Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File:                     s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier:          0GDcl86pJ8ioNBJwPrqRgu/y08onWTk77BFQhZ+EhLI=
Subject key identifier:   7A:9F:08:48:99:06:22:B8:32:78:05:45:B9:FB:D6:16:F9:0B:D8:B4
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer:       /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial:       0198D5BBE397F2F6E0ED7AEE0233978F46DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number:          0BA2
Signing time:             Sat 23 Aug 2025 07:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:57 +0000
Files and hashes:         1: 5APXg_wiW_V1QU4DTTNO_V06dfg.roa (hash: TZwqI4bOTkCy7vwcX2/rFQxdaiYIWAZfVHV4G7nb07k=)
                          2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: mJhc520Wl+R1Stlvdxm/MZ2YGs1t6EaEjKkVqwd113o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:e3:97:f2:f6:e0:ed:7a:ee:02:33:97:8f:46:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
        Validity
            Not Before: Aug 23 07:01:57 2025 GMT
            Not After : Aug 24 07:01:57 2025 GMT
        Subject: CN=7a9f0848990622b832780545b9fbd616f90bd8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:7a:37:60:72:9b:2e:49:08:af:88:af:89:
                    6f:43:e7:f8:66:e1:64:a8:e0:86:b0:19:c0:e0:aa:
                    73:44:33:08:0f:91:a0:6c:fe:db:f2:8d:85:04:99:
                    38:39:d1:74:b0:23:a6:00:bf:d6:70:3a:2b:e3:9e:
                    e7:d2:67:f9:8b:62:8e:dd:01:2d:57:c5:64:15:b9:
                    35:10:9d:bb:f9:bc:9a:4e:cf:34:d2:77:e2:e6:1e:
                    4a:91:a3:ae:b0:e2:c1:ee:54:84:9a:35:36:c8:2b:
                    a9:b1:4c:10:fe:2e:4a:b2:a4:fa:88:8a:fa:9c:3a:
                    49:01:e4:f5:cf:28:57:93:ec:ef:da:c7:39:ff:7c:
                    64:b2:f0:03:66:a5:9f:42:29:28:a8:57:5d:a5:ef:
                    d9:cc:22:3a:3b:e1:e9:33:9a:65:0c:34:b7:44:5e:
                    a8:f3:6b:6d:3c:4e:6f:b0:38:fb:4f:80:74:0f:47:
                    26:72:99:6b:8a:71:30:ed:eb:6d:69:19:cc:5e:95:
                    31:c2:0f:7c:da:b8:45:9f:b3:5c:11:bd:56:a2:03:
                    5b:55:03:ce:ff:58:af:81:c9:40:2c:d3:68:26:55:
                    ea:ec:22:cf:b8:0b:00:fd:f4:36:4b:57:3a:47:fa:
                    61:d8:ee:44:0a:e1:35:de:b3:60:18:c3:90:4e:9a:
                    df:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9F:08:48:99:06:22:B8:32:78:05:45:B9:FB:D6:16:F9:0B:D8:B4
            X509v3 Authority Key Identifier:
                keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:08:18:7a:68:cd:73:5e:f4:d8:d4:cb:a0:5d:2f:0b:28:35:
         8a:d0:2f:52:bc:8c:ad:6b:1f:0a:a3:c7:a0:b3:ea:83:ef:20:
         f2:bc:6c:53:73:60:44:a6:af:75:bf:8d:39:b8:a3:89:30:85:
         a0:3f:11:de:90:cb:96:34:ca:16:29:e8:04:d0:fd:e7:ea:28:
         3a:13:ac:10:79:20:a8:0c:e6:d8:6f:31:14:ff:a8:7d:d1:82:
         5d:19:f3:f8:df:99:9c:96:e2:e9:6f:86:6e:db:53:eb:37:43:
         89:50:7f:6f:c5:16:bb:b0:cd:d4:ad:89:42:dd:1b:7c:0c:e1:
         3c:f8:fd:a2:49:16:02:0c:da:56:f3:c3:95:6f:64:35:a0:91:
         60:f3:3d:a0:7e:c5:4e:a7:d5:1a:90:14:54:4b:97:04:51:fc:
         ef:5f:87:59:e5:44:47:59:d9:08:66:0f:9e:33:bf:c7:3a:9a:
         24:fa:e6:72:cd:83:98:50:19:28:b7:19:f1:ac:44:6d:07:c4:
         5a:ce:3a:57:dd:fd:72:4d:14:24:d5:d3:e7:e3:cf:20:fe:f8:
         73:d0:32:46:18:04:ef:d0:5c:b7:29:a7:8f:21:db:fb:81:8e:
         e0:43:0c:93:8f:aa:b4:3d:9f:ae:68:f3:01:e1:ff:26:78:ec:
         af:2c:93:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:54 2025 by rpki-client