Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
File:                     DvgMyei0RaB_7srAr8WeQtxxAmM.mft (raw, json)
Hash identifier:          fKU8vOoR1MPgTVz6RLfJbUlS+abo5RDs8N+/c7yucdE=
Subject key identifier:   9C:B4:74:44:B2:B9:E6:93:AE:E9:07:E2:7F:69:FC:9D:1B:BE:24:81
Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Certificate issuer:       /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Certificate serial:       0198D472685284247E3BDC1961CC4B2F554C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
Manifest number:          0399
Signing time:             Sat 23 Aug 2025 01:02:04 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:04 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:04 +0000
Files and hashes:         1: DvgMyei0RaB_7srAr8WeQtxxAmM.crl (hash: UWi4QLt6sINQiCnUwxk475LNqoR2bRLk+ceUScll4Dw=)
                          2: GkiYUK0j2nxxbWMqhxnhdq_0Enc.roa (hash: NOyHUSRyn/zm35BU84aYQfd0YAX7k067uz4v2RofCv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:68:52:84:24:7e:3b:dc:19:61:cc:4b:2f:55:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
        Validity
            Not Before: Aug 23 01:02:04 2025 GMT
            Not After : Aug 24 01:02:04 2025 GMT
        Subject: CN=9cb47444b2b9e693aee907e27f69fc9d1bbe2481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7a:f4:50:65:d8:38:b0:2c:0a:51:f5:6e:d8:
                    17:7d:15:56:8a:5c:4e:f9:e5:03:ab:f7:9b:1c:b2:
                    4d:f5:2d:56:08:dd:91:3b:7d:cd:47:ff:ac:16:09:
                    72:77:9f:e5:54:71:d9:54:47:87:4d:4e:f3:82:10:
                    23:3e:4e:1d:b8:2e:6a:d9:a8:39:05:91:53:f5:b0:
                    28:a9:59:f2:e6:6e:50:47:40:bb:1a:21:62:a9:50:
                    9e:1a:34:a9:c6:7b:25:d6:5a:59:1b:b9:f2:f3:16:
                    80:03:1c:3d:6e:ae:4d:2a:07:bd:c3:80:52:80:e3:
                    be:0b:97:d3:dd:73:cf:37:a8:ed:1c:27:92:f9:55:
                    81:57:54:e6:90:bb:69:d2:63:39:e5:3d:0b:1f:1f:
                    b4:8c:73:79:9a:f3:f5:55:61:d3:de:49:fc:94:23:
                    0e:e5:d5:b8:46:fe:53:cb:b8:94:f4:ce:1a:f0:17:
                    81:28:6a:b6:5b:78:c3:be:3f:d0:d4:de:cb:26:61:
                    d8:50:b8:8b:ea:63:0c:be:7c:7a:92:d1:28:62:91:
                    95:a2:a8:04:cb:54:c5:a3:fa:53:34:c2:be:e0:73:
                    17:a4:8b:4a:c8:e2:8d:65:3d:c0:14:0f:1b:bb:ef:
                    32:03:8f:21:06:b8:69:51:d8:1a:e1:fb:dc:bf:6e:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B4:74:44:B2:B9:E6:93:AE:E9:07:E2:7F:69:FC:9D:1B:BE:24:81
            X509v3 Authority Key Identifier:
                keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3b:79:20:d4:4d:b7:ef:60:98:12:7b:13:96:b5:e8:98:f4:
         54:5d:47:3f:42:de:ea:b2:d7:cd:6c:43:26:d2:56:6f:f5:86:
         2c:8c:a8:e8:f5:9d:0e:63:6d:f1:f6:a2:d9:9e:5b:1e:b3:c5:
         e4:dc:8d:40:da:2c:1b:0c:62:13:6c:39:1a:f6:b7:f0:76:9a:
         66:b4:d6:2a:04:4c:ef:d4:69:1f:19:93:39:25:4e:9d:84:87:
         8a:d7:00:6e:2d:62:d2:03:2f:ea:25:58:c7:71:82:5e:7f:db:
         04:9d:55:ac:74:d7:37:83:7f:26:73:41:a5:cc:38:08:f6:2a:
         9a:52:24:af:94:a4:80:58:6a:23:d2:7b:66:1b:db:1a:d9:8d:
         a2:4f:f6:7d:aa:ca:0d:45:5c:39:37:b7:33:3f:27:c1:16:d1:
         c7:27:f6:d3:f0:85:61:3e:17:c8:ad:4e:0a:36:75:e6:c0:45:
         da:a6:a8:5b:43:35:d2:6b:2b:de:a0:d6:b1:c2:7d:7c:81:0f:
         98:35:b6:b1:dd:74:4e:af:0e:75:57:92:a5:0a:07:d2:a6:94:
         ae:fb:dc:bc:b0:24:b6:7c:25:64:37:24:b2:ac:94:4a:7c:b4:
         6e:03:dc:9f:94:7f:61:fd:fa:a7:d3:05:36:80:4e:23:cf:d1:
         f4:0a:f3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:45 2025 by rpki-client