Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
File:                     dbvImtBCDee1vC3TL-o7l5-t4Cc.mft (raw, json)
Hash identifier:          Kb1ppsAadNH7djEI8EfAlH9Bsg9/olNy3gl/ksJzhNE=
Subject key identifier:   B3:97:83:C3:30:AA:22:F6:3C:F0:FF:1B:87:64:F0:9D:E3:66:3B:98
Authority key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Certificate issuer:       /CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Certificate serial:       0198D583D26F056E05F6C8D966905FB1EAAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
Manifest number:          0CDA
Signing time:             Sat 23 Aug 2025 06:00:42 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:42 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:42 +0000
Files and hashes:         1: dNIjhcgOmJl_uqUY3ufEirea4-I.roa (hash: gkwMMNbP4H2f7PZtpLojDcOWvuhbyLZWIbK4WgzSXOU=)
                          2: dbvImtBCDee1vC3TL-o7l5-t4Cc.crl (hash: QWQkCewGOQwatejMnke1iboc5NwMT7W2MMvmTxeevbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:d2:6f:05:6e:05:f6:c8:d9:66:90:5f:b1:ea:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
        Validity
            Not Before: Aug 23 06:00:42 2025 GMT
            Not After : Aug 24 06:00:42 2025 GMT
        Subject: CN=b39783c330aa22f63cf0ff1b8764f09de3663b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:5d:54:1f:51:de:14:50:0d:5b:d7:29:b6:
                    a8:56:96:9b:fd:c2:ec:85:67:19:e4:fe:52:d2:7f:
                    8e:fe:79:6a:da:b2:54:ae:e5:49:2c:b4:39:b5:2e:
                    7e:7c:fb:55:1f:6e:53:45:74:c6:cd:d3:49:fc:cf:
                    df:d5:9b:3c:33:d9:a8:1b:e5:66:e6:da:fc:33:a1:
                    a8:70:a6:67:13:80:26:f4:c6:4f:16:2b:a1:d3:9c:
                    96:ae:80:64:83:05:07:30:1f:1b:2e:92:08:f3:c0:
                    5c:29:74:02:ff:5d:46:13:74:5b:d4:2b:dd:1b:82:
                    4e:6a:ca:04:9a:17:0f:b7:3f:75:98:6f:c7:0b:d3:
                    f5:cc:2b:64:43:07:75:6a:92:b6:ed:ab:60:f3:03:
                    64:e8:25:e7:77:aa:45:31:52:ed:35:74:02:bd:90:
                    11:72:93:62:73:cc:ff:ab:ab:ce:72:48:aa:e0:f1:
                    b5:5d:bb:74:1a:60:36:c8:e0:38:c4:0f:cd:0d:8f:
                    13:ee:2b:7c:d0:11:52:3e:bc:52:4c:75:b8:a7:25:
                    32:4c:ae:f9:6f:ea:98:9d:0b:ae:9e:88:b8:e2:91:
                    a4:2c:d3:a6:0c:54:2d:7e:a7:79:ba:22:ed:d7:e0:
                    a2:c7:20:61:01:8b:96:cd:fd:fd:93:7a:f2:25:fd:
                    6a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:97:83:C3:30:AA:22:F6:3C:F0:FF:1B:87:64:F0:9D:E3:66:3B:98
            X509v3 Authority Key Identifier:
                keyid:75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6e:16:9e:7f:4c:42:f7:4d:74:ac:89:d6:c5:e2:13:76:e4:
         95:99:bb:25:fb:7f:03:9c:e9:ab:bc:6f:77:6f:0d:0f:f1:93:
         fe:cf:ef:27:44:c7:0e:6f:92:bf:ad:a4:b2:54:c5:71:67:f2:
         13:81:27:8c:76:81:b8:91:5a:e0:a1:69:5c:8f:90:40:62:66:
         89:bf:ed:ec:87:19:0b:91:c5:4d:cf:7c:61:57:9f:37:6c:ea:
         e7:79:fa:f5:05:fa:e4:7f:76:e3:98:91:bd:67:d7:99:3b:4d:
         99:a2:5a:e9:71:ad:8f:37:4b:73:d3:9f:e4:67:c9:ee:24:fe:
         5a:52:66:c0:30:bd:4d:b4:c9:90:f8:a9:76:05:e2:35:a2:d6:
         b6:ae:d0:6f:02:31:c2:34:ee:15:58:c2:0c:6f:4d:76:87:7d:
         ae:43:55:5b:bb:45:b6:dc:69:e0:a3:37:95:c5:c7:d6:4f:b8:
         b2:d1:ee:e3:62:dc:e1:a9:2d:68:60:15:b8:3b:c0:87:38:c8:
         8e:75:f5:ac:cc:cd:3a:3e:a0:b4:05:1e:a6:13:25:7c:2d:26:
         1e:44:eb:d1:ce:5d:44:0e:34:0a:59:bc:69:3c:fd:fa:19:1d:
         86:b7:b3:ff:de:62:e0:6e:38:5c:32:6b:86:83:4e:12:ae:2b:
         84:7c:0d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:22 2025 by rpki-client