Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File:                     bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier:          v6aLoKgt5/FFVG8vQ0EZcFmYvcjMQwIjV1yuoSNIRKw=
Subject key identifier:   4B:59:AC:71:40:94:D4:D1:D1:4C:5C:F3:67:74:7C:0E:A7:1F:FB:AC
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer:       /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial:       0198D705ABD6B465529C8CCBCC4E38A4D09C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number:          09A3
Signing time:             Sat 23 Aug 2025 13:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:09 +0000
Files and hashes:         1: _XpEMn72FeEctOAcMkQobteNSkY.roa (hash: bnxUUX45W8TpYP9Drk2/xMaW53mScgsvGUmVXogbW1Q=)
                          2: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: 2csSapx8mak/K8nlreun4kk1i3QmD6gGe9YjAs6UE/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:ab:d6:b4:65:52:9c:8c:cb:cc:4e:38:a4:d0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
        Validity
            Not Before: Aug 23 13:02:09 2025 GMT
            Not After : Aug 24 13:02:09 2025 GMT
        Subject: CN=4b59ac714094d4d1d14c5cf367747c0ea71ffbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:14:0e:6f:b5:e8:51:fe:14:88:0e:a1:99:
                    3e:3d:f2:05:e0:07:74:db:55:b4:86:36:c3:3f:7e:
                    d3:cd:86:ce:16:a0:4f:a4:65:98:9d:10:40:f5:b2:
                    a6:0b:cb:bb:42:5b:b9:3a:da:e4:91:db:ad:9d:2e:
                    ff:04:f8:3a:63:40:11:a1:25:a1:52:cb:d0:ba:da:
                    ff:89:38:92:af:d0:6c:86:e4:8a:b4:b7:97:56:e8:
                    6b:f9:a9:0a:e4:5a:f8:fe:90:bc:38:dc:65:79:d8:
                    65:ef:a5:06:64:14:86:b3:4e:74:f4:62:8d:3d:bd:
                    fd:b0:c6:86:70:a8:6f:99:5a:cf:77:0b:aa:41:f7:
                    5f:fb:40:db:c4:6e:6b:6c:df:ea:7b:bd:69:da:6b:
                    71:9c:d5:6d:20:81:4e:9d:52:d3:d8:b5:18:fe:0d:
                    d8:5b:23:61:4d:ea:53:5f:b7:60:d4:80:ef:b7:e4:
                    8c:ef:fb:2f:78:55:cc:3e:f4:d1:81:f0:72:fc:ce:
                    bb:00:b9:98:0d:3c:0c:39:bc:a0:1a:df:90:4b:94:
                    38:c8:11:92:57:d3:06:fc:b0:71:a1:6d:d3:92:fe:
                    07:f8:38:80:3c:e0:46:09:0b:be:6c:de:35:5b:fa:
                    c2:a5:d0:69:ae:94:35:18:d2:0c:ed:1c:38:9f:8c:
                    d3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:59:AC:71:40:94:D4:D1:D1:4C:5C:F3:67:74:7C:0E:A7:1F:FB:AC
            X509v3 Authority Key Identifier:
                keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c5:e8:ee:46:03:70:3d:4c:11:26:1f:eb:e6:e1:d9:55:44:
         f8:cb:50:8d:04:dd:1d:c2:9f:01:ad:d1:f9:42:a2:29:ee:4e:
         af:d0:0d:d3:87:73:6e:a8:38:04:2d:52:93:ff:84:92:f7:e7:
         61:10:34:e0:89:5c:da:7a:64:77:8b:da:d7:9d:ae:d4:2f:f8:
         26:28:09:af:04:6d:0f:80:2d:9c:d2:07:21:05:20:17:54:1b:
         49:68:3a:29:3a:e6:12:da:88:75:7a:9a:5f:25:e7:97:d2:bf:
         1e:a9:6e:fe:87:f2:29:2d:c8:a2:3a:ba:6e:a9:fb:e4:fe:73:
         ce:88:c2:f7:ef:c2:2b:70:68:61:5f:f1:b1:c7:1e:46:68:20:
         65:2a:2b:6d:7c:92:dd:57:aa:b5:91:71:07:66:ae:4a:6f:11:
         8a:cf:5b:f6:c2:d2:37:d2:e0:30:b9:fa:31:f0:a5:10:e0:c1:
         44:ce:fb:84:65:e6:12:ec:8b:ee:b8:b4:7c:c8:9e:77:e2:34:
         11:7a:a3:69:59:ba:41:13:01:74:72:b6:85:01:92:8b:66:3b:
         19:cd:22:d6:40:98:94:e7:41:a9:27:fb:b2:97:1a:e3:e5:94:
         89:dc:2f:a2:23:5e:dc:7b:93:68:f4:36:8e:7c:4a:e3:70:81:
         29:72:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:16 2025 by rpki-client