Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File:                     d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier:          4oRQQwDfS2Ns1b5ia6j2l/7WB+c0j3aesZwZUDHRdJw=
Subject key identifier:   A4:ED:78:62:CF:DA:2F:80:0E:DA:64:5D:3D:2D:B3:2B:68:2F:3C:FE
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer:       /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial:       0198D660E414F66D653C1B333CCBAB40DE48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number:          0D33
Signing time:             Sat 23 Aug 2025 10:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:10 +0000
Files and hashes:         1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
                          2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: EZxovO5wA08zM9Nh717n+urWL+DgBM8W228XFjwXHGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:e4:14:f6:6d:65:3c:1b:33:3c:cb:ab:40:de:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
        Validity
            Not Before: Aug 23 10:02:10 2025 GMT
            Not After : Aug 24 10:02:10 2025 GMT
        Subject: CN=a4ed7862cfda2f800eda645d3d2db32b682f3cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:32:1f:9b:e6:16:a3:4a:c1:10:e7:48:b9:
                    7f:ab:e3:da:d9:04:cc:62:b9:1b:b6:c6:fd:c5:9d:
                    22:c2:18:e4:2e:d6:7c:b7:da:48:eb:2e:57:6a:09:
                    a4:1f:c2:9f:36:a3:82:53:dd:3e:1b:0b:17:64:cb:
                    ca:d1:38:33:c8:84:25:3f:c1:28:9d:d9:f0:73:10:
                    99:38:ca:71:ce:21:75:a2:78:94:74:f7:c8:75:c4:
                    46:e8:64:9e:6e:85:de:96:67:01:0e:73:ed:d2:bf:
                    96:65:99:32:3c:7c:d2:69:5f:27:35:e8:76:8c:c1:
                    96:08:dc:9e:a7:bf:a0:b7:26:34:4c:e3:69:cc:be:
                    17:07:bb:fc:bd:34:6c:83:d7:75:04:0b:48:64:57:
                    60:68:c6:15:91:f2:dc:db:0b:71:19:f2:59:e8:ab:
                    83:0c:8b:5b:78:84:c2:42:ef:85:38:95:9b:79:bc:
                    0a:13:ee:ac:2e:51:c1:19:7e:67:a2:b7:3d:a6:dd:
                    ce:a0:0a:0d:5f:34:b0:5f:29:6f:83:84:72:17:64:
                    fd:48:52:ae:f0:5c:7f:ac:f3:0f:f2:83:58:33:d3:
                    85:df:0b:19:2f:6c:66:a4:65:7e:74:f2:83:e6:3f:
                    3c:fe:be:3b:8f:5e:fc:49:ef:ba:05:ab:9b:77:6e:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:ED:78:62:CF:DA:2F:80:0E:DA:64:5D:3D:2D:B3:2B:68:2F:3C:FE
            X509v3 Authority Key Identifier:
                keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:29:f8:ae:2b:d4:43:a5:a3:ae:8b:15:8d:50:b0:16:75:85:
         ac:ac:44:14:bb:26:0d:b7:17:75:e5:4a:78:a2:6d:58:d4:5f:
         77:94:c1:00:ea:02:a9:ae:15:7f:f1:bf:59:43:d8:99:77:93:
         2a:e1:96:6e:9f:cc:b3:c5:50:65:92:1e:33:e3:0a:19:90:2e:
         66:c1:c9:95:7b:6f:4f:b5:3c:86:61:24:79:9a:21:fb:0f:c2:
         3b:26:ae:3b:d3:9a:35:af:bb:fb:b7:53:0f:e8:30:44:11:07:
         98:5c:4c:ec:b6:a7:ee:f1:51:3e:e5:90:70:5a:15:75:df:da:
         00:d1:49:24:bb:9d:f4:34:4f:04:91:85:c4:66:04:c7:28:97:
         b1:cb:7a:db:68:a1:3b:a2:b9:2b:14:25:8a:7f:1a:92:d4:14:
         a3:63:20:7e:08:f6:15:ee:ff:0e:88:ae:54:50:65:27:3a:cc:
         cd:c2:0e:05:79:40:bf:48:1f:6d:74:8a:00:07:f8:0f:c0:6e:
         7c:63:f0:9f:98:6a:a3:59:1f:86:00:b7:e8:17:cf:c7:56:54:
         b3:58:c1:5c:da:e7:ec:db:86:a5:a7:3c:5f:5f:52:08:62:3a:
         4a:3f:21:85:e1:80:38:32:e4:34:a8:91:44:d9:f7:9e:c7:6b:
         71:91:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:31 2025 by rpki-client