Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File:                     156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier:          kNEmwKh1+6xamW/ZeZ1ioS8JadV3N3wSBfHWUzrOyXo=
Subject key identifier:   CD:70:3F:4D:F8:A7:2B:84:32:46:C8:9D:28:63:9B:FA:FD:84:04:44
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer:       /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial:       01987ED38F7EED972296E57C8C50364087D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number:          0CC4
Signing time:             Wed 06 Aug 2025 10:00:50 +0000
Manifest this update:     Wed 06 Aug 2025 10:00:50 +0000
Manifest next update:     Thu 07 Aug 2025 10:00:50 +0000
Files and hashes:         1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: 3MHwCZ4RgqXJvObHZcG6P+HpQ1GCO5EtT0CTsglUZvU=)
                          2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=)
                          3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:8f:7e:ed:97:22:96:e5:7c:8c:50:36:40:87:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
        Validity
            Not Before: Aug  6 10:00:50 2025 GMT
            Not After : Aug  7 10:00:50 2025 GMT
        Subject: CN=cd703f4df8a72b843246c89d28639bfafd840444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:28:f9:31:f4:16:78:2f:9a:2c:58:1a:a1:
                    d6:e1:eb:a0:3a:18:ff:4f:ef:8e:c7:3b:67:32:e1:
                    8a:4b:da:e6:4e:07:be:a7:46:b6:67:a1:67:a4:04:
                    f1:9c:bf:52:81:43:7e:bc:1d:5a:5b:14:c2:c9:cd:
                    cf:37:c4:2c:17:38:58:38:6d:bf:66:58:1c:33:1e:
                    7f:2e:b2:0d:0a:af:ab:81:54:8a:3a:a8:49:19:18:
                    9e:31:5d:ca:d2:ca:c2:44:27:21:67:5f:cb:75:cd:
                    bd:92:d0:a8:68:08:0a:df:6f:02:6c:fb:bb:63:dc:
                    60:e6:40:5e:54:56:e5:09:e3:46:85:f7:fa:12:4d:
                    df:35:6f:7c:5b:25:a0:15:da:e5:7f:4d:0c:8d:cc:
                    44:86:60:48:88:83:94:fe:d8:c0:7c:83:e0:ae:1c:
                    e5:90:ce:a6:0e:9f:54:be:a7:35:44:a0:e0:97:c0:
                    f6:05:a7:bb:da:77:58:d0:80:9f:78:b5:57:23:79:
                    f5:b2:f1:0d:cd:a1:dc:7b:6f:b7:73:20:e1:ea:27:
                    ab:9b:c1:d8:6e:dc:a9:5e:6e:d5:a9:25:ce:7a:2f:
                    7b:88:bd:c1:9c:4a:d0:25:a6:1f:3d:d3:eb:3a:b7:
                    e7:b1:6f:7a:79:a6:42:30:64:8e:52:d3:4c:44:71:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:70:3F:4D:F8:A7:2B:84:32:46:C8:9D:28:63:9B:FA:FD:84:04:44
            X509v3 Authority Key Identifier:
                keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e1:b1:ed:21:86:75:8c:77:e2:bb:4b:ba:cd:23:89:14:06:
         00:66:38:c6:e9:e5:19:59:d7:1b:e5:8b:12:54:38:61:e4:b5:
         e3:d3:e2:16:ff:e0:77:20:6d:6a:a4:98:2c:24:cf:07:12:58:
         97:b7:32:01:1e:d8:73:ab:55:13:d4:d1:19:84:e0:94:e2:e2:
         4a:7e:51:f5:11:1f:21:d3:fa:72:0f:32:f1:d6:5b:d3:b8:67:
         bc:21:d1:05:c5:14:92:d1:0e:ab:ed:8f:37:53:24:32:70:88:
         66:ba:14:18:f3:20:b5:62:fe:d8:7e:34:21:22:a6:59:b5:8c:
         71:f6:60:25:76:7e:8d:02:97:9d:2e:08:be:ec:f0:8d:82:a7:
         2e:e2:74:f4:6b:cd:5e:b1:6f:65:64:67:d7:d6:31:0f:7f:3c:
         2b:89:7a:19:62:3e:73:b5:ef:b2:48:44:64:2d:13:af:19:95:
         23:99:27:3a:21:3a:ba:8f:80:0d:3d:56:7f:b3:4c:a8:35:bf:
         8f:f9:09:57:b6:73:78:b9:85:21:69:37:be:c4:f0:5b:1b:92:
         fc:42:d1:87:55:5a:88:e3:c7:89:cc:a6:97:b1:e3:b5:68:49:
         dc:38:94:af:dd:ca:54:a5:89:c5:26:b4:81:c8:ce:b6:b1:ae:
         69:e9:24:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:48 2025 by rpki-client