Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File:                     0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier:          LM/7x+VNR+jFZTGoyWx8+SuZva+c6iljxSULB8MZYVY=
Subject key identifier:   E1:65:79:07:CA:8C:E1:F8:47:2C:73:40:13:5F:E8:E8:23:AE:79:D3
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer:       /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial:       01988279B64C233DBF032DB2A632077A106F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number:          0A22
Signing time:             Thu 07 Aug 2025 03:01:11 +0000
Manifest this update:     Thu 07 Aug 2025 03:01:11 +0000
Manifest next update:     Fri 08 Aug 2025 03:01:11 +0000
Files and hashes:         1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: u9SkVoLw8pquc3znJCDEwQGehQGJmhcBcyuSa6o7fTo=)
                          2: XLp6CpBQr9azCpsnYXzng1ufYf0.roa (hash: VoQFnds5dZA1et1XDrrDT8jx8hBkjrNF5oeGODTmq4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 03:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:79:b6:4c:23:3d:bf:03:2d:b2:a6:32:07:7a:10:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
        Validity
            Not Before: Aug  7 03:01:11 2025 GMT
            Not After : Aug  8 03:01:11 2025 GMT
        Subject: CN=e1657907ca8ce1f8472c7340135fe8e823ae79d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:b6:17:b8:dc:23:ba:94:98:46:17:1d:d7:
                    26:55:12:5e:5b:bc:77:a3:ec:29:2d:a7:dd:cf:bf:
                    45:02:77:55:0c:39:86:86:aa:5f:d4:a6:39:23:33:
                    69:f3:6f:83:ea:99:d2:e9:43:13:f6:bb:00:84:9e:
                    02:24:13:05:f9:d3:bd:1e:d1:5b:7c:41:20:ee:ba:
                    d8:18:fe:8c:1b:a6:90:3a:8f:aa:c6:2d:4d:bc:68:
                    10:97:90:65:32:9d:b9:e6:20:16:99:40:be:5a:0d:
                    fa:62:f3:2b:15:49:c5:37:ce:fb:64:7e:a6:88:d0:
                    2c:b4:44:61:cb:7a:05:9e:5a:a3:e9:e4:cf:38:73:
                    0d:95:2e:a7:75:57:d3:a9:73:43:f4:44:11:ce:7d:
                    3f:57:8d:d6:b6:b9:73:ff:c1:d5:1d:70:08:96:63:
                    a5:9c:bd:98:51:7a:a2:21:7d:99:20:a1:c7:97:2e:
                    10:56:36:33:ed:52:f7:fb:f0:eb:b2:e8:4c:43:6c:
                    b9:d0:87:25:50:24:b3:4b:11:8d:a9:36:21:c1:db:
                    48:e4:7e:ef:7c:99:da:d3:97:1c:cd:ac:ed:b7:64:
                    fe:de:a5:73:4d:21:b8:e2:49:e5:a9:53:93:56:80:
                    82:bd:1b:57:e4:fd:dc:0e:96:6d:4e:91:56:2d:b9:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:65:79:07:CA:8C:E1:F8:47:2C:73:40:13:5F:E8:E8:23:AE:79:D3
            X509v3 Authority Key Identifier:
                keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d1:7b:4b:13:5b:d8:6e:5d:e5:ea:0d:00:11:c0:8b:53:e4:
         a5:32:01:16:37:98:30:b6:c5:bc:0c:e0:e5:36:ed:2f:4c:fc:
         ef:1d:90:43:b9:8e:d6:30:ae:83:1d:f5:cc:fd:62:57:ac:a2:
         71:7b:42:01:b2:a1:25:c7:cb:5e:09:55:44:58:9f:c4:8e:da:
         7b:c2:4c:36:9c:9f:a2:b7:27:bf:d3:a2:2d:37:49:80:32:f6:
         87:eb:dc:f6:77:0d:a6:d6:ce:65:59:82:10:a9:80:7e:ab:f9:
         60:6d:5c:7d:03:9c:28:ad:f8:f0:3d:78:b1:3a:05:a1:ab:f5:
         06:13:0d:47:e2:9e:c3:7e:00:c1:65:4e:58:53:1a:d9:52:ce:
         42:f9:b6:24:af:50:32:33:78:90:8f:1d:2e:9e:ea:d2:5f:43:
         5c:a8:71:5a:95:c5:56:36:2a:29:13:4a:be:a9:15:10:6d:01:
         71:8c:d1:e7:0e:0a:27:f5:1d:c9:03:8b:6b:de:d2:be:cb:81:
         35:64:46:de:41:2e:49:cd:65:59:b9:6b:33:73:fe:51:42:84:
         33:04:c2:ce:58:54:36:0a:ec:a0:ae:2e:d3:e1:79:30:7d:ea:
         2c:e7:b9:f0:27:18:40:a3:58:f1:97:3a:1d:19:ea:69:c7:85:
         e2:07:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:01 2025 by rpki-client