Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File:                     DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier:          /+MVrBTBKuep8QT8595d+GnysjcgGhDK8mGX/sA9Ug8=
Subject key identifier:   0E:D1:B2:58:38:74:64:5B:65:6A:3E:ED:51:A2:48:18:AC:71:D8:62
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer:       /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial:       0198D54E4E13F0A11C812031304D3285089C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number:          0D67
Signing time:             Sat 23 Aug 2025 05:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:15 +0000
Files and hashes:         1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=)
                          2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: Xh7gd4gltU03cxx++Z2LL0Sk3d5isSz2wHc4aFQ6JAw=)
                          3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:4e:13:f0:a1:1c:81:20:31:30:4d:32:85:08:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
        Validity
            Not Before: Aug 23 05:02:15 2025 GMT
            Not After : Aug 24 05:02:15 2025 GMT
        Subject: CN=0ed1b2583874645b656a3eed51a24818ac71d862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:77:f5:ab:0d:8f:ad:66:87:7f:04:e7:4c:
                    77:6c:c7:72:af:85:f0:e8:3d:ab:03:8a:56:84:ff:
                    20:53:73:c2:ec:be:36:24:0c:f7:78:b7:c9:6c:03:
                    6c:a2:10:36:58:80:62:86:46:a7:90:98:a0:90:1e:
                    80:b8:b7:40:0b:93:ea:7f:1f:fe:31:21:0e:45:35:
                    d0:15:e8:ee:c7:51:20:dd:77:2a:b2:02:fb:d9:67:
                    48:05:a6:76:d3:9c:eb:61:f7:1a:19:f4:09:be:38:
                    41:94:35:1a:92:37:e8:d2:83:f3:2a:8e:35:3f:8e:
                    88:32:b5:f7:22:4b:42:b3:37:72:70:5e:34:a2:17:
                    3c:c2:3e:8a:cc:a1:75:9e:dd:f5:9b:4e:f9:29:2c:
                    a5:fc:9c:e2:63:c8:ef:89:38:42:51:fe:9c:30:50:
                    9e:ee:3e:f2:01:7c:6d:7d:74:70:06:bb:5a:ef:8f:
                    a7:a3:3e:2b:ea:13:7b:2c:fb:7d:ab:d9:c1:06:52:
                    3d:de:7c:7e:0f:65:a8:be:76:e8:38:bb:c6:fd:fe:
                    d2:5c:52:42:eb:ff:c7:ae:9f:b9:d9:19:20:f3:d2:
                    ca:92:02:f1:ad:48:6d:bb:34:4b:15:17:cd:d7:3e:
                    a4:e1:0d:6c:70:45:03:f2:3e:93:2f:83:2a:12:0c:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D1:B2:58:38:74:64:5B:65:6A:3E:ED:51:A2:48:18:AC:71:D8:62
            X509v3 Authority Key Identifier:
                keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c8:31:0c:34:d3:d5:58:2e:fa:94:49:ef:e9:64:d5:f9:58:
         6a:a9:86:c1:66:ac:1c:88:2d:dc:05:4a:e1:7a:66:42:8c:0e:
         93:f6:da:82:87:b5:ac:00:e8:10:c6:ce:0c:75:05:07:b5:0e:
         e2:7d:60:7a:03:4c:5e:e8:8a:48:da:b6:f1:1c:03:e8:ed:82:
         d0:f9:f7:64:48:ba:eb:04:b9:61:aa:61:a9:81:b2:79:bc:11:
         97:eb:0e:11:d2:ce:e0:7e:7b:b8:44:82:69:21:17:5b:1b:66:
         2b:40:18:32:94:f4:9e:13:d7:91:63:cb:28:de:cb:96:64:e2:
         3f:0e:13:e9:0b:67:ec:f5:a4:1c:3f:b3:29:a2:39:e7:bb:1a:
         ae:bd:98:be:68:86:17:3a:d3:ff:d8:a5:d9:a2:d0:e8:5d:08:
         64:d2:0e:5c:1e:0c:8e:bb:27:d6:61:91:4e:9c:d6:17:ff:5c:
         dd:61:8a:94:7c:84:bf:98:02:b5:e2:62:3c:eb:bf:11:db:6a:
         5c:52:c9:2c:6e:9e:52:4f:a1:c7:be:d8:f7:1c:57:b7:6c:17:
         05:2a:7f:c8:f9:e5:5d:25:bb:eb:9b:3c:66:22:a6:4a:46:2b:
         b1:7f:0b:15:ac:95:64:71:09:da:d1:c9:f4:b7:f8:9e:8f:d2:
         5c:7b:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:32 2025 by rpki-client