Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File:                     2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier:          yvSwrHtABLWBgKSRYFVp7xSYVVhuyOeP1jPCAldHLQw=
Subject key identifier:   46:FA:77:39:E0:E5:E5:FB:01:B5:16:08:85:21:71:5F:14:3B:49:3F
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer:       /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial:       0198D5F1A3869A5BE34E4C5F7385D9CB73BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number:          0759
Signing time:             Sat 23 Aug 2025 08:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:39 +0000
Files and hashes:         1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: VMwFMjmWTPfxTt6Wni6NKUusE7fUrrAtwZGfZkV+HQ4=)
                          2: hdAMTn4jDkrD2hHAq0_eM98drDA.roa (hash: tBnX0T05qx7IyB4+d81WJZpMceoIZZmZdpDJiqlpcEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:a3:86:9a:5b:e3:4e:4c:5f:73:85:d9:cb:73:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
        Validity
            Not Before: Aug 23 08:00:39 2025 GMT
            Not After : Aug 24 08:00:39 2025 GMT
        Subject: CN=46fa7739e0e5e5fb01b516088521715f143b493f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:01:19:cd:bd:8b:3c:1b:74:9b:60:f8:16:
                    ba:22:c2:69:95:a9:5b:68:cf:9e:f2:75:8f:a4:a2:
                    0a:a8:73:7b:91:68:4c:c7:28:be:a0:fa:fd:0e:8d:
                    49:7d:29:c7:20:ba:fb:6e:9f:d3:ff:8f:e2:f8:48:
                    c9:93:b9:e5:7c:8e:15:af:d2:65:83:99:bb:0f:75:
                    ed:71:32:95:01:4e:30:21:a4:92:ce:89:af:a0:a1:
                    b2:75:b5:34:4c:38:41:f3:7a:be:54:36:59:5c:ea:
                    83:a5:0f:05:6a:70:95:0a:a9:8d:ba:8c:4b:2e:8b:
                    e5:2d:8f:bc:ca:5b:bd:23:7c:8c:59:f4:1f:ab:3b:
                    5c:79:ee:72:cf:0b:9e:35:ed:9d:ea:ca:c6:2a:a9:
                    73:1e:11:fc:0b:a3:27:3f:a0:c1:f4:4d:cf:54:4d:
                    35:dc:fa:fb:96:96:ef:4c:fb:9c:80:e8:f8:01:58:
                    ca:f1:17:92:ec:b9:4a:a5:46:64:44:31:87:41:05:
                    f2:83:9c:e7:9f:95:75:6c:ce:9d:32:9d:07:7a:da:
                    67:5d:d3:e4:e2:c9:4f:25:5b:3a:28:03:3f:62:b9:
                    00:84:e2:a0:2d:94:32:c1:00:b0:c9:2b:86:b8:63:
                    99:7f:67:5e:3e:66:c1:6a:fc:c0:dd:4b:3c:c8:d6:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FA:77:39:E0:E5:E5:FB:01:B5:16:08:85:21:71:5F:14:3B:49:3F
            X509v3 Authority Key Identifier:
                keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:3d:80:8a:65:6a:82:31:02:aa:96:f3:eb:4e:5a:93:7f:74:
         aa:51:1e:d9:83:6f:aa:21:ca:3c:8e:8c:7d:a8:a4:03:a1:76:
         43:36:52:a2:05:49:43:5c:45:b0:f3:f5:20:8a:2f:e3:7b:ee:
         74:f9:be:41:da:60:ec:be:d4:a8:5a:20:0c:0b:3a:32:b4:be:
         21:75:78:43:f1:e0:3f:80:61:5a:95:d7:f3:88:d0:98:4f:c7:
         65:e5:e3:62:61:91:46:0d:0f:a4:0d:52:20:88:b2:61:6a:b3:
         ec:d2:06:6e:83:5b:bd:fb:89:ef:4c:e7:d7:a9:60:8f:40:e5:
         47:5d:c8:06:d6:54:c6:ea:3d:fd:51:01:93:9b:50:25:c6:00:
         3d:0a:a1:de:ac:2a:2d:15:cb:2e:b6:4e:81:16:48:b2:3b:4e:
         f6:d1:b1:78:a2:4a:ef:bd:c3:29:28:79:78:9f:38:86:0b:b3:
         2f:65:ee:a1:99:81:c1:4e:ad:48:a9:80:ab:61:69:bb:9e:95:
         23:47:4f:69:75:fc:3e:61:f2:1c:13:15:69:74:24:33:e8:2d:
         2c:36:cb:3d:8e:19:bf:b0:2c:3c:42:2c:72:32:0c:48:92:6a:
         4a:4f:49:8b:14:1b:0a:1d:5f:52:50:46:aa:69:de:40:e8:71:
         ac:5a:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:57 2025 by rpki-client