Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File:                     CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier:          zkwOpwPrrQoT9KrX2q4t2lFB4Gu3+8mUcF0dLE8hELo=
Subject key identifier:   EF:93:D1:2B:9A:CC:83:D8:B3:96:D0:C3:20:6F:6D:C9:43:30:FE:86
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer:       /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial:       019872CFEEC05257D8E2A90B8A0B2833C652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number:          1544
Signing time:             Mon 04 Aug 2025 02:01:26 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:26 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:26 +0000
Files and hashes:         1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: PBxaK/j4ZynbG5sBPHz0mL38FTUn3H7yYqa9HJhWRlI=)
                          2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:ee:c0:52:57:d8:e2:a9:0b:8a:0b:28:33:c6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
        Validity
            Not Before: Aug  4 02:01:26 2025 GMT
            Not After : Aug  5 02:01:26 2025 GMT
        Subject: CN=ef93d12b9acc83d8b396d0c3206f6dc94330fe86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:7a:10:c0:83:1d:f2:af:67:33:ee:72:7e:
                    0c:43:90:b5:7e:5c:be:70:b9:92:fe:ae:2c:00:c2:
                    16:af:7d:58:42:89:58:86:38:83:d6:3d:ab:e1:fb:
                    a6:c4:cb:44:a7:3d:fe:e4:8b:d1:97:2e:3b:3b:00:
                    5a:37:31:e9:5c:a1:c4:d3:6a:0d:f4:51:cf:f2:ba:
                    a9:fe:eb:67:fe:ba:6a:a5:5f:87:ea:ea:94:17:ab:
                    23:4f:65:62:93:19:ff:c1:c3:ad:99:42:da:b2:ac:
                    9c:1b:e5:04:1e:e3:4b:2c:df:77:0f:ac:69:07:93:
                    d3:56:8d:12:a3:07:bb:fc:d7:75:79:00:a3:d8:a8:
                    2c:a1:08:3c:f9:b1:bc:05:7e:78:58:e7:03:57:c4:
                    e1:1c:49:ef:3c:f3:ce:b3:5a:5d:c3:e2:78:11:29:
                    b8:32:a0:5f:6e:f7:f8:2d:37:5c:4f:4c:83:c0:a0:
                    1a:0c:41:25:0f:0d:59:dd:d5:bf:f2:17:2f:df:8b:
                    3e:b3:d5:63:ad:91:23:64:e0:ec:85:7d:52:3b:76:
                    25:1c:0b:53:97:30:dc:18:46:5d:a7:75:31:fd:22:
                    e5:86:fb:e7:e9:58:e4:1e:13:1a:91:fc:85:ae:cc:
                    1b:cf:8a:2e:72:0f:a5:9c:38:96:8f:0a:e4:a7:7e:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:93:D1:2B:9A:CC:83:D8:B3:96:D0:C3:20:6F:6D:C9:43:30:FE:86
            X509v3 Authority Key Identifier:
                keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:17:10:c0:be:80:de:81:0b:ef:c7:fb:ce:3f:bc:f2:ba:80:
         6e:4d:19:0c:f1:11:4e:02:52:a5:37:d8:bf:d1:1f:9f:c9:b0:
         88:dd:11:2d:b6:3c:b3:12:db:e8:fd:0f:b6:d7:58:a5:e8:89:
         96:76:3d:c1:ab:59:22:a4:ec:10:80:63:61:d8:f5:62:d9:f8:
         f9:0e:ec:d5:ac:a8:42:47:29:ef:d0:c5:a5:2b:57:6a:ff:0f:
         fc:a8:28:bb:31:4e:0b:ac:0c:df:cf:3b:d4:ad:89:df:66:70:
         f6:a9:19:82:7b:08:d9:4b:ed:3b:f5:04:2c:e0:3d:60:92:1c:
         e6:98:95:b7:bc:2b:8b:3a:0d:c1:87:44:a4:71:6b:70:0f:75:
         aa:7d:03:1e:e5:57:7d:18:b8:37:c1:7e:c2:77:ed:83:7b:27:
         73:62:b4:7c:c3:70:f7:f5:0a:8e:8c:bb:41:da:44:6f:0c:59:
         f5:95:df:27:e0:82:25:26:7e:ca:54:48:e7:38:bc:4a:ca:a4:
         80:72:f6:ad:a2:a1:30:d7:e6:42:d1:e6:5b:df:fb:e9:4a:33:
         89:f0:c0:d7:6e:1a:5a:5f:ef:33:5c:26:f6:b2:6e:8e:fe:82:
         4f:57:7c:c6:2b:4e:38:55:a7:90:8a:cd:47:7e:30:5b:0e:79:
         9a:ba:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:42 2025 by rpki-client