Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File:                     dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier:          oFSlVduLaGy0FUBua/lkPWmrd9gfp4NW5QvMcjg4SJ0=
Subject key identifier:   F7:63:96:4A:CC:51:C6:1F:DC:4C:45:14:5E:A7:54:E9:1D:0F:00:DD
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer:       /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial:       0198D5F1C218BA7247A295F95B36ADEDB273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number:          09A5
Signing time:             Sat 23 Aug 2025 08:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:47 +0000
Files and hashes:         1: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: LDfSucRDhLMrhIpfQczHTEvS8+HfpGMx7EMZtQlP0Oo=)
                          2: jgYJrOBGpxmFCRX1q-MlycW-osQ.roa (hash: zjiQPJ4SZc/bB7c5P+iOwvUmdfPHzDJrUsMFIzmnB8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:c2:18:ba:72:47:a2:95:f9:5b:36:ad:ed:b2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
        Validity
            Not Before: Aug 23 08:00:47 2025 GMT
            Not After : Aug 24 08:00:47 2025 GMT
        Subject: CN=f763964acc51c61fdc4c45145ea754e91d0f00dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:5d:91:96:ec:53:3e:84:b9:0e:86:d1:5a:
                    7a:69:54:be:d4:3a:c9:d8:21:43:6d:62:70:13:fa:
                    6f:fc:a4:e5:c9:1f:cb:f3:b4:13:ec:93:9f:3b:84:
                    80:11:64:15:67:ec:e7:cb:47:5b:ae:f6:a5:f9:7b:
                    5e:e7:9d:79:97:33:99:15:78:5e:67:5d:b2:8f:f2:
                    37:e0:4d:1a:ff:63:e1:69:60:f9:48:9c:a6:ea:78:
                    6a:22:d3:da:0f:be:fc:96:df:36:18:bb:2d:40:4b:
                    27:bd:5a:1a:04:1d:a0:21:af:c1:07:62:be:9d:7d:
                    30:66:e1:1b:13:ea:b4:f5:91:b1:e4:5d:4c:66:79:
                    60:24:6f:ad:44:89:ed:e6:d5:f5:09:e3:83:6f:91:
                    8f:62:97:0a:d4:de:42:5f:a8:ee:fc:d3:d1:42:07:
                    de:a0:0d:32:09:23:c1:87:51:ef:39:d4:35:9d:39:
                    ef:a4:90:7f:54:57:69:51:0d:c9:bd:80:f5:fc:d3:
                    f3:8f:3c:f4:16:a4:1f:e6:1a:7a:33:76:a3:bc:51:
                    c0:ee:76:5e:3f:a7:25:39:77:76:56:2c:ea:a5:ac:
                    4b:dd:03:d0:f0:d9:1e:05:57:f0:2a:61:0d:e6:4d:
                    31:6f:b0:8a:9f:78:5b:82:d7:16:f8:43:f3:2e:cd:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:63:96:4A:CC:51:C6:1F:DC:4C:45:14:5E:A7:54:E9:1D:0F:00:DD
            X509v3 Authority Key Identifier:
                keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4c:33:0d:ff:15:3a:4e:c8:0f:98:ed:e0:a2:97:45:55:a3:
         18:43:4a:66:4b:d5:53:d8:b9:a2:33:06:3e:20:16:8d:dc:e8:
         ed:de:bf:c4:64:29:45:f4:14:f7:64:cc:ae:7b:46:cd:19:4c:
         ef:d8:2c:9b:04:18:6f:12:f7:b5:3e:80:f8:e1:ba:e3:39:f6:
         b9:e9:73:32:ed:1f:b4:09:4d:7a:22:98:11:fd:14:b5:40:43:
         df:82:b2:d2:69:6d:12:68:e5:eb:dc:2a:5f:2c:c6:6f:89:30:
         9f:b3:d4:9c:60:b2:f7:af:7e:64:71:f9:bd:21:d2:10:2f:dc:
         57:2a:ba:91:db:dd:b3:fb:7a:72:a0:3b:d9:d3:1d:97:05:6b:
         2f:a7:d4:69:49:a3:83:54:17:3b:cd:68:aa:57:c1:03:60:11:
         fb:f8:ad:c3:ba:c8:30:1b:c4:ec:49:a1:df:d5:8d:07:e1:8a:
         e9:72:3e:90:de:61:a0:03:45:c4:75:f4:6a:61:02:3c:ce:31:
         e5:bc:94:d6:cf:7c:8b:00:cf:92:7b:aa:51:1f:8b:c0:32:9b:
         7c:72:61:cb:2e:27:b3:1f:bd:bc:60:b1:f9:88:af:e9:ff:71:
         2e:c0:81:51:f9:73:0d:15:ee:7e:43:5c:b9:d7:79:b3:5d:9c:
         7d:fb:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:55 2025 by rpki-client