Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File:                     0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier:          8Ucf1KHptdsS7xCT4J30gEGiRdm8+KRzAP6Qn+eSVi4=
Subject key identifier:   63:1D:00:A9:F1:B1:B8:E3:D6:7E:3D:AF:29:D7:84:9C:E1:FA:78:33
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer:       /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial:       019890356245FEDB0D03FC8C5FED29A9C078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number:          0A34
Signing time:             Sat 09 Aug 2025 19:01:14 +0000
Manifest this update:     Sat 09 Aug 2025 19:01:14 +0000
Manifest next update:     Sun 10 Aug 2025 19:01:14 +0000
Files and hashes:         1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: +u1XA7oXCu58Ks+6iEoTHmfF9ut0ewBvSschHhNDXWc=)
                          2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:35:62:45:fe:db:0d:03:fc:8c:5f:ed:29:a9:c0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
        Validity
            Not Before: Aug  9 19:01:14 2025 GMT
            Not After : Aug 10 19:01:14 2025 GMT
        Subject: CN=631d00a9f1b1b8e3d67e3daf29d7849ce1fa7833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:8d:61:bf:e1:07:e6:ad:f9:16:92:46:26:
                    74:5a:c2:2c:3a:08:62:85:7b:da:5a:59:48:00:a3:
                    fc:ac:5f:db:fa:69:97:f6:68:da:d0:eb:ad:65:2f:
                    ab:5b:9a:a4:02:88:8b:89:89:7d:61:e6:e7:e8:2e:
                    fb:8b:01:f9:0b:96:5b:54:8e:3c:cd:f8:f4:c8:5a:
                    41:58:c7:07:38:69:ea:cd:fa:1b:8a:4d:d2:8b:5d:
                    c0:7d:67:9d:0a:7b:95:67:65:3f:e6:b2:af:d0:c6:
                    fc:6a:e6:c9:c0:46:47:7d:b4:a9:aa:1b:ce:e9:20:
                    00:99:5f:0d:ff:e9:2f:45:8f:7d:12:d6:6c:d3:98:
                    d8:8d:b1:ed:c7:af:66:29:8b:df:a2:0f:da:bf:c7:
                    49:50:da:2c:32:a1:32:7a:30:21:3c:48:e8:1b:13:
                    e3:62:7e:c5:88:78:9e:c5:50:5c:81:11:45:2c:4f:
                    2f:ba:70:7d:dd:4d:ac:69:8b:aa:ef:25:b0:26:3d:
                    99:c7:e8:83:4f:8e:50:1f:83:07:19:9e:1c:d6:e1:
                    b6:60:df:d1:b8:ab:09:4a:56:22:f3:1a:12:92:a4:
                    34:0e:78:01:bc:f2:05:53:3d:6f:c8:9f:c0:5d:23:
                    9b:f6:8b:b7:ab:9d:66:18:a4:84:e2:b4:25:d0:1c:
                    64:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1D:00:A9:F1:B1:B8:E3:D6:7E:3D:AF:29:D7:84:9C:E1:FA:78:33
            X509v3 Authority Key Identifier:
                keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:bd:fe:fe:66:81:ef:e9:b7:3c:a6:16:94:1f:75:af:95:aa:
         4b:96:a4:56:8e:bc:be:db:37:07:85:3e:96:bd:57:9b:47:7f:
         99:a6:8e:ef:fe:90:74:ed:3c:33:47:6b:52:2a:6f:8c:b8:3b:
         f2:27:2f:bc:b4:0b:db:2a:56:8a:e6:ac:ee:f6:9b:ec:56:86:
         13:94:8c:f9:ba:33:ed:0f:bd:90:7c:73:84:eb:54:66:da:b3:
         5b:03:a1:45:f8:8c:04:03:e7:96:2c:20:c4:35:12:f2:a6:08:
         cd:74:d8:a9:41:e7:a0:f6:a5:fc:c7:a5:05:9a:ae:03:bd:dc:
         cb:67:2b:0c:a1:55:b1:3a:93:4b:ed:bc:aa:f2:01:5a:63:59:
         7d:66:bb:cb:0f:bd:e8:15:ac:8c:a0:b3:37:46:8d:fc:39:f0:
         28:12:32:c1:8e:d7:2a:0f:db:35:ad:73:1a:74:9b:43:46:66:
         74:d0:7f:18:7e:59:7f:b3:39:64:f3:a2:3c:82:32:11:52:d9:
         77:14:dc:b5:9e:d1:ab:b9:2d:99:a5:c6:5a:b2:81:6f:86:c4:
         82:05:7e:8c:ca:45:af:64:fa:69:84:0d:64:c8:14:82:0a:a1:
         f6:db:98:b4:88:22:f5:0c:9c:65:b3:1a:7e:b5:06:4c:63:15:
         bb:bb:03:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:43:48 2025 by rpki-client