Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File:                     xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier:          7HtKOLuO4lhDS2M8L+1grN0Le/vR8z6W3Z2YXL1Gmgo=
Subject key identifier:   CE:BC:FE:58:DA:9C:FD:D5:D5:FF:12:A5:9A:DE:77:48:82:92:10:19
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer:       /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial:       0198D5BC209EAB15DF18FBEECDA60A1D1D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number:          0C49
Signing time:             Sat 23 Aug 2025 07:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:12 +0000
Files and hashes:         1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=)
                          2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: vb9wcBZEXsvS4A3yi7YDeqbTe5NufsnKR2jbiaGHsno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:20:9e:ab:15:df:18:fb:ee:cd:a6:0a:1d:1d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
        Validity
            Not Before: Aug 23 07:02:12 2025 GMT
            Not After : Aug 24 07:02:12 2025 GMT
        Subject: CN=cebcfe58da9cfdd5d5ff12a59ade774882921019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:cf:a7:94:fa:16:9d:c2:85:a3:c3:76:da:
                    c5:62:8e:c4:a0:93:14:cd:cf:b5:74:78:8f:0b:fa:
                    cd:00:f3:a9:00:a8:57:56:57:f9:b3:85:f1:14:9e:
                    e5:0f:7c:2d:c4:38:ee:78:f8:c4:83:2a:e0:e9:5d:
                    a3:53:4d:6a:f9:f9:b3:f0:73:bd:76:35:0e:86:7f:
                    67:cd:80:a0:77:1b:73:d9:67:f2:fe:b1:c0:38:71:
                    08:2b:89:a3:49:22:95:1c:45:82:93:60:06:d3:ff:
                    e8:cd:6d:e5:8a:56:e5:b2:3b:a9:1d:d5:fb:10:cb:
                    00:56:c2:95:5d:85:a5:67:36:f3:b9:cf:a3:ed:e3:
                    2e:06:16:83:d6:1e:02:f0:2e:a5:06:88:22:68:d0:
                    7c:66:b1:8e:d5:cf:a9:23:33:51:33:7d:d2:10:9e:
                    2b:65:96:65:6f:15:75:f9:e1:6d:d9:f3:66:38:aa:
                    11:44:2e:81:ab:dd:96:93:49:36:ca:3e:08:09:6b:
                    77:ce:93:90:99:62:9b:7e:47:bc:67:03:c5:48:68:
                    ac:4c:1d:89:9f:ee:50:1f:1d:a6:c2:1b:a6:7c:15:
                    6f:5d:2e:b2:8f:96:b1:a6:f2:be:fc:3d:5a:d5:74:
                    aa:44:18:65:07:86:d0:0c:0a:c6:44:90:ae:99:db:
                    0d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BC:FE:58:DA:9C:FD:D5:D5:FF:12:A5:9A:DE:77:48:82:92:10:19
            X509v3 Authority Key Identifier:
                keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c6:1c:8c:55:35:16:94:7c:1c:77:34:9f:99:8b:ff:b2:7f:
         03:a4:34:98:4e:e0:50:17:33:b0:bc:90:2c:71:38:7a:b1:aa:
         ff:60:36:b1:63:2b:d0:f7:ff:b8:94:44:8c:73:ba:b4:90:f2:
         8f:49:d5:20:42:56:74:d1:23:87:81:df:99:31:e8:89:73:23:
         2b:46:2c:d2:55:ec:54:f3:7c:89:d5:71:11:a4:93:e5:52:a9:
         75:a2:fd:0b:99:9c:b3:97:7d:8d:1f:18:ac:0c:b6:c2:82:f5:
         c1:39:d6:8a:c2:52:a1:17:17:6c:e7:eb:09:d6:0f:99:6c:1b:
         56:5c:72:bb:52:ef:7c:17:45:36:a0:0c:c4:7a:67:02:85:88:
         a0:f7:83:db:d2:fd:e9:a4:2a:05:34:ac:b3:6a:76:67:de:00:
         26:43:86:f9:17:9f:1d:81:4b:3b:3a:bf:58:3c:bd:9d:5f:61:
         2a:2b:66:be:c0:22:60:99:5c:d6:8b:27:89:2d:7f:f4:00:01:
         e2:72:b8:25:97:a6:24:e2:01:58:5e:b8:da:90:55:b4:f1:f8:
         91:f7:78:03:2f:6e:cf:d6:44:ad:64:5f:a9:01:b9:58:a0:47:
         ef:c4:de:60:88:5b:e6:28:b7:64:eb:03:f5:29:82:9f:f8:d4:
         c8:fe:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:29 2025 by rpki-client