Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File:                     boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier:          6IRa5ABWKJUG+qAxyJyFJjuKyXvnI1EZEBRZVdhMMF8=
Subject key identifier:   DE:9B:9E:D1:79:3A:8E:93:4D:80:C6:CA:9E:2B:53:56:90:B1:35:F7
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer:       /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial:       0198D47335E4BEDBEAFF1678B1FF4A3639AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 01:02:56 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:56 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:56 +0000
Files and hashes:         1: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: JWjYnd+2ZS0HDCRi30rnfGh+CPl8BdZ3ge9+BufKzbk=)
                          2: xL1waNLH89tu16gqR_InkZtP0MM.roa (hash: UbiBAyPW5WcKpHG6QUDn1a6TZhLyyQKfdK3u0M9NdEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:35:e4:be:db:ea:ff:16:78:b1:ff:4a:36:39:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
        Validity
            Not Before: Aug 23 01:02:56 2025 GMT
            Not After : Aug 24 01:02:56 2025 GMT
        Subject: CN=de9b9ed1793a8e934d80c6ca9e2b535690b135f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6f:e0:29:c1:48:80:c0:43:db:4d:05:d1:24:
                    d3:ea:a1:77:89:02:bd:a5:f3:02:1c:46:45:f1:3e:
                    6b:86:a2:64:a5:b6:1d:af:6a:f9:6b:13:1a:ef:87:
                    a8:ed:ba:96:6f:f8:b3:46:cd:61:7e:6f:ef:7b:63:
                    b4:74:e8:ac:53:f6:0f:31:6a:09:20:50:05:17:38:
                    83:16:25:b2:e7:5f:9f:d0:d6:c0:27:bc:1e:6f:3b:
                    a8:5e:03:cb:76:7b:7d:e0:1d:82:1e:ad:8d:ed:32:
                    ff:77:d1:70:c8:6d:e7:9d:d2:6d:5b:42:db:4d:1a:
                    19:58:92:a3:d6:df:c7:ee:3f:3a:d1:b4:d4:a7:11:
                    18:e5:36:42:64:9e:23:23:a1:d9:6f:38:d1:e6:e9:
                    1d:e5:7f:13:bf:82:5a:bf:ce:89:a8:d6:25:b5:48:
                    19:16:d7:18:f9:ee:c0:b1:4c:ed:04:96:44:de:e0:
                    5d:0f:d7:11:9e:1f:97:54:cc:b4:88:8d:68:c0:cf:
                    be:4e:49:9a:25:5e:e5:45:de:3c:bd:fa:c9:a3:32:
                    c2:3f:2a:d5:96:83:8e:8e:5e:6e:df:94:d1:8b:bd:
                    1d:7b:95:6f:51:09:c1:df:ae:09:31:99:1f:08:31:
                    fd:7e:6f:10:f2:3d:7e:bf:a7:95:c9:d1:b1:ed:87:
                    d8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9B:9E:D1:79:3A:8E:93:4D:80:C6:CA:9E:2B:53:56:90:B1:35:F7
            X509v3 Authority Key Identifier:
                keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f2:7e:b3:c6:48:15:35:ea:91:92:56:a5:bb:54:4e:c2:51:
         aa:88:12:5b:ca:b9:de:d8:18:3e:68:4f:e8:e6:26:d7:2a:4c:
         22:96:f8:25:fd:40:18:ef:c4:7f:34:77:14:de:c1:2e:75:3a:
         50:ab:a5:f8:1c:cf:f5:62:97:e8:20:7d:d4:03:fd:d6:db:a3:
         7a:9c:15:e0:8b:9f:bf:89:26:dd:71:e4:1f:a5:d2:2d:7c:68:
         bb:f4:90:25:71:15:0b:1f:f3:c7:e1:11:df:3e:28:ed:06:4d:
         16:aa:35:0e:6a:c4:40:b6:df:ac:21:1c:a1:01:86:0b:ac:29:
         d7:c2:de:af:f4:b3:69:84:ec:df:c7:0f:42:3e:e0:34:5b:af:
         1b:ed:37:68:03:e0:d9:3b:48:25:a4:b9:02:53:de:7d:bc:05:
         6d:c5:36:f9:e4:f0:53:5f:ce:bf:fb:d9:f9:ea:1f:9b:03:20:
         ce:7b:e6:8e:22:fa:5f:b6:40:5d:50:48:fd:2d:7f:87:2f:4d:
         28:8e:d2:7f:4c:e9:60:23:56:15:66:61:88:72:5c:1d:c9:0f:
         ed:5b:1d:16:ea:46:d0:4b:bb:eb:11:71:df:d0:cf:39:96:c5:
         2f:cb:65:87:bd:d7:f6:49:a0:79:51:61:6b:fe:39:7a:95:08:
         6c:df:c7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:40 2025 by rpki-client