Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
File:                     18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json)
Hash identifier:          4Wz4hQ/DRGkFN2WasNMawag4HDha0LfeCA45no8is+4=
Subject key identifier:   D0:2A:92:6E:AE:4C:C0:0E:5A:CF:15:C7:F4:75:88:D2:F6:93:38:1B
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Certificate issuer:       /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial:       0198D54DDD2EB76B17E4EDDAA96AB287DC1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
Manifest number:          0C46
Signing time:             Sat 23 Aug 2025 05:01:46 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:46 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:46 +0000
Files and hashes:         1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: EuBxTzrJizqrwRO+uF0GGSDpCOmUUgl3laPZA7ppjOI=)
                          2: Ykk-D7iJ26tOcqYs9Voa9OtrX8c.roa (hash: BzYAqVCWtu3EBRZpVM9KZ2KVYbyGK5c4dT3hbIbWT74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:dd:2e:b7:6b:17:e4:ed:da:a9:6a:b2:87:dc:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
        Validity
            Not Before: Aug 23 05:01:46 2025 GMT
            Not After : Aug 24 05:01:46 2025 GMT
        Subject: CN=d02a926eae4cc00e5acf15c7f47588d2f693381b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:bb:cf:15:3e:88:46:eb:9e:76:79:53:82:
                    37:9d:f7:40:af:d0:94:73:4e:70:73:80:85:bf:e4:
                    c9:8e:6f:26:72:20:bd:b1:43:68:d1:9f:24:44:69:
                    65:1c:98:60:8b:c3:a1:21:af:2d:03:f4:3d:39:1b:
                    41:98:43:be:9c:7a:2f:82:7c:53:4f:43:6a:66:65:
                    55:c4:9a:44:9e:55:25:e5:09:f0:30:97:69:3c:de:
                    d6:b3:28:53:c8:c8:cb:d4:da:d4:dd:00:30:7a:ec:
                    71:00:b1:6a:3b:50:ab:97:9f:01:02:3c:0d:76:ff:
                    bb:ba:52:e9:59:8d:a9:fb:bc:d2:c6:f2:80:ec:6e:
                    27:a2:96:2f:44:d7:a2:a0:fa:29:e6:c1:74:15:01:
                    9b:86:d2:50:df:7a:36:78:3a:62:fd:ff:84:a6:54:
                    f9:54:dd:d9:36:12:ba:c6:a1:2c:88:b2:4e:d7:81:
                    77:47:7f:7b:6d:55:4d:19:26:a6:3a:cf:04:d1:6b:
                    b6:df:a1:a7:b8:27:5b:3d:b9:72:06:6b:90:af:a4:
                    56:e1:65:f3:6e:51:b1:e8:5e:c2:1f:a7:e0:eb:e6:
                    b9:be:7f:ff:47:d4:a9:a3:78:85:51:a7:ab:50:a6:
                    4d:97:b5:30:f5:4e:b1:b7:38:0b:0e:78:e9:66:67:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2A:92:6E:AE:4C:C0:0E:5A:CF:15:C7:F4:75:88:D2:F6:93:38:1B
            X509v3 Authority Key Identifier:
                keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:57:2e:1e:55:d4:3e:0f:53:70:99:60:5d:83:8c:11:a1:fe:
         24:6a:87:eb:6e:d8:58:9d:ac:64:4b:5b:6e:6a:10:c1:09:c2:
         c5:8d:17:51:bd:a7:6b:b1:f8:00:65:15:f6:60:09:cc:00:3c:
         de:74:df:ac:05:86:6d:cc:49:e9:3c:26:ad:92:d6:ee:18:7f:
         9c:21:06:6c:23:8c:c2:d1:93:ee:9e:d3:91:76:81:dd:db:f3:
         f8:02:93:4c:04:44:dc:a8:35:e0:a7:61:f7:6d:00:45:68:2a:
         8d:37:e6:ab:26:e7:93:43:ff:b0:c6:a2:19:df:1d:29:b3:30:
         2f:db:d1:6c:c1:eb:2a:4c:b7:1c:38:68:bf:11:b5:80:aa:0a:
         bb:e3:d1:68:95:7e:d4:03:cd:c9:17:a6:ed:c3:c7:14:4b:4d:
         87:a8:d0:3f:92:fb:98:cb:f7:99:01:f9:69:34:06:a0:8e:4b:
         cc:f4:ab:0c:1e:c8:14:65:68:f1:70:4b:c9:25:06:8a:37:d1:
         a5:34:b3:97:45:dd:12:73:c0:20:0a:e6:db:6d:41:52:cb:be:
         6d:a0:64:95:12:3f:84:6b:23:e4:ee:4a:a8:41:bb:9e:71:ed:
         7b:26:6d:9a:83:fa:df:54:ff:85:53:e4:90:41:e7:4e:c6:f6:
         ac:d7:a9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:29 2025 by rpki-client