Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File:                     x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier:          E21jUyXmnacYs7ckUYh3SBrYqNGMQCyoIo2V/ZTttNo=
Subject key identifier:   76:A2:D2:97:F6:7E:33:3C:6A:40:AD:95:B5:F2:51:83:7F:D9:6D:50
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer:       /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial:       0198D54E842A7F7CAC7E32D25A4851A2DA1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number:          0A57
Signing time:             Sat 23 Aug 2025 05:02:29 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:29 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:29 +0000
Files and hashes:         1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
                          2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: QpwU6VIqnV6s9eaTE9FUUBwborUOzxTM2k6vXxg49tc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:84:2a:7f:7c:ac:7e:32:d2:5a:48:51:a2:da:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
        Validity
            Not Before: Aug 23 05:02:29 2025 GMT
            Not After : Aug 24 05:02:29 2025 GMT
        Subject: CN=76a2d297f67e333c6a40ad95b5f251837fd96d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:69:69:8c:88:cb:a4:1b:1a:85:24:23:5b:4e:
                    48:23:e1:19:32:bf:c0:88:31:7c:77:50:4f:c4:66:
                    c5:a4:f1:3e:93:53:5f:3e:95:82:0f:63:1a:35:9b:
                    43:72:46:96:2e:8b:db:f5:b4:94:77:62:9a:36:ab:
                    67:4f:e5:0f:f6:31:29:76:c7:3a:78:7d:49:9d:5f:
                    f9:46:48:b9:9b:56:91:d9:74:b1:d0:69:63:83:88:
                    e8:ad:0e:ee:5b:d9:c3:1f:b4:5c:24:8e:56:23:a5:
                    66:72:0b:3c:cf:f9:39:58:47:9f:45:51:05:62:81:
                    fd:83:93:e3:6b:99:cb:75:17:c7:d6:c9:ad:55:85:
                    7b:dc:cd:40:5f:9d:9a:3e:f3:5a:0d:ff:a1:42:16:
                    19:eb:c5:da:d6:9a:a6:f7:11:a0:32:fd:4c:6f:ca:
                    b4:ac:30:c3:52:40:9f:73:2b:f8:8d:ba:04:c1:68:
                    e6:9a:4b:21:a2:4d:9c:f7:c0:11:a5:82:12:66:37:
                    7f:67:25:1e:bc:02:ad:be:f8:cc:35:06:08:54:b5:
                    73:f3:2e:28:03:e5:b2:bd:75:b7:83:4c:e0:73:10:
                    42:bd:a6:d7:8c:60:57:ca:e9:3d:ad:b7:01:1d:65:
                    30:4b:1f:7e:3b:dd:2e:c6:57:42:d8:81:19:ff:9e:
                    5e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A2:D2:97:F6:7E:33:3C:6A:40:AD:95:B5:F2:51:83:7F:D9:6D:50
            X509v3 Authority Key Identifier:
                keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:a6:a2:0e:c1:1f:99:22:c0:87:5e:75:0b:d9:2b:b6:7b:
         bf:f2:7a:1a:61:3a:99:68:c3:c2:3b:8e:b9:65:1e:c0:ba:f0:
         c1:a2:c0:f2:8f:ac:06:e5:c6:81:4e:f6:2e:fe:b7:72:9a:b9:
         98:82:f8:a3:3f:5f:7b:cf:7d:6b:1c:1d:1d:06:38:9e:ff:e7:
         9b:d4:3e:0a:60:81:01:3a:97:c2:1e:be:00:d9:7f:43:1c:5a:
         f7:ed:5f:00:8f:89:d0:73:84:df:32:e6:41:de:00:40:78:73:
         12:b7:63:15:63:b4:e6:9b:77:b9:16:07:d7:b5:95:9b:9d:92:
         5c:4c:6c:b6:d2:f7:f8:e0:43:f3:77:83:23:12:e9:57:80:2a:
         9f:68:05:34:61:7d:09:fc:f5:69:72:cb:93:c7:17:cb:77:83:
         36:6a:b2:15:10:b9:af:5a:d5:76:39:9a:8a:3c:b3:cd:4c:68:
         5e:b2:f8:b7:17:f6:6a:a1:3b:c4:21:bd:46:fe:b6:39:06:e1:
         56:1a:19:05:92:76:e1:f8:a4:2f:df:7f:25:e7:5b:21:0c:47:
         53:a0:5d:0d:b7:54:49:a2:27:31:50:15:81:4a:4c:20:07:c9:
         78:2f:ff:7e:55:91:2d:3e:ab:91:75:a9:79:eb:e5:0e:fc:05:
         65:4b:d7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:57 2025 by rpki-client