Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File:                     sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier:          Tn+3fokHpBiQI24ZqQ3nf5cRh5Rn2/KdUxttZk6VlYk=
Subject key identifier:   8C:E8:60:A6:F9:29:7A:D6:73:F6:2E:75:A5:B0:E9:04:F1:12:DB:E8
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       0198D5BC1B9D87E0A21D48BD709CA0485293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number:          0CD2
Signing time:             Sat 23 Aug 2025 07:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:11 +0000
Files and hashes:         1: QmAm7-ckXWNCy_EyjMRgtbazq1M.roa (hash: cL7W6FgXh5+bmFrfSXRxDbf8HtHE6dFb//gf0dsJOB8=)
                          2: WdOqlklUlY-sNbaLSfkpvoRt0iM.roa (hash: nFChOa8TYCoMQ8iwf2JuylM1/1NoIavp13ZTbwdNwn8=)
                          3: kIN_jMTtiRLUszBNqKlNoyJk3dk.roa (hash: lHRqbJ9tYmnELEYhJx16n/sdjvBPGJLZ5vlonZ4KvjA=)
                          4: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: FyTsGx0jH8Hh6y+fFexLlBxnvX2Ck1u1mO7fyI5/+pA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:1b:9d:87:e0:a2:1d:48:bd:70:9c:a0:48:52:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: Aug 23 07:02:11 2025 GMT
            Not After : Aug 24 07:02:11 2025 GMT
        Subject: CN=8ce860a6f9297ad673f62e75a5b0e904f112dbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:43:da:da:85:4c:4f:43:b0:c8:45:0d:aa:
                    17:47:6b:71:59:e7:6c:69:65:97:b2:27:49:b1:cc:
                    f0:5e:e2:c1:7a:94:ab:31:09:c6:55:54:98:e8:76:
                    1a:b6:5f:26:14:09:c4:44:3d:ea:9c:4c:5a:e3:75:
                    cd:13:1b:43:98:a3:9f:2a:dd:87:b3:9f:a8:a7:9e:
                    9c:b9:60:28:14:21:55:b4:b9:af:f3:84:97:f4:fd:
                    c8:06:20:dd:54:8d:f7:47:7f:c5:63:65:3f:c9:61:
                    51:48:ac:3e:fa:ad:04:b3:b0:58:e9:a9:e4:aa:60:
                    b8:bc:c7:da:68:48:11:df:09:00:0d:b8:76:73:d7:
                    21:45:25:71:f7:a6:4c:4f:2d:ca:74:07:87:c3:96:
                    2c:40:d0:9e:4d:0d:c1:aa:51:ff:37:0e:6d:4f:1c:
                    1f:3e:0b:3b:d8:93:3c:bd:34:3d:ae:e9:8f:51:08:
                    4a:c8:30:2a:0a:d8:1b:14:60:85:18:ac:72:1e:95:
                    45:67:08:fe:1e:54:e3:45:4e:c4:85:6e:f6:50:dd:
                    1b:b3:9b:dd:b4:46:50:2c:37:e7:8b:96:f2:36:78:
                    83:8e:c6:2b:5b:a2:f9:75:98:8c:07:2c:33:62:d8:
                    9e:3d:28:36:a3:de:aa:09:60:5b:13:be:72:1c:a2:
                    2c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E8:60:A6:F9:29:7A:D6:73:F6:2E:75:A5:B0:E9:04:F1:12:DB:E8
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:8d:0e:64:7a:16:e5:04:17:29:24:2c:75:e0:8c:3c:d6:54:
         be:0f:8d:fe:f2:a0:22:33:ca:80:81:3b:db:6c:5e:01:59:a9:
         e1:c1:da:2c:66:32:ea:f9:fc:e5:e0:85:f2:4a:36:37:19:db:
         27:9a:a6:02:6f:09:3b:c6:8b:1b:be:37:a9:90:0b:60:7a:a9:
         dc:2c:62:8b:cf:aa:ca:d3:7d:cf:89:a6:ad:94:21:63:e4:f8:
         0b:4e:84:ae:e6:5f:1f:7a:08:4a:25:8c:9a:4e:f8:a6:bf:28:
         c4:a5:49:68:52:cd:89:f1:63:43:39:2c:f2:47:0e:0f:a5:9f:
         fa:34:08:14:f4:c8:d9:a6:72:02:6e:62:d6:37:c6:28:44:9b:
         64:a6:11:86:a0:05:4d:ec:6c:56:e7:18:ff:2a:85:79:e7:b9:
         e3:8a:9f:28:f8:3f:23:c1:b5:b2:56:6e:e1:b2:83:16:de:3d:
         c7:36:b9:ec:24:a2:d4:4b:ec:09:31:15:44:60:cf:4e:0d:18:
         97:ac:7f:a5:31:2e:74:34:c5:02:eb:06:4e:a3:9d:78:cc:95:
         12:16:f8:57:7f:fe:d0:f0:be:3e:69:61:30:9e:ca:08:e7:6d:
         f4:6b:44:79:37:c6:83:9d:6a:5f:50:55:f3:1c:1f:03:d8:f0:
         cb:54:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:06:36 2025 by rpki-client