Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
File:                     c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json)
Hash identifier:          zsPVR6OjsbFzf2YBF8QFHt6gD36Tcyxh5BUEfHE9l30=
Subject key identifier:   28:E8:ED:BA:AA:66:E1:E6:69:00:4D:92:09:B5:A1:BF:A4:13:3D:92
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Certificate issuer:       /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial:       0198D404722B378B310925C70D511CD35CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
Manifest number:          0A30
Signing time:             Fri 22 Aug 2025 23:01:57 +0000
Manifest this update:     Fri 22 Aug 2025 23:01:57 +0000
Manifest next update:     Sat 23 Aug 2025 23:01:57 +0000
Files and hashes:         1: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: yPIGnxXZZ8TX2ruAkMo4kvVde2Kt41A8rhr76xHjt0U=)
                          2: pP7tyuuRn66UIb06Z8juPizzBlI.roa (hash: vMVBYtNtS/yDZwAn3TTK359AmlCLqfTH6tG5fmDA5mE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:72:2b:37:8b:31:09:25:c7:0d:51:1c:d3:5c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
        Validity
            Not Before: Aug 22 23:01:57 2025 GMT
            Not After : Aug 23 23:01:57 2025 GMT
        Subject: CN=28e8edbaaa66e1e669004d9209b5a1bfa4133d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:e8:0c:53:9a:2f:0e:48:4b:0b:b0:ac:e9:
                    9d:8d:26:b0:e3:ff:b5:fc:29:d4:ed:de:ea:10:ce:
                    c6:e8:03:9f:fb:e7:7d:cc:5e:ee:be:ad:03:7f:88:
                    e1:e3:bb:31:3f:74:e3:3a:06:28:c9:a6:cf:d7:a6:
                    58:1d:00:1a:c7:7c:85:40:97:88:21:f4:fb:88:f4:
                    77:74:5b:4e:db:93:67:bb:fe:08:d8:6c:bc:83:8d:
                    75:99:4c:da:5d:bc:2e:48:a2:7c:2e:6e:b2:cb:42:
                    7b:f2:c6:ac:7f:68:93:fc:61:64:0d:57:9d:d6:fb:
                    e3:7e:ff:dd:3d:98:c5:40:a5:ec:52:de:af:77:29:
                    eb:d1:59:fb:e0:17:b1:cc:bb:af:12:9b:cf:fd:0c:
                    a5:f7:aa:24:f6:b2:dc:d1:3f:ce:89:99:0b:4a:4e:
                    55:23:65:da:7c:9f:12:e6:9d:15:b1:4d:4f:13:de:
                    e8:ca:3c:38:72:d2:38:a5:f5:04:39:7b:13:6f:4f:
                    16:65:90:51:f3:e0:9d:e4:ee:cf:57:84:d0:9e:c8:
                    3a:b3:80:46:dc:c6:b5:dc:d9:52:2e:a4:89:0c:35:
                    3b:b2:ab:6a:20:49:b0:b5:b4:3c:bd:0d:6a:f6:37:
                    47:87:5b:ea:9d:9e:01:2b:81:09:b8:65:18:c2:21:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:ED:BA:AA:66:E1:E6:69:00:4D:92:09:B5:A1:BF:A4:13:3D:92
            X509v3 Authority Key Identifier:
                keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6f:61:1c:89:97:5f:9e:c8:08:ee:38:fc:27:85:50:8b:80:
         27:eb:94:dd:13:7e:df:40:77:46:8b:ac:74:b1:61:a9:c5:92:
         d4:a5:49:f0:f3:67:74:d8:be:7e:b1:73:b1:d5:93:f3:48:04:
         14:9e:86:8e:c7:b8:65:6f:aa:51:d5:78:5d:4a:ed:75:22:75:
         c5:39:8b:f4:23:e6:2c:5c:b0:73:e9:38:9e:3c:e0:a4:09:5c:
         a4:8d:09:42:cb:9f:07:03:4a:ac:23:9f:cf:03:ea:25:a2:ce:
         d6:82:46:86:ee:3b:23:ec:95:98:09:a1:6f:7d:45:6d:85:15:
         3c:52:bb:9d:f3:0d:d0:8d:12:ae:a7:ad:fa:ea:66:c3:10:97:
         ab:67:a9:65:7d:bd:54:9a:4c:cb:1d:df:7a:87:1c:9f:0e:ff:
         6a:35:86:b6:38:47:7e:56:71:fb:5a:d1:3d:7e:a9:a2:a7:98:
         89:27:a4:94:e1:f8:3b:10:91:ca:85:74:4e:8f:23:df:63:15:
         22:03:37:a6:43:b6:07:16:b4:df:d7:35:6d:a3:f9:e8:57:a0:
         ec:9b:cd:f8:5f:f0:6e:b8:8e:4a:88:d8:74:b3:19:ca:93:c7:
         66:2e:81:9b:0f:4b:18:3d:ff:d4:cc:17:a7:02:8d:ec:f0:b0:
         e6:0f:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:35 2025 by rpki-client