Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File:                     RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier:          YSxPZfU21Y8FQ891CsJFvaIVIny+UXJw/dquFHWAago=
Subject key identifier:   F2:E7:B4:92:67:EF:5C:DC:59:34:40:16:98:A8:7D:C4:9C:1C:8A:23
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer:       /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial:       0197C681A64BE00793F8933DE9CE7C3257E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number:          0F32
Signing time:             Tue 01 Jul 2025 15:01:14 +0000
Manifest this update:     Tue 01 Jul 2025 15:01:14 +0000
Manifest next update:     Wed 02 Jul 2025 15:01:14 +0000
Files and hashes:         1: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (hash: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=)
                          2: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: 7mhKLI2UETNrGhrBbrPHSUzvBaQ9+0AClRHgJBISyJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:81:a6:4b:e0:07:93:f8:93:3d:e9:ce:7c:32:57:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
        Validity
            Not Before: Jul  1 15:01:14 2025 GMT
            Not After : Jul  2 15:01:14 2025 GMT
        Subject: CN=f2e7b49267ef5cdc5934401698a87dc49c1c8a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:2f:e2:27:e7:80:e5:f4:d6:99:a0:04:a1:
                    22:fe:6f:c9:b0:ce:7e:44:e2:fd:b6:9e:24:02:41:
                    de:9d:76:6d:ae:be:96:28:f0:2d:5f:21:17:94:c4:
                    af:ae:62:cd:a5:0a:5f:71:a7:2c:44:b4:77:01:8a:
                    08:ec:b1:09:b3:39:4e:e2:e5:4b:0d:c5:1c:cd:d9:
                    11:f4:ce:4e:d2:10:7f:c5:a4:cb:83:16:f0:15:2a:
                    73:d9:f1:b9:27:48:f9:76:e9:0a:58:81:f1:4c:91:
                    61:dc:b3:8c:9f:e7:b3:b6:4d:b2:c6:f8:6b:5f:2a:
                    bc:3a:a4:f2:25:4f:f1:21:e9:b8:3a:8e:08:c9:75:
                    3a:95:17:1c:98:36:5f:b6:ec:eb:1f:db:d8:3b:af:
                    8e:40:21:0a:cd:ce:f5:9c:23:cb:e1:fe:7f:af:f1:
                    90:2e:82:3a:2e:89:85:12:59:7a:4f:92:1b:9c:a4:
                    88:23:c6:7f:b7:9b:a6:e8:46:12:d4:a9:e7:a0:58:
                    39:fc:6f:d1:bd:ba:b2:1e:a1:1f:bf:82:f3:86:f8:
                    2e:bf:cf:4d:23:7c:3d:59:cc:c3:3e:db:e8:35:bd:
                    36:2e:5b:a7:e3:37:d5:19:c4:67:25:67:65:1a:1e:
                    fc:59:17:4c:40:06:6d:89:26:da:c6:68:4d:ea:65:
                    7c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E7:B4:92:67:EF:5C:DC:59:34:40:16:98:A8:7D:C4:9C:1C:8A:23
            X509v3 Authority Key Identifier:
                keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:47:21:25:99:91:2b:49:d6:b5:93:56:3b:d5:00:dc:61:f7:
         41:e6:69:57:8f:92:12:d7:6c:a6:e9:ae:ac:64:92:27:48:1b:
         e9:43:bc:70:a8:1a:c7:a1:d8:1e:01:a6:01:89:77:08:76:2a:
         2a:e8:46:8d:56:e0:65:0d:de:40:f6:eb:21:7d:16:65:02:6c:
         5e:0c:35:bd:a6:2c:40:3b:6a:c9:d2:32:a8:d1:5e:78:22:5e:
         f5:29:65:57:90:ce:88:cd:e7:79:53:ee:3b:33:70:77:2f:15:
         e2:96:50:20:a0:5c:d0:36:e2:82:1a:5c:2f:de:36:2b:c8:d5:
         9c:12:a5:7e:fc:97:ed:26:c0:04:36:73:e6:74:47:ce:d6:58:
         42:14:29:ac:d0:4b:44:cd:d4:70:b9:8f:30:bb:c2:53:6d:f9:
         00:78:0e:8b:2f:35:3e:82:26:8c:eb:69:3e:69:9b:5e:48:fd:
         c6:32:ed:62:dc:12:e7:2b:56:40:08:ca:f8:05:4e:fe:b2:47:
         a6:b1:da:32:4f:46:75:77:67:84:05:e6:77:51:fe:a7:df:cd:
         c8:bb:29:48:c0:64:46:d0:d1:c8:ea:79:3f:d9:0c:18:26:94:
         36:a5:51:ab:ce:55:21:fa:17:cc:fa:53:68:b4:ab:08:d6:8d:
         5f:b5:4f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:24:42 2025 by rpki-client