Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
File:                     DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json)
Hash identifier:          nwSo67iUtzMnAwNHEEDzcrFX9L00PUsAbcue4wJeEzk=
Subject key identifier:   47:4C:7F:80:F1:0A:1C:67:6F:BA:39:B3:29:70:CD:6B:54:9B:5A:FC
Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
Certificate issuer:       /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Certificate serial:       0198D54DC67C408D26AC4CC21D3A38A0F535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
Manifest number:          07B4
Signing time:             Sat 23 Aug 2025 05:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:40 +0000
Files and hashes:         1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: BX0cHBOsyZHzAZGziOTR7fcV3DAvK/WnLlkWkN+9ufY=)
                          2: GXOLHwEFu0p7gKJgkJ5kY6IvzIE.roa (hash: pAl+GrJaPPBbeJpVI3BoizE0NzXiXcJyNH8QYeo2rB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c6:7c:40:8d:26:ac:4c:c2:1d:3a:38:a0:f5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
        Validity
            Not Before: Aug 23 05:01:40 2025 GMT
            Not After : Aug 24 05:01:40 2025 GMT
        Subject: CN=474c7f80f10a1c676fba39b32970cd6b549b5afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:dd:2c:66:1b:16:64:11:65:fa:f8:de:aa:
                    f3:40:6c:14:ac:4a:4c:62:53:b8:d6:13:33:b5:25:
                    ab:7c:03:72:0e:7d:db:9e:51:7d:13:5c:bd:78:11:
                    f1:9f:c7:11:6f:15:cb:9d:b5:7c:d5:22:f9:f9:a1:
                    28:a0:7f:2d:79:1d:15:48:f7:14:3e:ee:68:b4:65:
                    03:20:cf:92:1e:13:21:6e:12:cf:1d:a0:a6:28:fc:
                    c3:75:34:c3:8f:5b:3c:84:53:13:0e:cd:52:24:32:
                    ef:e6:dd:b2:7b:45:39:6f:91:b0:d5:8b:e6:ee:96:
                    05:a0:45:1c:56:77:76:32:9a:47:fa:65:01:a7:1b:
                    0e:13:1a:f3:5e:fa:d6:f9:cf:c4:62:04:11:b0:2d:
                    2f:9a:88:df:00:1c:dc:48:b0:75:ef:2c:49:e4:f6:
                    8b:ad:f3:37:4a:17:23:ab:75:16:c0:3b:24:88:66:
                    72:01:44:88:04:94:aa:15:e6:84:08:70:10:c1:26:
                    c7:45:ba:43:b4:40:67:23:19:f1:b7:8d:20:a1:e0:
                    c2:85:06:8c:fd:8c:d4:42:cb:03:c1:d0:f3:83:98:
                    46:af:13:d0:9f:0b:30:81:3b:25:07:11:21:f9:14:
                    d3:b8:25:6a:b2:dc:40:58:e3:8f:bc:b9:d0:a3:1c:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4C:7F:80:F1:0A:1C:67:6F:BA:39:B3:29:70:CD:6B:54:9B:5A:FC
            X509v3 Authority Key Identifier:
                keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:16:12:6b:99:31:2f:58:61:d1:5c:4d:f7:07:e6:0c:e5:e9:
         53:f0:a5:66:41:b3:f7:9d:c8:0c:da:8e:49:6e:bd:4f:cf:59:
         61:96:b0:42:bc:37:dd:4f:59:58:b9:87:22:31:6f:f2:58:5d:
         58:81:23:76:41:91:a7:1a:4c:bc:2f:54:8c:db:73:a2:59:8e:
         fc:43:f2:db:38:37:61:fd:05:84:d5:62:a2:10:e8:3d:ad:04:
         2d:77:0e:15:39:6b:f5:ab:7f:33:01:9a:71:ca:35:08:2c:ad:
         de:08:25:aa:66:46:7e:f9:09:b4:22:45:bd:83:8f:e8:c2:12:
         2e:f0:d9:41:f3:c7:eb:ca:79:b0:5d:26:55:7b:c3:c0:5f:ad:
         5a:fa:cb:eb:db:81:53:04:3f:81:e3:49:e1:f4:43:3b:8c:34:
         0b:b2:0e:a6:a2:8f:8e:b8:07:2e:d8:70:13:4d:3c:8b:52:c8:
         f7:c5:0d:cc:78:59:b1:83:7e:38:62:d7:03:7f:c7:0a:2c:0b:
         c2:f5:ef:07:56:ad:9f:9d:0e:aa:b7:06:12:70:2c:87:d8:e8:
         c8:16:3d:61:19:39:53:26:ac:23:a5:4b:3d:86:60:43:fe:6b:
         13:03:31:db:52:3d:d1:09:3f:15:8f:c7:17:0d:1c:93:24:db:
         c5:fa:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:30 2025 by rpki-client