
                    f1:5c:9b:33:28:d7:70:59:10:0c:a5:f7:e9:51:ab:
                    2b:6a:b4:b1:17:50:12:ba:7f:ee:1d:6b:ee:06:cc:
                    63:c4:a2:a9:16:a8:32:80:25:a9:d6:67:73:23:a6:
                    28:96:29:0f:84:69:0a:95:39:07:f7:58:32:e3:dd:
                    6b:4f:68:89:dd:2d:c9:d5:e0:1f:02:b1:7b:ee:92:
                    38:4d:cd:7d:1a:36:93:c7:12:2b:f1:92:9b:22:65:
                    03:3a:cd:5a:27:fe:85:32:8c:9a:a3:3b:db:01:c6:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DB:A1:AB:02:9B:80:F4:BD:59:CE:60:FF:65:F1:20:6F:31:E1:AE
            X509v3 Authority Key Identifier:
                keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e7:c7:88:54:35:fc:88:aa:a0:3f:9d:57:a5:4c:41:61:e1:
         f6:2f:6b:7a:3e:a0:e5:47:24:2e:54:61:d3:7a:62:10:8c:36:
         77:c7:11:27:4c:3c:36:e2:a2:80:79:bb:42:e3:b4:c7:5a:01:
         97:7c:5b:66:96:7d:fa:16:d3:dc:84:30:06:dc:b7:9e:73:c6:
         80:01:10:77:db:2f:35:5c:a5:cb:7e:73:20:49:ea:72:cb:61:
         34:e3:f3:5a:ff:17:0a:6e:ed:3c:de:1e:3e:94:1d:be:1c:66:
         38:a8:17:9c:c1:58:4f:ba:55:55:29:a2:f5:57:97:b1:a2:e0:
         bb:c0:bb:ad:f8:68:df:e6:ea:3c:45:ed:b2:4f:3d:93:91:4f:
         6e:3a:a9:1f:3c:4a:b6:aa:1a:3b:b9:af:6e:71:07:bc:73:df:
         c0:57:87:59:d2:b8:14:cf:2f:21:fa:3b:cb:8f:9b:00:6a:2d:
         cd:99:b1:b5:17:46:7d:92:81:0e:ce:f6:d5:0b:97:41:b8:31:
         eb:a1:91:22:4b:a5:3b:2d:83:95:cf:8e:52:d4:5b:9c:9b:f7:
         1f:c8:58:0b:e4:07:0d:b3:38:84:66:01:6b:9d:81:30:07:50:
         95:00:b3:80:66:0a:ed:ff:92:a0:0c:de:b2:1f:0e:4f:08:98:
         9a:b4:c8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:05 2025 by rpki-client