Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File:                     TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier:          cWVHRDD9ESo242fll08RWHIr2Xv7cTco7CRYKzeGjho=
Subject key identifier:   36:9C:2F:D5:F0:68:B8:29:1D:89:62:4F:AC:5C:26:52:4A:92:3D:7A
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer:       /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial:       019885E86DF41C40BA4F2E0C8F3B815869ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number:          07B5
Signing time:             Thu 07 Aug 2025 19:00:58 +0000
Manifest this update:     Thu 07 Aug 2025 19:00:58 +0000
Manifest next update:     Fri 08 Aug 2025 19:00:58 +0000
Files and hashes:         1: Lns1LMe1--aCWobzDFBGvJLb-v0.roa (hash: 3lUaKCTyCDmb++7MRYHqVolI8pfAgpID3s0wPUzmsmk=)
                          2: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: KcSMPAsiUsGywPanruzdgZ76bf8fHBszZwZszz95n4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:e8:6d:f4:1c:40:ba:4f:2e:0c:8f:3b:81:58:69:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
        Validity
            Not Before: Aug  7 19:00:58 2025 GMT
            Not After : Aug  8 19:00:58 2025 GMT
        Subject: CN=369c2fd5f068b8291d89624fac5c26524a923d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:1a:1c:4d:f4:e2:95:9d:8a:18:53:b5:0d:
                    de:0b:1c:44:0e:6a:9f:be:85:33:87:6b:89:a0:ae:
                    ee:6b:2e:95:fa:12:7f:7b:35:ab:55:b6:59:59:52:
                    b4:41:fb:af:82:9e:ba:2a:37:89:91:63:ae:ef:ec:
                    2e:b0:3d:54:19:aa:5f:59:f0:3e:36:0a:70:45:ed:
                    b6:03:a0:eb:29:29:75:bf:c3:9b:27:a9:68:fa:68:
                    1b:cf:92:77:f5:5d:98:1f:c8:b1:a8:f2:4f:9c:61:
                    c9:f2:13:a6:8c:2b:6c:c0:7c:0c:76:9c:af:13:69:
                    0a:8a:b8:4e:4c:3d:d5:e5:81:10:db:0e:23:26:a1:
                    fe:0c:4f:3d:cd:f9:4b:fb:b6:4c:66:b1:2b:ff:f7:
                    98:7e:13:ed:a0:f4:0d:d1:a2:09:81:2f:23:af:dc:
                    01:8a:86:4f:4e:59:49:20:3b:1e:f0:b8:e5:9b:79:
                    92:f9:e5:27:fc:f6:c6:22:0d:ad:7f:06:ae:0e:26:
                    06:dd:c7:5c:8f:c2:f7:c6:9c:ab:03:56:02:4b:96:
                    41:1e:36:21:9a:8e:cc:12:70:7d:1a:5c:dd:f9:af:
                    6f:75:3c:91:09:3b:a7:29:d4:4a:d9:1d:0a:24:1d:
                    6e:f6:a4:bc:28:a7:74:fb:31:cb:2c:5a:0d:83:20:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9C:2F:D5:F0:68:B8:29:1D:89:62:4F:AC:5C:26:52:4A:92:3D:7A
            X509v3 Authority Key Identifier:
                keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:bb:49:37:d8:a1:a1:05:23:21:55:fe:6a:94:07:30:4a:b9:
         02:73:7c:f5:ce:2c:e5:cb:de:60:bf:dd:ca:7d:f9:90:c8:28:
         b1:86:6b:40:04:f8:3b:ab:da:d9:a2:2b:05:33:08:de:06:65:
         4d:2b:db:de:cb:e1:cf:68:38:18:ce:7c:03:f4:16:26:9f:4c:
         ad:5e:cc:e3:36:d3:ee:44:6d:30:bb:2c:a8:61:9a:5e:cc:9e:
         f6:37:95:2f:ee:a3:af:0d:ff:02:53:9d:55:79:01:7b:31:7e:
         19:cf:d1:d5:4a:e8:68:7c:b4:c2:a9:00:5f:ec:fb:8c:fa:a8:
         84:16:52:08:63:82:2b:ed:f4:b7:9f:78:3d:51:e2:9f:a1:e4:
         5a:c1:9a:5d:88:ba:ee:1f:0a:3c:a2:ff:77:02:bc:f9:e7:bc:
         80:83:29:c4:ec:cd:2a:31:83:b9:1f:4d:03:6f:d9:0e:35:ce:
         bc:e8:7e:89:9a:2a:d4:d7:7d:84:39:c2:da:23:f2:b6:89:7c:
         f7:cd:1a:bf:b6:dc:fb:d2:34:86:bd:41:38:13:29:42:88:6b:
         3c:43:35:46:ce:42:54:83:07:8a:85:f2:c6:1a:6e:ba:61:90:
         df:06:aa:76:9d:e3:32:1f:8e:b5:30:bb:ef:56:c9:76:a8:4b:
         7a:f8:bd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:34:11 2025 by rpki-client