Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File:                     Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier:          Todq+WlOH0DK/REn/wjlQ1fTOSv67xrNb6cI5T4bDtc=
Subject key identifier:   C9:6D:C7:2B:4D:15:ED:54:88:9B:1F:AB:73:D0:8B:CC:14:13:A9:95
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer:       /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial:       0198D66111CE149A79785121EE9E60D028EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number:          02D0
Signing time:             Sat 23 Aug 2025 10:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:22 +0000
Files and hashes:         1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: vLvXodakCKS9bovmRMZUSKH+dF7O08bkDRn6AmRVi78=)
                          2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:11:ce:14:9a:79:78:51:21:ee:9e:60:d0:28:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
        Validity
            Not Before: Aug 23 10:02:22 2025 GMT
            Not After : Aug 24 10:02:22 2025 GMT
        Subject: CN=c96dc72b4d15ed54889b1fab73d08bcc1413a995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:8e:f1:17:bf:06:71:4f:58:76:75:69:5e:
                    28:ee:23:be:e1:a5:27:2e:19:a3:fd:12:f3:27:fe:
                    96:39:e8:3c:97:7c:c8:9c:c5:61:36:ff:ee:07:6a:
                    9c:44:29:71:1c:f7:d7:26:5a:b4:d0:ea:d2:7a:e2:
                    9f:62:dd:ca:e4:b8:30:81:ff:48:6a:bd:37:8d:c4:
                    30:77:85:a4:70:91:04:89:c8:76:06:85:5c:ff:50:
                    f9:b4:8a:26:49:c6:50:fb:fa:88:86:67:58:a5:56:
                    4d:69:fb:de:29:20:8a:aa:e4:33:2b:5f:ae:f7:40:
                    ba:75:5f:3d:3f:7f:78:9e:c8:c5:ed:0f:4d:7a:2f:
                    4c:e2:f0:9c:5c:1d:e8:84:29:6e:1e:df:38:21:5c:
                    78:25:e7:39:e4:c6:a6:c3:58:c1:7b:48:c0:68:31:
                    33:a8:3d:57:f3:22:09:37:3b:e6:ad:24:1f:f5:3b:
                    5b:b9:1b:54:21:be:10:d5:96:a5:35:ec:7a:b7:02:
                    19:62:93:28:bf:db:ca:51:4e:6a:97:bb:17:9c:1a:
                    ad:95:ad:bd:3b:df:c1:e5:b3:b8:33:9a:af:4c:72:
                    5b:ec:7d:34:d1:b3:79:e5:b2:68:c9:59:05:fc:79:
                    57:45:75:50:d3:d2:f5:25:23:eb:22:00:9f:6e:a5:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6D:C7:2B:4D:15:ED:54:88:9B:1F:AB:73:D0:8B:CC:14:13:A9:95
            X509v3 Authority Key Identifier:
                keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bf:4e:4d:a6:9c:34:5c:0b:51:e6:13:bf:f8:5b:ce:09:63:
         6d:28:99:26:15:0c:ac:78:37:1c:a8:a7:9f:01:92:9b:1f:cd:
         f0:ac:50:b4:12:53:73:a2:9b:70:83:82:da:4d:bd:5b:2d:ec:
         79:c2:d0:de:b8:90:98:18:9a:07:79:d7:02:e0:43:e2:b2:71:
         ce:72:2f:0f:f1:56:09:b4:8c:55:e9:7a:42:7e:51:87:9e:b4:
         03:ae:f5:08:13:9d:64:6f:a2:9e:5d:54:35:82:5a:c4:18:c9:
         c7:ef:df:56:62:42:22:7f:3f:fa:33:2e:c0:13:bc:16:8a:b2:
         96:3f:4e:7a:a9:66:10:43:b4:a8:ef:76:c8:18:06:08:0e:5d:
         08:ee:58:d0:01:47:63:04:41:ac:0e:e2:7f:a9:60:7b:63:84:
         fd:27:87:70:66:20:e2:d1:9d:90:9b:fc:e4:7e:d8:11:0d:83:
         ad:a2:86:81:8a:5b:78:e0:c2:e6:ab:4d:ff:db:3d:b9:24:ab:
         f8:c6:95:dd:bd:eb:08:e1:de:ea:11:26:25:05:2a:89:bf:59:
         5d:d2:2c:53:01:90:e4:a7:49:81:c3:9a:53:98:b0:07:a2:a2:
         66:67:7f:6f:23:4c:b5:c0:55:31:a2:83:04:5d:17:74:bd:e1:
         ba:15:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:16 2025 by rpki-client