Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File:                     dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier:          ckQhZ1o6esb5+JQap+pc9F/1bNJNccXHVn0osQt172A=
Subject key identifier:   DF:A8:DF:B3:15:D6:F4:92:95:9A:1C:24:43:37:5C:25:BC:2E:BF:76
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer:       /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial:       0198D4DFD409B81DF396BF6ED0644EF1FB17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number:          045D
Signing time:             Sat 23 Aug 2025 03:01:35 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:35 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:35 +0000
Files and hashes:         1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: HlOsJCApDmfQAjkn38ozShMqhlldQjMfnMoNgulsiOA=)
                          2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:d4:09:b8:1d:f3:96:bf:6e:d0:64:4e:f1:fb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
        Validity
            Not Before: Aug 23 03:01:35 2025 GMT
            Not After : Aug 24 03:01:35 2025 GMT
        Subject: CN=dfa8dfb315d6f492959a1c2443375c25bc2ebf76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:7b:3d:b0:8b:ed:bb:53:f2:5e:9a:5d:28:
                    9d:c4:41:54:c3:18:b7:3d:74:bd:19:a0:18:ae:f6:
                    fb:5e:2a:76:41:ad:c5:e1:a9:53:51:b2:21:86:ef:
                    b0:f4:76:bb:db:f0:33:42:6c:2d:f1:3c:d0:4e:23:
                    8a:f7:60:5e:ee:be:e3:a4:10:02:5f:38:89:a5:49:
                    36:3b:14:28:ad:7f:26:8b:84:f1:60:51:70:bb:19:
                    06:8f:3c:d0:fd:66:ae:05:5d:22:d8:c5:07:2a:ae:
                    df:65:bf:3f:75:f5:65:51:1c:d9:72:1a:d2:95:c5:
                    32:7d:40:fc:d3:bc:bd:23:e6:2b:68:b0:7a:ab:4d:
                    9c:46:d5:1d:82:77:ca:4f:c6:b3:e1:2d:6a:15:be:
                    de:80:9f:52:f9:f3:0a:6b:6e:65:f1:13:c7:f6:de:
                    62:e5:9c:06:da:69:17:5f:d3:43:de:11:28:9e:f4:
                    42:c8:2b:4d:df:83:99:48:0f:f3:cb:2c:60:a1:ad:
                    05:00:f7:e1:74:96:49:65:21:a2:b6:49:43:02:9d:
                    3a:db:03:e7:8f:02:d4:e4:6d:ac:ae:bd:20:05:38:
                    46:e1:e2:30:cd:4e:11:f7:db:ce:1a:18:37:a5:7c:
                    e3:d3:6d:e0:c0:cf:ed:c1:d3:b0:d9:c4:d8:35:95:
                    d5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A8:DF:B3:15:D6:F4:92:95:9A:1C:24:43:37:5C:25:BC:2E:BF:76
            X509v3 Authority Key Identifier:
                keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7b:03:49:84:d1:d7:1f:9e:bf:dc:7d:2e:97:7f:8a:0a:7f:
         3d:d3:3d:cc:57:85:8e:47:48:2e:3d:1e:e6:f6:4e:46:67:bc:
         be:c7:0d:32:48:3b:3d:79:31:6e:5c:b8:24:c3:76:cd:00:e7:
         59:d5:0e:5f:1d:64:f3:19:6f:9b:ac:97:d6:82:5d:af:02:34:
         28:ad:53:ee:e8:05:bd:19:9b:3f:27:13:65:d5:de:de:6d:04:
         c0:96:02:b3:5a:61:fd:16:d1:06:75:7b:23:74:2b:64:35:2a:
         52:6a:cc:5b:a8:22:dc:b0:4c:e5:d4:e3:09:2f:13:8c:2c:ae:
         ea:dc:e5:0d:5c:6d:0d:0b:d8:87:8c:51:de:a2:d8:9a:ce:af:
         7d:61:3f:9e:c5:0b:f6:3f:17:5a:fa:16:4b:a9:60:6e:8e:9b:
         e6:95:c2:88:bc:11:fb:bc:47:a8:8e:68:51:e8:4f:d1:d5:f3:
         71:07:87:33:45:4a:22:2c:32:86:79:a9:a0:2b:68:40:45:52:
         51:d8:6a:01:6b:0f:84:70:cd:ea:26:ae:4c:f3:05:be:2e:e8:
         9d:65:04:9d:30:83:3e:45:7f:f5:ff:76:13:62:d6:30:30:5c:
         28:0e:f5:0f:3f:a7:fd:8b:29:19:0c:0e:97:39:5f:f2:c7:74:
         4c:ab:39:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:47 2025 by rpki-client