Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File:                     13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier:          BP44BJ3EoiEHlJSFvX08ri9inSFXeN2bSACaxbYjGp0=
Subject key identifier:   E9:28:9C:8E:FF:2E:E6:8F:39:DB:2B:78:D2:DD:B7:2E:A5:11:DE:E2
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer:       /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial:       0198D65FB66B09DEAE9AB52109698E67E00A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number:          036B
Signing time:             Sat 23 Aug 2025 10:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:53 +0000
Files and hashes:         1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: wPGg4roMAshLLCuNQqy7m+wVR8gV3VZ+zkefoxbouQs=)
                          2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:b6:6b:09:de:ae:9a:b5:21:09:69:8e:67:e0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
        Validity
            Not Before: Aug 23 10:00:53 2025 GMT
            Not After : Aug 24 10:00:53 2025 GMT
        Subject: CN=e9289c8eff2ee68f39db2b78d2ddb72ea511dee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:70:a1:42:3e:9e:6b:e0:b6:59:e0:17:99:
                    54:ef:91:03:09:d0:39:55:17:38:91:91:f3:9a:61:
                    c8:e1:1c:1e:6b:93:23:7d:03:ec:d9:84:de:f1:18:
                    ef:1f:25:b0:33:60:d1:6d:4b:ab:f9:60:d7:f5:55:
                    e9:51:44:6d:30:c9:63:5e:5b:9a:cb:af:a6:46:47:
                    5c:a7:99:37:85:c0:fc:33:9c:89:b6:42:2a:b3:5d:
                    f1:0c:5b:9d:fd:bc:c0:60:06:ad:22:b9:07:d4:0c:
                    01:58:e4:f1:af:58:6e:02:74:f0:df:40:d5:75:23:
                    46:eb:fe:2f:9e:9d:6f:c9:d1:ab:07:2c:35:b7:6f:
                    ec:c5:74:00:1b:28:17:d5:3e:b5:54:a1:3a:d4:0c:
                    40:7c:3a:2d:61:21:be:b5:58:70:66:24:59:81:e0:
                    72:e0:65:c5:f0:39:d0:37:4b:d6:35:68:86:4b:30:
                    e4:10:be:7f:bf:3b:4f:14:10:e0:27:ed:84:29:14:
                    de:e5:fd:a1:41:47:cc:eb:30:72:90:a8:bb:c2:93:
                    7b:b9:3d:9e:e5:a8:43:7e:56:fa:6d:ff:99:e0:4e:
                    da:c6:2f:49:67:a6:e3:a2:de:f9:46:a2:87:70:87:
                    23:59:5d:8f:57:74:c0:03:8b:6b:72:d0:69:b2:c1:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:28:9C:8E:FF:2E:E6:8F:39:DB:2B:78:D2:DD:B7:2E:A5:11:DE:E2
            X509v3 Authority Key Identifier:
                keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:13:cf:fd:dc:f7:a9:c8:c8:b2:47:97:35:b3:e6:ac:77:d2:
         98:e7:d6:a0:49:94:c1:77:66:02:17:0c:b9:df:d9:96:3a:ce:
         23:fb:ef:2f:5f:84:4d:1b:a7:3f:83:87:f9:3b:73:6c:7d:3d:
         5f:d9:b6:08:bf:e7:56:d6:88:ef:0c:64:b9:cb:b5:84:d7:7f:
         31:cd:88:7f:b4:17:14:e6:4c:aa:7e:28:fe:03:83:30:a4:94:
         53:04:43:7b:26:0d:c2:44:3a:aa:b5:ea:8f:d9:ae:3f:31:a8:
         5f:4f:5d:37:53:55:fb:61:1b:ca:68:d2:fe:97:aa:b9:7e:8a:
         f8:9f:b5:7a:62:00:5d:8c:db:e2:78:91:a8:aa:d3:bf:ea:17:
         09:4d:a0:3c:42:29:d7:1e:ee:e0:ca:db:3d:28:35:21:7e:c7:
         71:61:54:ca:d5:4d:12:0e:19:0b:e8:73:df:2f:66:fc:f1:10:
         b4:87:0f:24:a7:94:98:47:38:8b:70:22:9e:5e:29:e1:3a:13:
         13:60:1b:b9:48:a7:e4:8b:11:6e:a3:10:41:4a:6b:cb:38:7c:
         13:1a:95:9e:06:ea:8c:31:17:f3:b1:a4:95:75:c4:1b:c9:9f:
         79:dc:4f:b8:a4:6f:0f:10:e5:7a:66:78:19:c4:5a:8f:eb:ef:
         28:89:43:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:44 2025 by rpki-client