Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File:                     RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier:          Lx7NpPIcPqN3ilIqic+/+OaNdfYSLwKJ/AyDsQT259k=
Subject key identifier:   A3:E3:FF:BA:C9:9F:71:CC:1C:FB:55:9D:4E:89:36:6D:C9:C1:D1:3A
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer:       /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial:       0198D54E8775C3333BFDBDD826FECD372849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number:          0A39
Signing time:             Sat 23 Aug 2025 05:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:30 +0000
Files and hashes:         1: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: A1tXibasDjHfcHGgpZNC4nCGkVtdAClSjuW7D1i1klo=)
                          2: lbF_l02xwlPuqyIyhvc-CUJUU3g.roa (hash: 7hIs2Gkxh47foaseC5DC1sFgdBVuaxJrQVf2xLhJkbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:87:75:c3:33:3b:fd:bd:d8:26:fe:cd:37:28:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
        Validity
            Not Before: Aug 23 05:02:30 2025 GMT
            Not After : Aug 24 05:02:30 2025 GMT
        Subject: CN=a3e3ffbac99f71cc1cfb559d4e89366dc9c1d13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ee:e8:64:98:10:78:d3:bf:5c:1b:84:8c:69:
                    09:0e:ef:e4:a4:47:2e:55:96:73:03:b0:45:87:80:
                    1b:73:35:ca:a0:81:2b:56:61:57:6e:72:12:02:83:
                    4c:05:1d:97:e8:9f:7c:fc:bc:61:fd:fd:25:55:b8:
                    b8:c0:8a:99:13:1d:2d:5e:1e:3c:46:aa:0c:24:54:
                    4b:56:f2:e7:5f:8a:9a:3e:22:8a:0a:c3:17:a5:e9:
                    20:27:99:7d:d5:c8:49:01:2c:a6:9f:c7:dd:9e:5b:
                    f7:b6:f4:f4:4a:d0:dd:cc:f4:81:c0:7e:72:08:84:
                    20:de:55:af:88:87:49:52:30:6c:7e:0f:17:dc:8b:
                    0e:ac:23:13:2e:e2:73:28:0f:d7:51:1c:ed:ea:05:
                    29:4d:39:8e:0e:e8:07:d1:45:68:09:a8:16:46:41:
                    07:46:e6:bb:20:bd:d1:c9:ab:a3:11:54:0a:1c:3b:
                    99:aa:bc:68:e3:24:c3:8c:b3:77:bb:23:e9:65:c9:
                    95:00:22:96:22:97:c7:ac:75:05:b7:52:7a:e5:94:
                    d3:0e:c6:bd:37:91:99:cb:df:c9:b9:f0:3e:30:69:
                    1b:93:89:97:b1:ae:73:2f:d6:68:be:1b:91:90:ce:
                    d5:7e:21:d9:6a:e3:25:d5:a4:c5:9f:00:41:c2:54:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E3:FF:BA:C9:9F:71:CC:1C:FB:55:9D:4E:89:36:6D:C9:C1:D1:3A
            X509v3 Authority Key Identifier:
                keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e1:ad:b0:82:f8:05:42:c1:0b:29:e0:56:29:23:d8:8a:5b:
         04:04:af:29:27:43:d3:b4:f2:ea:1d:6b:08:2d:3d:0f:92:87:
         9e:72:26:8e:bd:0b:11:34:14:09:9c:a0:76:2d:6f:d9:27:48:
         30:a9:68:bd:58:67:8b:8b:6e:bf:8b:58:f9:29:6c:6d:4e:06:
         f6:4c:85:fa:a8:82:18:99:47:a8:9d:7d:00:70:91:3f:62:5f:
         5b:7c:d9:01:3b:70:cd:54:ef:ab:a8:8e:4f:f3:98:13:27:a4:
         f0:99:64:dd:85:01:3c:ba:1d:77:52:46:03:ea:f4:39:d8:7a:
         61:ab:b0:ca:1c:84:6f:0f:79:e1:69:f5:46:94:b8:cf:f2:bc:
         ec:3b:e4:46:df:c6:43:d0:53:fc:41:85:25:a7:20:66:f6:58:
         5f:e0:d9:ff:de:96:1e:6a:b1:a6:59:d9:e9:8d:1a:b2:33:fd:
         cb:fb:89:e5:70:35:ed:45:56:bf:f3:c4:e3:3f:57:34:92:92:
         af:ce:4e:5a:6c:17:91:19:83:e4:91:ac:fa:12:e4:9f:21:4d:
         b3:8e:10:9a:5e:8f:78:b0:57:e9:0f:1f:cb:f2:a2:54:27:4e:
         ec:08:05:21:8c:96:76:09:1a:cd:97:9a:18:57:f8:8b:cd:d1:
         88:ea:35:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:11 2025 by rpki-client