Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
File:                     35xk4XC38lXXyjADXWUyyJV-sWk.mft (raw, json)
Hash identifier:          umoNFxeYaZiZdemxibQVZlkKRH8RfM0n4N6bi3is0MQ=
Subject key identifier:   CC:85:C3:79:75:79:0C:DF:89:76:2A:52:9E:6D:6A:BB:15:58:87:CE
Authority key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69
Certificate issuer:       /CN=df9c64e170b7f255d7ca30035d6532c8957eb169
Certificate serial:       0198D4E07871F09DE3CE2A03F60009D66A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
Manifest number:          0F7A
Signing time:             Sat 23 Aug 2025 03:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:17 +0000
Files and hashes:         1: 1KCeM_saj2EHwCtmvYUyod5fQVk.roa (hash: Pv9o3ZWxmDIYTSHQUpAENmb1SekUnxD3+SSuHyFLNIk=)
                          2: 35xk4XC38lXXyjADXWUyyJV-sWk.crl (hash: LUmctqBZgxcWJ9PttZ27zvELG0h2ikKwmlws36p2Ls8=)
                          3: in9L7g-cpUmSO1ofhst17Y034lM.roa (hash: 2AqONqWNA5VFHVb3r9hcyDXspGh88tGgJFdZWuKJFOc=)
                          4: oQEjAmt7MyhDoFqfFRza8D6gzN0.roa (hash: J9bWIhZt9YEsnb61ecCMtgkEPaDbCaogiDdlzHyBCNE=)
                          5: s67wfBYN4Keq-XcZ3aP-wu5Usu8.roa (hash: iepRGsTeT7EybANIxB57/7dp/YbwlG1MHY+mia+/CQ8=)
                          6: y6UzEX6vHkxyP7L_2RZkJTZij0A.roa (hash: iY29x/bkzw37d2kNULsHdGh6yroQI6l4FkOncAmzIB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:78:71:f0:9d:e3:ce:2a:03:f6:00:09:d6:6a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df9c64e170b7f255d7ca30035d6532c8957eb169
        Validity
            Not Before: Aug 23 03:02:17 2025 GMT
            Not After : Aug 24 03:02:17 2025 GMT
        Subject: CN=cc85c37975790cdf89762a529e6d6abb155887ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:ea:51:04:9b:23:ae:bf:c3:76:c1:81:14:
                    59:f5:8f:18:60:ef:dd:1e:c9:63:1d:8d:68:1c:e9:
                    93:7e:70:cb:85:8a:a8:59:a8:26:80:90:9e:e2:b4:
                    8b:04:f1:43:49:0d:7c:6c:87:98:c6:76:80:29:12:
                    12:83:37:99:27:27:13:9d:17:f8:1c:e8:93:02:c2:
                    ac:14:b8:42:fb:c9:80:06:f6:39:a2:67:56:e1:d0:
                    bf:2d:c3:ef:c4:68:e0:10:6c:59:51:c2:ce:bd:f6:
                    08:8b:d2:0b:84:17:14:d9:da:3c:f6:de:43:7a:ab:
                    e2:92:f9:04:e3:e6:f1:76:85:ce:6b:50:ed:3f:a4:
                    c4:98:a2:6d:d4:d3:e1:6e:d3:be:d0:48:15:61:dc:
                    62:90:11:b6:72:8a:81:9a:0a:2c:18:a8:8a:ca:8f:
                    86:b2:43:80:e3:2b:d3:b8:dc:34:f5:56:02:8b:18:
                    33:aa:65:a6:a8:e7:9a:25:5e:b9:3b:10:a8:0a:ef:
                    a0:44:b6:4d:24:4f:97:0c:d0:9e:8e:26:c4:c1:48:
                    6d:83:06:da:ee:59:15:07:f6:be:4c:97:c2:69:93:
                    61:66:c3:83:56:01:22:1e:af:7b:c5:22:98:1b:c2:
                    b7:03:d6:2d:8e:dd:f0:fb:0e:cd:bc:8c:9b:dc:9b:
                    99:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:85:C3:79:75:79:0C:DF:89:76:2A:52:9E:6D:6A:BB:15:58:87:CE
            X509v3 Authority Key Identifier:
                keyid:DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:fc:e6:2c:4c:e1:3a:8a:0f:9f:fd:5c:43:d5:a5:be:26:60:
         c9:68:45:3f:ec:48:98:5b:9c:28:0b:ad:e5:bb:e8:b3:ad:ee:
         4b:43:52:89:0f:58:ec:31:93:51:de:e9:a7:0c:4b:95:07:11:
         2c:3f:60:f9:90:81:96:c2:b2:2e:0d:c7:ce:e8:04:cf:f6:a1:
         79:ab:2c:cc:35:dd:54:17:ed:09:25:26:cd:3e:de:43:89:d7:
         90:24:30:87:64:35:0f:d0:70:3e:d6:0e:e9:58:06:08:e8:7d:
         73:38:6f:41:40:61:83:ab:17:92:62:91:7f:a3:c3:38:6c:0a:
         d3:cb:06:6c:7e:b1:8b:38:01:93:cc:b5:6a:a5:30:ce:95:17:
         e3:7d:b6:22:11:30:ee:4b:d8:67:05:9d:f0:57:27:35:a3:49:
         3d:9c:65:da:c6:53:b9:79:18:cb:cb:78:c9:4a:61:48:e8:96:
         53:b2:d1:9c:e5:80:8a:15:89:b6:af:30:3f:4a:55:54:51:c7:
         73:3e:84:42:ab:42:54:1d:40:89:f8:c1:c4:f1:fe:76:59:c0:
         ff:f6:22:53:1c:2b:62:bf:b3:bc:6b:0d:2c:64:7b:d5:a4:f4:
         72:ff:6d:03:43:1a:8d:c8:14:56:72:ef:47:9f:47:8e:d9:56:
         25:31:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:24 2025 by rpki-client