Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File:                     _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier:          C8RKXaookgezHybXvfrItNeCB+JQPELjfmmOa4Xua6I=
Subject key identifier:   30:75:4D:48:66:92:B9:5A:2C:F4:18:22:98:3B:4C:2D:F4:9E:DF:F0
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer:       /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial:       0198D705E984271D886D21A6A40815A860B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number:          0D2B
Signing time:             Sat 23 Aug 2025 13:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:25 +0000
Files and hashes:         1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=)
                          2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: 1NOfCGdp37nMy7ecAQdh3m04kDKqg6juCqKzPs2E0X4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:e9:84:27:1d:88:6d:21:a6:a4:08:15:a8:60:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
        Validity
            Not Before: Aug 23 13:02:25 2025 GMT
            Not After : Aug 24 13:02:25 2025 GMT
        Subject: CN=30754d486692b95a2cf41822983b4c2df49edff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:a4:1d:c5:16:da:02:3d:e2:e9:a8:43:02:
                    db:2f:ab:5b:87:22:73:74:a7:f6:73:c2:31:52:21:
                    46:af:16:9a:14:e0:68:80:3f:5c:82:76:88:22:ac:
                    8c:36:8c:30:d0:90:3a:d4:cd:9a:20:85:48:2b:64:
                    06:3a:88:b7:63:90:fc:2a:31:82:cd:35:fd:df:d6:
                    20:c7:dc:89:51:35:d6:f1:54:47:70:db:5c:7e:bc:
                    42:46:38:85:81:9e:f0:55:e0:2a:be:18:16:9d:c2:
                    88:7c:8d:9e:5a:56:b7:b7:c3:a9:b0:1e:5f:ad:f1:
                    c1:d5:7b:3c:cc:ed:de:ee:25:fd:11:f6:e9:c3:ff:
                    33:01:9c:d9:b1:b7:d5:68:bc:cc:be:83:cc:9d:0f:
                    20:20:b1:e7:3b:7e:bf:b3:b7:20:7d:08:a6:e4:85:
                    41:20:e7:17:56:0b:ca:b0:36:54:0d:2f:be:92:18:
                    8d:e6:e2:74:b2:10:56:3d:1a:df:ab:91:e9:a1:81:
                    4c:ff:78:60:eb:ef:39:6e:b9:c1:1a:4f:75:73:d0:
                    a1:3c:4c:7e:dd:c1:01:86:f1:be:5d:3b:e7:93:07:
                    78:fe:c5:bb:1c:ac:fe:2b:56:0b:cd:98:50:23:8a:
                    ac:64:83:be:b0:33:b6:e0:40:39:5a:30:9e:61:64:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:75:4D:48:66:92:B9:5A:2C:F4:18:22:98:3B:4C:2D:F4:9E:DF:F0
            X509v3 Authority Key Identifier:
                keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:75:08:38:e8:4a:e2:0c:18:a3:0b:80:82:56:33:ea:f8:e6:
         93:50:39:f7:95:d8:08:fa:f5:93:f1:e5:7d:c2:3e:ef:64:29:
         e4:5a:0e:79:a4:c4:86:b2:02:d7:e4:e8:60:b7:4f:49:69:4d:
         e4:28:a2:60:9a:0f:92:c4:94:b4:fa:2b:f6:9e:dd:86:c4:d2:
         a9:70:51:c2:17:71:50:e8:9b:3a:8b:16:f4:a5:df:8b:af:b9:
         e0:78:a2:65:ef:09:7d:0b:59:3c:49:68:cc:13:90:e9:45:f9:
         67:2e:fc:b5:c4:bb:b1:6e:17:a2:65:58:14:52:d3:0e:8e:9b:
         5a:26:4d:1f:41:e8:83:19:e7:87:55:58:6a:18:c7:53:71:d1:
         23:2a:96:39:ae:1f:65:46:ac:d9:91:55:94:3a:7c:b8:ef:ab:
         ad:b9:10:f0:f1:2d:2d:2d:78:c7:c1:6f:b1:73:b9:36:56:ec:
         9e:db:64:90:0c:98:31:b5:ba:d9:0c:a3:87:1e:b7:72:fe:4e:
         72:92:b7:46:b5:4b:78:49:ce:05:37:71:d8:5f:64:60:88:2f:
         f6:f6:a6:85:f5:cf:2b:f6:38:14:49:de:94:f7:80:d4:9b:85:
         02:46:5f:ad:9d:91:d1:13:cc:c7:45:69:4a:3b:b6:84:db:35:
         3d:c8:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:58:14 2025 by rpki-client