Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File:                     DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier:          gVo9maVbWoW0fGJiQEO0VsgO5j8lcRSbgOH9HIK8wSs=
Subject key identifier:   20:A0:E1:95:4E:A9:52:43:8A:FE:79:EE:C4:31:04:05:9A:80:A7:BA
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer:       /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial:       0198D4727FB6446123F1494FB5FED4457106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 01:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:10 +0000
Files and hashes:         1: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (hash: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=)
                          2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: EFMkZKUKyhDi38QqiIv3CfphlrUGJCvc0iCL2gc2JXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:7f:b6:44:61:23:f1:49:4f:b5:fe:d4:45:71:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
        Validity
            Not Before: Aug 23 01:02:10 2025 GMT
            Not After : Aug 24 01:02:10 2025 GMT
        Subject: CN=20a0e1954ea952438afe79eec43104059a80a7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:24:9a:05:e3:02:9d:b4:b4:00:83:62:98:
                    05:11:70:dc:44:ca:28:a7:a7:2c:68:9a:b9:c8:e2:
                    a3:0f:31:d4:70:d8:97:26:ff:51:e7:c3:94:26:92:
                    96:3f:f6:91:7d:8f:82:e7:8a:d5:65:7e:ba:b7:00:
                    92:d1:06:fc:0f:09:2e:68:63:b4:fd:bf:c7:ba:29:
                    78:a7:52:85:8e:9e:ce:82:78:f7:81:3b:cc:01:d8:
                    26:d1:6e:75:8a:15:10:91:3b:3f:2b:e6:1e:70:00:
                    3f:b8:39:98:8b:d9:e7:06:22:1d:0f:09:ca:18:37:
                    00:a9:9f:17:78:50:65:25:88:05:8e:c1:fd:c4:64:
                    00:49:4c:04:21:12:62:94:b0:1c:03:aa:25:c8:ed:
                    43:a6:72:1b:d1:a6:a8:4e:d8:01:76:2f:88:65:4e:
                    ef:05:18:76:55:40:c6:71:12:be:2e:26:57:cb:3b:
                    b7:d2:78:e5:7d:8c:29:22:78:85:bd:91:0c:e2:b0:
                    78:a5:20:4c:fc:b6:ed:c5:9c:33:28:b5:ea:3e:04:
                    2c:15:7c:3b:1b:f5:c8:32:2c:57:af:df:22:c2:30:
                    89:4e:94:e4:2a:58:d2:67:e9:9a:ff:9c:ef:c8:bd:
                    d7:77:ee:77:cb:4b:76:18:37:fd:f7:b2:36:e6:76:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A0:E1:95:4E:A9:52:43:8A:FE:79:EE:C4:31:04:05:9A:80:A7:BA
            X509v3 Authority Key Identifier:
                keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:70:3a:2e:7a:35:44:41:6f:c0:a3:8d:b8:5b:5c:ab:85:a3:
         7d:3a:ed:66:0b:26:48:81:6e:2c:38:47:38:cd:ba:13:d6:c5:
         1e:f6:34:77:f7:7c:98:57:23:66:ad:c4:84:10:14:fc:4a:bb:
         af:b3:2b:5e:ae:a3:5a:2b:d1:7a:fc:48:51:55:ff:2a:10:94:
         8c:8a:11:a8:b7:6e:54:af:36:2b:47:c1:21:8c:c9:7f:53:cf:
         52:20:20:15:51:ff:27:7c:f3:e9:9d:3e:04:e8:46:26:45:7e:
         5f:a4:f1:8a:72:46:c3:cb:13:af:d1:d6:e4:4c:ee:d1:1b:c7:
         bf:73:a5:f9:19:54:9e:23:dc:47:bb:9f:9d:b4:fe:2f:18:da:
         32:ad:5d:c0:71:da:6c:b7:0b:b1:28:f0:79:29:77:80:2b:79:
         ae:e9:a5:5c:19:a6:50:13:90:f3:df:c2:fd:03:b4:40:93:d7:
         de:ca:70:78:b3:4d:d4:ae:96:12:fa:85:1e:69:53:bc:6f:b2:
         8b:ab:05:b5:37:e2:10:f4:83:75:34:f5:f2:2e:e0:80:ab:97:
         28:ce:89:ae:93:9f:13:44:81:37:4c:ee:41:92:5d:b0:94:a4:
         7b:0c:ae:37:c6:08:4e:22:e6:e0:55:3b:f2:23:a8:52:2c:89:
         0e:cc:6e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:00 2025 by rpki-client