Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
File:                     dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json)
Hash identifier:          Owv2VZhgSHp3x2ZiZ0dEBMAhfN3nTHKomJ1FYpbzQ84=
Subject key identifier:   07:69:5F:66:C2:F8:71:63:52:0C:C3:E8:30:69:74:84:C9:C0:BF:BE
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Certificate issuer:       /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial:       0198D54E9AC60200B09DCCC0CC08947ADA74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
Manifest number:          02DE
Signing time:             Sat 23 Aug 2025 05:02:35 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:35 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:35 +0000
Files and hashes:         1: 6zamDTUBwAsnOFkspEkx8jbI6wY.roa (hash: dvRTh/kPMauvkj5ufzVensqKmDYCodFR0kOnwH7zmxk=)
                          2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: EZLItVotk6qCMSamB6L+bgpQhzpDwL94rV4yG0DchWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:9a:c6:02:00:b0:9d:cc:c0:cc:08:94:7a:da:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Validity
            Not Before: Aug 23 05:02:35 2025 GMT
            Not After : Aug 24 05:02:35 2025 GMT
        Subject: CN=07695f66c2f87163520cc3e830697484c9c0bfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:49:de:94:2e:e1:1f:f2:0e:4f:09:90:84:
                    88:b6:3c:12:6f:91:64:fa:64:29:c2:86:d3:ec:24:
                    af:01:45:fc:88:9b:71:4e:40:7f:f1:ab:fd:df:db:
                    da:2c:5f:f0:ab:d8:43:d2:da:bf:b6:6c:ce:79:3f:
                    74:0e:b9:50:04:d7:52:27:fa:64:d7:b0:ed:c0:8d:
                    10:54:0c:9b:16:46:95:5b:ea:de:33:d1:05:3a:87:
                    47:56:a9:11:e6:27:29:54:77:7e:01:03:d2:37:6e:
                    5b:e1:ed:71:fa:73:e3:3c:6b:61:22:db:3a:78:c1:
                    ae:13:4c:f2:d1:2f:54:9f:b4:a8:d2:49:d9:90:10:
                    a2:5b:78:d1:81:8b:e4:f5:05:47:68:86:bc:a2:13:
                    d0:8e:65:89:92:d2:b3:6a:4b:01:1a:38:cb:e7:4e:
                    c2:5b:33:91:eb:74:dc:7e:63:1b:8b:b6:0f:4d:5e:
                    19:09:be:32:5c:5a:f0:b4:12:98:aa:9e:46:80:af:
                    70:a9:2b:00:17:79:de:12:c7:ad:49:36:75:08:d3:
                    4c:77:1a:8f:ab:85:c2:ab:1a:b6:84:83:91:a1:a5:
                    ed:ed:85:3d:3b:d8:7c:b5:ba:f4:09:73:ee:00:07:
                    c8:86:41:9c:8b:60:d7:fc:56:4a:29:e9:96:62:ba:
                    e6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:69:5F:66:C2:F8:71:63:52:0C:C3:E8:30:69:74:84:C9:C0:BF:BE
            X509v3 Authority Key Identifier:
                keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:26:c7:cb:25:35:9a:bb:e1:92:56:38:c5:7a:b4:21:16:12:
         63:24:fd:8a:e0:72:ca:43:84:d8:b1:1c:b5:21:cc:c5:fc:53:
         84:18:a0:20:a2:b7:09:58:db:8e:67:7d:68:86:c4:ac:3a:54:
         8e:52:2e:7c:7c:28:07:c3:8f:d0:aa:e1:b7:fb:77:b3:bf:18:
         79:d0:f9:82:70:3c:0a:09:60:e5:cd:20:db:80:ac:46:8a:28:
         34:d0:cd:89:a8:45:72:1f:f1:f7:46:69:c3:9f:5b:bd:95:41:
         3a:42:53:43:56:87:45:ab:f5:f1:0f:a0:2f:e8:34:d2:1a:4e:
         fd:08:a9:03:40:fa:8f:7f:f9:20:18:1a:04:77:37:f2:83:68:
         95:9d:52:48:f6:66:18:5e:b4:9c:80:c5:cf:eb:44:3a:73:c0:
         af:99:53:3e:e1:3f:f1:95:67:30:0f:36:d2:fe:20:d8:6d:46:
         2e:d2:8f:49:21:ef:00:96:f0:b4:f5:6f:70:f6:cd:c1:ad:f4:
         c8:ba:ca:8e:97:e7:2c:20:90:b3:5c:4b:1b:d0:e9:bf:cf:be:
         93:f1:d5:6c:8e:21:e7:09:d0:df:b9:1f:c0:b7:2d:7f:d5:64:
         6b:f8:21:89:b7:1b:26:c0:30:44:2a:80:43:06:70:6a:89:43:
         d3:4e:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:38 2025 by rpki-client