Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File:                     tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier:          HFNXPsMf7WYYc1uIJCvM2t+oAxX1/WSnvSRjS1j1UjM=
Subject key identifier:   6C:24:32:79:FF:3E:9E:E0:19:16:2A:A1:0A:20:BA:31:33:BF:DA:40
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer:       /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial:       0198D5BBC219F4210FB6F98A85FA63CBFA50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number:          06AD
Signing time:             Sat 23 Aug 2025 07:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:48 +0000
Files and hashes:         1: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: 9xGQN+ftGb4TbH1vfsg1inRG54pDcLe8XgEPWL9ZJRY=)
                          2: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (hash: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:c2:19:f4:21:0f:b6:f9:8a:85:fa:63:cb:fa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
        Validity
            Not Before: Aug 23 07:01:48 2025 GMT
            Not After : Aug 24 07:01:48 2025 GMT
        Subject: CN=6c243279ff3e9ee019162aa10a20ba3133bfda40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:6e:83:36:f3:94:15:d5:e1:71:0a:37:30:
                    8a:49:89:4a:77:da:94:0c:f4:0c:b7:31:63:94:21:
                    37:96:41:e6:da:c6:40:b0:05:c3:e3:23:bc:b2:e1:
                    61:9c:2b:0a:3d:e2:b6:b2:6c:b9:d3:b4:0d:97:80:
                    f0:30:ff:67:43:7f:84:4a:63:24:b7:db:2a:78:f0:
                    03:f0:33:57:e7:e9:5a:63:e4:ab:9d:87:e5:bc:98:
                    f8:0c:0d:1b:2a:b2:ea:2c:cf:78:94:7d:04:e6:5d:
                    66:b1:c7:a1:b0:32:1d:56:04:e8:e3:ac:10:4b:85:
                    ca:1a:fd:e8:dd:ed:8d:f5:ed:16:01:6e:ba:ee:15:
                    08:86:b0:bc:0e:cd:75:e5:66:7a:b5:a0:e7:f6:72:
                    5e:b8:9b:34:0c:aa:87:d6:63:46:01:89:c0:6b:9a:
                    22:47:2b:ec:c7:68:8a:9c:25:5c:1b:cf:09:2b:1d:
                    33:1f:8b:47:4b:99:bf:e1:c2:82:56:50:98:ae:08:
                    4e:e0:e6:45:d6:2b:9d:d9:cf:bb:32:28:01:75:72:
                    33:4f:70:06:c4:c1:2c:dc:41:48:b4:ed:ea:58:31:
                    b5:3f:97:24:ea:54:a1:67:af:15:c9:ca:33:a0:37:
                    5b:e9:3a:ae:dd:76:49:97:14:c8:1c:b9:e3:61:b2:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:24:32:79:FF:3E:9E:E0:19:16:2A:A1:0A:20:BA:31:33:BF:DA:40
            X509v3 Authority Key Identifier:
                keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:c9:57:dc:4e:bc:bf:64:fd:0c:46:7a:2e:d8:eb:59:b2:a7:
         05:38:bf:c5:0e:1b:67:84:58:9d:01:fa:82:bd:0e:d9:74:ac:
         88:75:f7:f8:86:a6:08:46:0e:f7:e3:65:a6:1e:ac:92:27:f0:
         4c:c3:49:43:29:ef:c0:01:ac:17:24:b4:ec:d3:62:86:46:25:
         18:9d:f4:49:0b:80:73:46:7c:a0:ba:32:c8:08:b5:26:7a:b6:
         c9:77:9c:39:f4:15:6d:41:d1:0f:bb:61:b7:27:b8:0a:12:e6:
         7a:bf:60:4c:24:dd:a7:9b:ce:64:1b:76:3a:15:2b:5c:de:b0:
         35:b7:e6:cb:d4:89:11:55:ca:c7:08:a2:62:f7:4f:67:85:f5:
         d0:c2:bc:65:ac:a4:84:b7:1a:ef:be:71:e7:98:ad:e0:f6:5d:
         b4:dd:ab:01:42:eb:93:be:65:ab:55:06:67:eb:d5:5d:28:76:
         7e:70:c1:aa:2c:1e:36:5d:c8:03:50:ec:de:39:b6:6e:0c:52:
         f9:d6:b1:24:97:17:48:9b:05:91:28:69:7d:f5:c6:34:a6:1f:
         9d:e1:fc:0d:b6:a8:c3:1c:57:8b:cf:e0:dd:50:35:37:25:b3:
         33:9f:13:04:06:ca:aa:7c:8b:b1:6c:d9:77:9b:20:cc:59:e8:
         5a:d8:d9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:48 2025 by rpki-client