Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File:                     r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier:          x+20zZlrcWZ1TTRNB3pzMkvnhO2MXNVdcHy6b5Osz5I=
Subject key identifier:   CD:B2:26:0F:D6:C0:6B:E8:F5:46:58:B7:E0:7D:D0:B0:2B:B7:C4:21
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer:       /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial:       0198D5BBB3DF584281888C0A95A9C436078A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number:          0752
Signing time:             Sat 23 Aug 2025 07:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:44 +0000
Files and hashes:         1: ZRG74paviVX-XS90B8J_nR1og6Y.roa (hash: RiJuDSGI6phByjHDly7Ub5V9tWyhmJNeE34595qod9o=)
                          2: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: 94UKqfnocYDNbrsxbojl7SQGDhHpMFSEzAYsldKXO24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:b3:df:58:42:81:88:8c:0a:95:a9:c4:36:07:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
        Validity
            Not Before: Aug 23 07:01:44 2025 GMT
            Not After : Aug 24 07:01:44 2025 GMT
        Subject: CN=cdb2260fd6c06be8f54658b7e07dd0b02bb7c421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d0:d5:c8:67:2b:96:34:04:66:39:2a:cb:ed:
                    5c:c4:58:8e:91:e8:e2:40:f3:ab:c6:fe:a1:37:22:
                    ff:f2:b6:c1:f4:86:66:c6:2b:85:85:7c:1b:c3:fc:
                    30:33:5a:c5:d9:2f:05:aa:28:0f:d7:9f:ee:53:43:
                    c6:0c:81:10:52:03:72:36:c1:4d:14:e8:af:21:fb:
                    7f:bd:90:2f:b9:40:ba:45:92:15:4c:9d:6d:9b:c1:
                    45:18:34:ff:64:73:63:b8:17:c6:4f:13:43:f9:7d:
                    62:3f:0f:87:45:a8:8e:76:e9:ac:18:b7:19:bb:ca:
                    96:93:81:b3:fc:c4:32:97:c4:93:8f:9f:59:25:2d:
                    ec:06:29:da:23:7b:f0:5b:5b:9f:3b:ed:6b:90:49:
                    1b:c8:c9:3c:6f:e6:db:53:88:3b:80:b9:3b:11:7c:
                    66:c5:19:c1:f8:5b:97:d6:f2:6e:01:b7:25:9b:d2:
                    10:69:9d:b6:c3:08:a5:b6:45:51:77:69:4d:84:af:
                    2e:a0:1b:57:09:9f:8e:31:8b:d8:82:0a:19:3e:8d:
                    d1:26:d3:50:15:6f:bb:8d:1f:8b:80:76:86:ac:e8:
                    b6:3a:11:3c:5e:3c:9a:10:5c:30:bf:5b:c0:39:8d:
                    95:47:f7:ec:3c:ed:34:be:72:1d:8e:7c:2b:cc:b3:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B2:26:0F:D6:C0:6B:E8:F5:46:58:B7:E0:7D:D0:B0:2B:B7:C4:21
            X509v3 Authority Key Identifier:
                keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:8f:97:b8:7e:8e:ab:5d:67:f5:18:33:52:5c:69:59:1e:ff:
         fa:a4:d2:ac:4c:f7:ec:af:4a:cc:1d:c0:3a:ec:3a:e9:7e:fc:
         67:de:ba:8a:d9:21:49:ea:f6:2a:e7:f8:fe:ae:14:44:58:51:
         82:28:f3:32:24:56:34:d8:8a:27:bc:f3:d3:df:94:35:97:2a:
         21:6d:61:8a:79:f5:ae:c4:d3:e4:ab:a9:b6:48:dd:d8:bd:a5:
         5a:cd:94:ed:a7:f8:8b:fe:52:b4:bc:79:59:68:b7:d0:58:49:
         ec:0f:59:02:3b:46:2f:c9:a3:b4:8b:cc:3f:17:ea:9d:85:b7:
         4b:c4:06:d9:69:93:17:58:58:d7:99:80:00:e4:9d:ef:d7:89:
         fc:b1:b4:b9:51:81:47:ad:cd:87:01:af:e6:93:7a:82:ec:a5:
         ce:0f:38:bf:00:35:f5:f7:bc:71:13:b9:46:49:1d:21:2e:76:
         e3:60:ac:9e:ca:62:7f:7f:11:dd:f5:e9:ed:82:98:8b:ac:3c:
         c7:90:d9:d4:50:89:89:72:12:48:56:50:86:2f:2d:51:97:ad:
         66:bf:62:c0:7e:67:a4:50:d7:e3:19:df:bf:6f:f9:1d:3a:58:
         d9:57:12:78:0a:ae:3b:4d:5a:bd:76:d9:d6:93:b5:7a:fc:15:
         a2:82:a2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:05 2025 by rpki-client